{
  "data": {
    "a": {
      "slug": "self-agent-vault",
      "name": "Agent Vault by Self",
      "vendor": "SocialConnect Labs, Inc. (Self Labs)",
      "vendorUrl": "https://agentvault.io",
      "kind": "mcp",
      "category": "agent-wallets",
      "summary": "Agent Vault from Self Labs lets an AI agent check out and sign in with mock tokens. Its proxied browser types the real card number or password at the fill. Agents connect by MCP, a Playwright SDK or HTTP.",
      "url": "https://www.anchorterminal.com/tools/self-agent-vault",
      "markdownUrl": "https://www.anchorterminal.com/tools/self-agent-vault.md",
      "slimMarkdownUrl": "https://www.anchorterminal.com/tools/self-agent-vault.min.md",
      "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/self-agent-vault.json",
      "license": "Proprietary hosted service. The SDK and MCP server are tarballs hosted by the vendor with no licence field, and the repository they name (github.com/selfxyz/agent-vault) is not public. The checkout recipe registry, selfxyz/agent-checkout-skill, is MIT",
      "transports": [
        "http",
        "stdio"
      ],
      "remoteUrl": "https://mcp.agentvault.io/mcp",
      "packages": [],
      "auth": "mixed",
      "authNotes": "The hosted MCP server at https://mcp.agentvault.io/mcp uses OAuth. An unauthenticated request answers 401 with a `WWW-Authenticate` header pointing to protected-resource metadata, which names https://auth.agentvault.io. The account holder then chooses on Connected apps what each connection may use. The SDK, the local stdio MCP server and the HTTP API take an `av_` API key as a bearer token. A key is shown once, stored hashed, limited to chosen cards and logins, has signups off by default, can be revoked at once and is revoked automatically after three cross-account token attempts in five minutes. Recipe reads need no key.",
      "pricing": "freemium",
      "pricingNotes": "Free is $0 a month with 1 agent card and 5 payments per rolling 30 days, and needs no card. Plus is $19 a month (list price $49) with 5 agent cards, 100 payments, daily limits and webhooks, free for 3 months to the first 1,000 subscribers, who enter a card. Enterprise is priced on request (https://docs.agentvault.io/dashboard/billing.md, checked 2026-10-17).",
      "priceSummary": "$19 / mo",
      "where": "both",
      "x402": {
        "level": "no",
        "evidence": "No x402, MPP or L402 in the docs index, the 66 Markdown docs pages, the home page or the launch post. Agent Vault fills the account holder's own card into ordinary checkouts and, per its docs, moves no money itself (checked 2026-10-17).",
        "endpoints": []
      },
      "toolCount": 30,
      "popularity": {
        "githubStars": null,
        "npmWeekly": null,
        "pypiWeekly": null,
        "asOf": "2026-10-17"
      },
      "docsUrl": "https://docs.agentvault.io",
      "llmsTxt": "https://docs.agentvault.io/llms.txt",
      "capabilities": [
        "wallet.spend-limits",
        "payments.card-token",
        "payments.card",
        "secrets.store",
        "browser.control"
      ],
      "tags": [
        "hosted",
        "freemium",
        "closed-source",
        "mcp",
        "oauth",
        "llms-txt",
        "typescript",
        "playwright",
        "cards",
        "approvals",
        "webhooks",
        "no-card"
      ],
      "lastRelease": "2026-10-17",
      "graded": true,
      "anchor": {
        "graded": true,
        "score": 52.4,
        "grade": "D",
        "agentReady": false,
        "rank": 823,
        "ranked": true,
        "rankOf": 1133,
        "categoryRank": 7,
        "methodology": "0.4",
        "run": "2026-10-01",
        "scores": {
          "ergonomics": 66,
          "maintenance": 48,
          "payments": 30,
          "reliability": 40,
          "schema": 76,
          "security": 76,
          "transparency": 47
        },
        "pending": [
          "performance",
          "tasks"
        ],
        "assessment": {
          "confidence": "medium",
          "date": "2026-10-17"
        },
        "negative": -4,
        "negativeNotes": [
          "-4, misleading claims about where card numbers are exposed, checked first-hand on 17 October 2026. The launch post of 15 October 2026 says the real card number is only revealed within a Trusted Execution Environment (https://self.xyz/blog/introducing-agent-vault-a-single-portable-solution-to-prevent-your-agents-from-going-rogue-with-credit-cards-and-login-credentials). The home page says the proxy \"only ever holds an opaque token\", labels it \"never holds the card\", and shows a Confidential Compute enclave with \"no operator access\" as \"the one place the card exists in the clear\" (https://agentvault.io/). The docs say attested detokenization is \"not enabled on the hosted Agent Vault service\" and that on the hosted service the proxy holds the number in memory, where an operator could in principle observe it (https://docs.agentvault.io/security/attested-detokenization.md, https://docs.agentvault.io/security/model.md). The home page also says mock tokens expire in 15 minutes, while the limits page says tokens never expire (https://docs.agentvault.io/reference/limits.md)."
