Hands symbolizing balance between humans and AI agents

Balanced Autonomy

Human-owned USDC vaults for AI agent payments on Solana mainnet.

Live on Solana mainnet

USDC-native policy controls

Human approvals for exceptions

0/2

Agent proposal plus human approval above limit

$0

Example agent auto-spend limit

0/7

Autonomous operation under policy

Protocol flow

One vault policy. Clear approval paths.

01

Set policy

The human creates a vault, sets a USDC spending limit, manages whitelisted recipients, and keeps pause and recovery controls.

02

Agent executes

The agent wallet can send USDC directly when the payment stays within the vault's configured policy.

03

Exception proposed

If a payment is above the limit and not whitelisted, the agent creates a proposal with the recipient, amount, and context.

04

Human approves

The human reviews the proposal in the app and signs approval or rejection from their own wallet.

Safety model

Autonomy by default. Consent for exceptions.

Tandem Wallet gives agents enough room to operate productively while preventing uncapped spending. Human approval is only requested for out-of-policy actions, so safety does not block normal operation.

Proposal review

Above-limit payments become explicit proposals with the recipient, token account, amount, and status visible before approval.

Clear intent prompts

The human receives what the agent wants to spend, how much, and why before approving from their own wallet.

Developer-ready

Integrate in your AI agent stack.

Policy engine for vault-level USDC spending limits

CLI and MCP connector for agent runtimes

Browser wallet approvals for human owners

Auditable event trail for sends, proposals, and approvals

Product roadmap

What ships next

Phase 1 · May

Complete

Audit round complete

Security review work is complete, with resolved findings reflected in the current mainnet vault-first build.

Token

$TANDEM protocol token

Vault-first release

Agents get wallets. Humans keep control.

Tandem's mainnet app is usable without holding $TANDEM. The token is live on Solana, while staking and fee sharing remain planned rollout areas.

0.25%Protocol fee per transaction

0$TANDEM required for vault usage

PlannedStaking is not live yet

Allocation and fee policy

  • Team tokens are reserved for market makers, exchange relationships, and marketing efforts.
  • Protocol fees route to treasury while staking is inactive.
  • The planned staking model routes 50% of protocol fees to active stakers as USDC and 50% to treasury.

Mechanics

Fees route to treasury while staking is inactive

Fulfilled USDC vault transactions use the current 0.25% protocol fee. Staking is planned, but it is not live in the public app today.

  • Current vault usage does not require holding $TANDEM.
  • Protocol fees route to treasury while staking is inactive.
  • Future staking rollout will be announced through official channels.

Contract

Solana token address

8naeAc6qBpZmesBtJB34TwX55MhVR8bBUMs4JayUpump

Trade on PumpSwap

Public Solana token address. Staking is not live in the app today.

Tandem Wallet

Open a mainnet vault for controlled agent spending.