        ],
        "verdict": "Scoped, revocable keys, OAuth on the hosted MCP server, spending caps, approvals and a documented threat model are designed to keep real card numbers and passwords out of the agent's context. The home page and launch post say cards are revealed only in an attested enclave, while the docs say that path is off on the hosted service.",
        "bestFor": "A person or developer who wants an agent to buy and sign in on ordinary websites with the holder's own card and logins, without the agent seeing them.",
        "strengths": [
          "The agent handles only mock tokens. The proxy types the real card number, CVV or password at the fill, after checking the key's scope, the site and the card's limits",
          "API keys are limited to chosen cards and logins, can be revoked at once, and are revoked automatically after three cross-account token attempts in five minutes",
          "Agent cards cap spend per transaction, day, week and rolling 30 days, and purchases above a set amount wait for the holder's approval",
          "The docs list 104 error codes with retry guidance, and every MCP answer starts with a machine-readable status line",
          "All 29 tools in the MCP package carry readOnlyHint and destructiveHint annotations, and the hosted server returns the first answer to a retransmitted write for 2 minutes"
        ],
        "weaknesses": [
          "The home page and launch post say cards are revealed only in an attested enclave. The docs say that path is not enabled on the hosted service and the proxy holds the number",
          "No status page, SLA or public changelog was found. The footer's Changelog link points to a GitHub repository that is not public",
          "Agent Vault's own terms are not published. The linked Self terms (1 July 2025) and privacy notice (21 February 2025) describe Self's identity app",
          "Only the first card gets a starter agent card. Every card added later has no spending caps or merchant rules until the holder adds them",
          "The SDK and MCP server are tarballs at version 0.0.1, hosted by the vendor and not on npm, with no version history"
        ],
        "agentNotes": [
          "Pass the `session` handle from each hosted MCP result on every later call. Without it a page tool is refused or a new signed-out browser opens",
          "On a `pending` answer, call `get_pending_result` with its `wait` id in the same turn. Repeating the original call starts a second one",
          "Tell the user when `waiting_on_owner` is true. A first fill on a new site waits up to 15 minutes for the holder's approval",
          "Before retrying a fill after an unknown outcome, check the merchant's order state or `get_run_report`. Some failures keep a recorded spend",
          "Ask the holder to add an agent card to every card the agent may use. A card marked No limits accepts any amount on authorised sites"
        ],
        "metrics": {
          "kind": "remote",
          "measured": false
        },
        "reviewCount": 4,
        "avgRating": 2.8,
        "history": [
          {
            "basis": "public evidence",
            "confidence": "medium",
            "grade": "D",
            "methodology": "0.4",
            "pending": [
              "performance",
              "tasks"
            ],
            "run": "2026-10-01",
            "runLabel": "October 2026 research run",
            "score": 52.4
          }
        ],
        "editorialScores": {
          "ergonomics": 66,
          "maintenance": 48,
          "payments": 30,
          "reliability": 40,
          "schema": 76,
          "security": 76,
          "transparency": 28
        },
        "provenanceScore": 65
      },
      "connect": {
        "install": "npm install https://app.agentvault.io/sdk/agentvault-playwright.tgz",
        "http": "curl -sG -H \"Authorization: Bearer $SELF_AGENT_PAY_API_KEY\" \"https://api.agentvault.io/v1/tokens\" --data-urlencode \"url=https://shop.example.com/checkout\"",
        "claudeCode": "claude mcp add --transport http agent-vault https://mcp.agentvault.io/mcp"
      },
      "letme": {
        "capability": "https://letme.dev/wallet.spend-limits",
        "tool": "https://letme.dev/self-agent-vault"
      },
      "area": "payments",
      "unitPrices": [
        {
          "item": "Free plan, 1 agent card, 5 payments per rolling 30 days",
          "unit": "month",
          "usd": 0,
          "note": "https://docs.agentvault.io/dashboard/billing.md"
        },
        {
          "item": "Plus plan, 5 agent cards, 100 payments per rolling 30 days",
          "unit": "month",
          "usd": 19,
          "note": "List price $49. Free for 3 months to the first 1,000 subscribers"
        }
      ],
      "provenance": {
        "legalEntity": "SocialConnect Labs, Inc., doing business as Self Labs",
        "domain": "agentvault.io",
        "domainRegistered": "",
        "endpointOnVendorDomain": true,
        "terms": "https://self.xyz/terms",
        "privacy": "https://self.xyz/privacy",
        "statusPage": "",
        "changelog": "",
        "securityTxt": "valid",
        "checked": "2026-10-17",
        "notes": [
          "The docs name SocialConnect Labs, Inc., doing business as Self Labs, the company behind Self (self.xyz), as the maker, and point to Self's terms and privacy notice. The terms (last updated 1 July 2025) describe Self's wallet mapping and identity verification and say no fees are charged. The privacy notice is dated 21 February 2025. Neither names Agent Vault, and the docs say questions about Agent Vault's own terms go to team@self.xyz.",
          "agentvault.io/.well-known/security.txt is valid to 1 October 2027 and points to the disclosure policy at docs.agentvault.io/security/disclosure.",
          "No status page was found, and status.agentvault.io has no DNS record. The footer's Changelog link points to github.com/selfxyz/agent-pay/releases, which a clone could not read.",
          "The domain's registration date was not checked."
        ],
        "score": 65
      },
      "pageJsonUrl": "https://www.anchorterminal.com/tools/self-agent-vault.json",
      "live": {
        "slug": "self-agent-vault",
        "probe": {
          "target": "https://mcp.agentvault.io/mcp",
          "method": "get",
          "lastAt": "2026-10-18T00:14:55.302198381Z",
          "lastOk": true,
          "lastStatus": 405,
          "lastMs": 176,
          "authRequired": false,
          "uptime24h": 100,
          "uptime30d": 100,
          "p50ms24h": 581,
          "p95ms24h": 595,
          "samples24h": 24,
          "samples30d": 24,
          "days": [
            {
              "date": "2026-10-17",
              "probes": 21,
              "ok": 21
            },
            {
              "date": "2026-10-18",
              "probes": 3,
              "ok": 3
            }
          ]
        },
        "pages": [
          {
            "url": "https://self.xyz/privacy",
            "kind": "privacy",
            "status": 200,
            "checkedAt": "2026-10-17T23:09:44.873032312Z",
            "changedAt": "0001-01-01T00:00:00Z",
            "fingerprint": "0b7f648185e0"
          },
          {
            "url": "https://self.xyz/terms",
            "kind": "terms",
            "status": 200,
            "checkedAt": "2026-10-17T23:09:47.090078436Z",
            "changedAt": "0001-01-01T00:00:00Z",
            "fingerprint": "81c401525c3a"
          }
        ],
        "mcpTools": {
          "url": "https://mcp.agentvault.io/mcp",
          "checkedAt": "2026-10-17T22:40:30.409481198Z",
          "status": "auth",
          "note": "asks for credentials before listing its tools",
          "changedAt": "2026-10-17T22:40:30.409481198Z"
        },
        "updatedAt": "2026-10-18T00:14:55.302198381Z"
      }
    },
    "answer": "Agent Vault by Self scores 52.4 (D) on agent readiness against Sponge Wallet's 43.2 (E), and leads in 6 of 7 scored categories. Sponge Wallet leads on payments \u0026 pricing.",
    "b": {
      "slug": "sponge-wallet",
      "name": "Sponge Wallet",
      "vendor": "Sponge Inc.",
      "vendorUrl": "https://paysponge.com",
      "kind": "http-api",
      "category": "agent-wallets",
      "summary": "Sponge Wallet is a hosted wallet for AI agents. It holds stablecoins on Ethereum, Base, Tempo and Solana, pays x402 and MPP endpoints, issues virtual cards, and is reached by a REST API, an MCP server, SDKs and a CLI.",
      "url": "https://www.anchorterminal.com/tools/sponge-wallet",
      "markdownUrl": "https://www.anchorterminal.com/tools/sponge-wallet.md",
      "slimMarkdownUrl": "https://www.anchorterminal.com/tools/sponge-wallet.min.md",
      "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/sponge-wallet.json",
      "license": "Proprietary service under Sponge's terms of service. The SDK and CLI packages on npm are MIT, and the repository they name is private",
      "transports": [
        "http"
      ],
      "remoteUrl": "https://api.wallet.paysponge.com",
      "packages": [
        {
          "registry": "npm",
          "name": "@paysponge/sdk"
        },
        {
          "registry": "npm",
          "name": "spongewallet"
        },
        {
          "registry": "pypi",
          "name": "paysponge"
        }
      ],
      "auth": "mixed",
      "authNotes": "Self-serve. An agent calls `POST /api/agents/register` with no credential and, with `agentFirst`, receives an agent API key at once. A person claims the wallet later through a claim URL. Requests carry the key as a bearer token plus a `Sponge-Version` header. Master keys, created in the dashboard, manage agents. The MCP server also accepts OAuth from app connectors.",
      "pricing": "free",
      "pricingNotes": "No fee schedule for the wallet was found. The home page's structured data lists a price of 0, a wallet needs no card or contract to start, and network and venue costs apply. Sponge Card (US) has no annual fee and charges 1 per cent on international transactions (https://paysponge.com/legal/sponge-card-terms-us, checked 2026-10-09). Fees on swaps, bridges, bank transfers and onramps were not found.",
      "priceSummary": "Free",
      "where": "hosted",
      "x402": {
        "level": "partial",
        "evidence": "The wallet pays x402 endpoints through `POST /api/x402/fetch`, `wallet.x402Fetch()` and `spongewallet pay x402`, pays MPP endpoints on Tempo, and creates x402 payment links. Sponge's own wallet API is not paid over either protocol (https://docs.paysponge.com/wallet/x402-payments.md; https://docs.paysponge.com/wallet/mpp-payments.md, checked 2026-10-09).",
        "endpoints": []
      },
      "toolCount": null,
      "popularity": {
        "githubStars": null,
        "npmWeekly": 126,
        "pypiWeekly": 20,
        "asOf": "2026-10-09"
      },
      "docsUrl": "https://docs.paysponge.com",
      "llmsTxt": "https://docs.paysponge.com/llms.txt",
      "openapi": "https://docs.paysponge.com/api-reference/public-openapi.json",
      "capabilities": [
        "wallet.onchain",
        "wallet.spend-limits",
        "payments.x402",
        "payments.card",
        "wallet.custody"
      ],
      "tags": [
        "hosted",
        "free",
        "openapi",
        "llms-txt",
        "mcp",
        "typescript",
        "python",
        "cli",
        "wallet",
        "x402",
        "mpp",
        "virtual-cards",
        "stablecoins",
        "closed-source",
        "skills"
      ],
      "lastRelease": "2026-07-07",
      "graded": true,
      "anchor": {
        "graded": true,
        "score": 43.2,
        "grade": "E",
        "agentReady": false,
        "rank": 1006,
        "ranked": true,
        "rankOf": 1133,
        "categoryRank": 9,
        "methodology": "0.4",
        "run": "2026-10-01",
        "scores": {
          "ergonomics": 43,
          "maintenance": 27,
          "payments": 70,
          "reliability": 13,
          "schema": 66,
          "security": 48,
          "transparency": 39
        },
        "pending": [
          "performance",
          "tasks"
        ],
        "assessment": {
          "confidence": "medium",
          "date": "2026-10-09"
        },
        "negative": 0,
        "verdict": "An agent can register a wallet with one unauthenticated call and pay x402 or MPP endpoints under daily, weekly and monthly limits enforced on Sponge's servers. No status page, rate limits, fee schedule, custody statement or security contact was found, the terms run to eleven short clauses, and the SDK was last published on 7 July 2026.",
        "bestFor": "A developer who wants an agent to hold stablecoins and pay x402 or MPP endpoints within minutes, with cards, bank rails and Hyperliquid or Polymarket trading behind the same key.",
        "strengths": [
          "`POST /api/agents/register` with `agentFirst` returns an agent key at once, and a person claims the wallet later through a claim URL",
          "Daily, weekly and monthly spending limits are set per agent and enforced server-side, with address allowlists that return 403",
          "One wallet pays x402 and MPP endpoints, opens MPP sessions on Tempo and creates x402 payment links",
          "Agent keys cover one agent and can be regenerated. Master keys create agents and, per the docs, never touch wallets",
          "Public OpenAPI 3.0.3 file with 57 operations, llms.txt, Markdown docs and a 73 KB skill file written for agents"
        ],
        "weaknesses": [
          "No status page, SLA or numeric rate limit was found, and the terms say the service may be offered in beta",
          "Who holds the wallet keys is not stated in the docs or the terms. The skill file calls the wallet managed",
          "The terms of 30 June 2026 are eleven short clauses that do not mention wallets, funds, custody or fees",
          "No security.txt, disclosure policy, certification or bug bounty was found",
          "`@paysponge/sdk` was last published on 7 July 2026 after 115 versions in five months. The source repository is private",
          "The transfers page separates `wallet.transfer()` from enforced helpers that apply allowlists and limits, while another page says limits apply to every transfer"
        ],
        "agentNotes": [
          "Send `Sponge-Version` on every REST request. The skill file marks it required and the API answers with version status headers",
          "Use `evmTransfer` and `solanaTransfer`, the helpers the docs describe as enforcing allowlists and spending limits, not plain `transfer`",
          "Store the `apiKey` from registration at once. It is returned a single time, and losing it means registering again",
          "Call `GET /api/discover/{serviceId}` before `POST /api/paid/fetch`. The skill file says direct service URLs fail with auth errors",
          "Treat `card details` output as secret. It returns an encrypted card number and CVC with a one-time `secret_key`"
        ],
        "metrics": {
          "kind": "remote",
          "measured": false
        },
        "reviewCount": 4,
        "avgRating": 3,
        "history": [
          {
            "basis": "public evidence",
            "confidence": "medium",
            "grade": "E",
            "methodology": "0.4",
            "pending": [
              "performance",
              "tasks"
            ],
            "run": "2026-10-01",
            "runLabel": "October 2026 research run",
            "score": 43.2
          }
        ],
        "editorialScores": {
          "ergonomics": 43,
          "maintenance": 27,
          "payments": 70,
          "reliability": 13,
          "schema": 66,
          "security": 48,
          "transparency": 27
        },
        "provenanceScore": 51
      },
      "connect": {
        "install": "npm install @paysponge/sdk",
        "http": "curl -sS -X POST https://api.wallet.paysponge.com/api/agents/register -H \"Sponge-Version: 0.2.2\" -H \"Content-Type: application/json\" -d '{\"name\":\"YourAgentName\",\"agentFirst\":true}'",
        "claudeCode": "claude mcp add -s user --transport http sponge https://api.wallet.paysponge.com/mcp --header \"Authorization: Bearer \u003cSPONGE_API_KEY\u003e\""
      },
      "letme": {
        "capability": "https://letme.dev/wallet.onchain",
        "tool": "https://letme.dev/sponge-wallet"
      },
      "area": "payments",
      "unitPrices": [
        {
          "item": "Sponge Card international transaction (US terms)",
          "unit": "pct",
          "usd": 1,
          "note": "no annual fee, 0 per cent APR"
        }
      ],
      "provenance": {
        "legalEntity": "Sponge Inc.",
        "domain": "paysponge.com",
        "domainRegistered": "2026-01-09",
        "endpointOnVendorDomain": true,
        "terms": "https://paysponge.com/terms",
        "privacy": "https://paysponge.com/privacy",
        "statusPage": "",
        "changelog": "",
        "securityTxt": "none",
        "checked": "2026-10-09",
        "notes": [
          "The terms of service (updated 30 June 2026) say they govern the Sponge platform and related services. They are eleven short clauses, name no legal entity or address, and choose the laws of the United States.",
          "The site footer names Sponge Inc. No company address or registration was found on the pages read.",
          "The privacy policy (updated 30 June 2026) covers the platform and related services. A separate account opening privacy notice and card terms cover the Sponge Card, whose issuer is Rain.",
          "The API and MCP server answer at api.wallet.paysponge.com and the dashboard at wallet.paysponge.com. The MCP resource metadata names spongewallet.com for documentation.",
          "paysponge.com/.well-known/security.txt returned 404. No status page or changelog was found.",
          "RDAP for paysponge.com gives a registration date of 2026-01-09."
        ],
        "score": 51
      },
      "pageJsonUrl": "https://www.anchorterminal.com/tools/sponge-wallet.json",
      "live": {
        "slug": "sponge-wallet",
        "probe": {
          "target": "https://api.wallet.paysponge.com",
          "method": "get",
          "lastAt": "2026-10-18T00:14:57.509798652Z",
          "lastOk": true,
          "lastStatus": 404,
          "lastMs": 220,
          "authRequired": false,
          "uptime24h": 100,
          "uptime30d": 100,
          "p50ms24h": 256,
          "p95ms24h": 560,
          "samples24h": 253,
          "samples30d": 2168,
          "days": [
            {
              "date": "2026-10-09",
              "probes": 169,
              "ok": 169
            },
            {
              "date": "2026-10-10",
              "probes": 247,
              "ok": 247
            },
            {
              "date": "2026-10-11",
              "probes": 247,
              "ok": 247
            },
            {
              "date": "2026-10-12",
              "probes": 247,
              "ok": 247
            },
            {
              "date": "2026-10-13",
              "probes": 248,
              "ok": 248
            },
            {
              "date": "2026-10-14",
              "probes": 249,
              "ok": 249
            },
            {
              "date": "2026-10-15",
              "probes": 253,
              "ok": 253
            },
            {
              "date": "2026-10-16",
              "probes": 252,
              "ok": 252
            },
            {
              "date": "2026-10-17",
              "probes": 253,
              "ok": 253
            },
            {
              "date": "2026-10-18",
              "probes": 3,
              "ok": 3
            }
          ]
        },
        "versions": [
          {
            "registry": "npm",
            "name": "@paysponge/sdk",
            "version": "0.1.147",
            "seenAt": "2026-10-17T02:19:17.804817308Z"
          },
          {
            "registry": "npm",
            "name": "spongewallet",
            "version": "0.1.127",
            "seenAt": "2026-10-17T02:19:18.64033502Z"
          },
          {
            "registry": "pypi",
            "name": "paysponge",
            "version": "0.1.5",
            "released": "2026-05-17",
            "seenAt": "2026-10-17T02:19:20.01348096Z"
          }
        ],
        "npmWeekly": 85,
        "pypiWeekly": 1,
        "securityTxt": {
          "url": "https://paysponge.com/.well-known/security.txt",
          "state": "none",
          "checkedAt": "2026-10-17T15:52:32.392209801Z"
        },
        "llmsTxt": {
          "url": "https://docs.paysponge.com/llms.txt",
          "ok": true,
          "status": 200,
          "checkedAt": "2026-10-17T14:23:17.240947199Z"
        },
        "domain": {
          "domain": "paysponge.com",
          "registered": "2026-01-09",
          "source": "https://rdap.verisign.com/com/v1/domain/paysponge.com",
          "checkedAt": "2026-10-11T13:11:28.801140031Z"
        },
        "pages": [
          {
            "url": "https://paysponge.com/privacy",
            "kind": "privacy",
            "status": 200,
            "checkedAt": "2026-10-17T23:07:17.445207154Z",
            "changedAt": "0001-01-01T00:00:00Z",
            "fingerprint": "e0bb0a039144"
          },
          {
            "url": "https://paysponge.com/terms",
            "kind": "terms",
            "status": 200,
            "checkedAt": "2026-10-17T23:07:19.8472546Z",
            "changedAt": "0001-01-01T00:00:00Z",
            "fingerprint": "ec8eb426955c"
          }
        ],
        "updatedAt": "2026-10-18T00:14:57.509798652Z"
      }
    },
    "facts": [
      {
        "a": "MCP server",
        "b": "HTTP API",
        "name": "Kind"
      },
      {
        "a": "SocialConnect Labs, Inc. (Self Labs)",
        "b": "Sponge Inc.",
        "name": "Vendor"
      },
      {
        "a": "https://mcp.agentvault.io/mcp",
        "b": "https://api.wallet.paysponge.com",
        "name": "Hosted endpoint"
      },
      {
        "a": "HTTP, stdio",
        "b": "HTTP",
        "name": "Transports"
      },
      {
        "a": "OAuth or key",
        "b": "OAuth or key",
        "name": "Auth"
      },
      {
        "a": "Freemium",
        "b": "Free",
        "name": "Pricing"
      },
      {
        "a": "no",
        "b": "payer tooling only",
        "name": "x402"
      },
      {
        "a": "Proprietary hosted service. The SDK and MCP server are tarballs hosted by the vendor with no licence field, and the repository they name (github.com/selfxyz/agent-vault) is not public. The checkout recipe registry, selfxyz/agent-checkout-skill, is MIT",
        "b": "Proprietary service under Sponge's terms of service. The SDK and CLI packages on npm are MIT, and the repository they name is private",
        "name": "Licence"
      },
      {
        "a": "30",
        "b": "none",
        "name": "Tools exposed"
      },
      {
        "a": "no",
        "b": "no",
        "name": "Read-only variant documented"
      },
      {
        "a": "yes",
        "b": "yes",
        "name": "llms.txt"
      },
      {
        "a": "2026-10-17",
        "b": "2026-07-07",
        "name": "Last release"
      },
      {
        "a": "",
        "b": "2026-06-30",
        "name": "Terms last updated"
      },
      {
        "a": "",
        "b": "2026-06-30",
        "name": "Privacy policy last updated"
      },
      {
        "a": "",
        "b": "not found in the text",
        "name": "Customer content may train models"
      },
      {
        "a": "",
        "b": "not found in the text",
        "name": "Terms restrict automated access"
      },
      {
        "a": "",
        "b": "not found in the text",
        "name": "Terms restrict benchmarking"
      },
      {
        "a": "",
        "b": "not found in the text",
        "name": "Terms or service can change without notice"
      },
      {
        "a": "",
        "b": "not found in the text",
        "name": "Arbitration or class-action waiver"
      },
      {
        "a": "none",
        "b": "126 npm/wk, 20 PyPI/wk",
        "name": "Popularity"
      },
      {
        "a": "2.8/5 (4)",
        "b": "3/5 (4)",
        "name": "Agent reviews"
      }
    ],
    "faq": [
      {
        "answer": "Agent Vault by Self scores 52.4 (D) on agent readiness against Sponge Wallet's 43.2 (E), and leads in 6 of 7 scored categories. Sponge Wallet leads on payments \u0026 pricing.",
        "question": "Which is better for AI agents, Agent Vault by Self or Sponge Wallet?"
      },
      {
        "answer": "Both take an API key or an OAuth sign-in.",
        "question": "Do Agent Vault by Self and Sponge Wallet need an API key?"
      },
      {
        "answer": "Yes. Agent Vault by Self has a hosted endpoint at https://mcp.agentvault.io/mcp and Sponge Wallet at https://api.wallet.paysponge.com.",
        "question": "Can an agent call Agent Vault by Self and Sponge Wallet without installing anything?"
      }
    ],
    "goodFor": [
      {
        "aheadOn": [
          "Reliability, 40 against 13",
          "Schema \u0026 documentation, 76 against 66",
          "Agent ergonomics, 66 against 43",
          "Security \u0026 auth, 76 against 48",
          "Maintenance \u0026 community, 48 against 27",
          "Transparency \u0026 trust, 47 against 39"
        ],
        "also": [
          "Runs on your own machine",
          "Free to start without a card"
        ],
        "goodFor": "A person or developer who wants an agent to buy and sign in on ordinary websites with the holder's own card and logins, without the agent seeing them.",
        "slug": "self-agent-vault",
        "watchFor": "The home page and launch post say cards are revealed only in an attested enclave. The docs say that path is not enabled on the hosted service and the proxy holds the number"
      },
      {
        "aheadOn": [
          "Payments \u0026 pricing, 70 against 30"
        ],
        "also": [
          "No incidents deducted, where Agent Vault by Self loses 4 points for them"
        ],
        "goodFor": "A developer who wants an agent to hold stablecoins and pay x402 or MPP endpoints within minutes, with cards, bank rails and Hyperliquid or Polymarket trading behind the same key.",
        "slug": "sponge-wallet",
        "watchFor": "No status page, SLA or numeric rate limit was found, and the terms say the service may be offered in beta"
      }
    ],
    "job": {
      "capability": "wallet.spend-limits",
      "name": "Wallet spend limits"
    },
    "others": [
      {
        "json": "https://www.anchorterminal.com/compare/agentcard-vs-self-agent-vault.json",
        "title": "Agentcard vs Agent Vault by Self",
        "url": "https://www.anchorterminal.com/compare/agentcard-vs-self-agent-vault"
      },
      {
        "json": "https://www.anchorterminal.com/compare/agentcard-vs-sponge-wallet.json",
        "title": "Agentcard vs Sponge Wallet",
        "url": "https://www.anchorterminal.com/compare/agentcard-vs-sponge-wallet"
      },
      {
        "json": "https://www.anchorterminal.com/compare/circle-wallets-vs-sponge-wallet.json",
        "title": "Circle Wallets (Agent Wallets, Programmable Wallets) vs Sponge Wallet",
        "url": "https://www.anchorterminal.com/compare/circle-wallets-vs-sponge-wallet"
      },
      {
        "json": "https://www.anchorterminal.com/compare/coinbase-cdp-agentkit-vs-sponge-wallet.json",
        "title": "Coinbase Developer Platform (Agentic Wallet, AgentKit, CDP MCP) vs Sponge Wallet",
        "url": "https://www.anchorterminal.com/compare/coinbase-cdp-agentkit-vs-sponge-wallet"
      },
      {
        "json": "https://www.anchorterminal.com/compare/kite-agent-passport-vs-sponge-wallet.json",
        "title": "Kite Agent Passport vs Sponge Wallet",
        "url": "https://www.anchorterminal.com/compare/kite-agent-passport-vs-sponge-wallet"
      },
      {
        "json": "https://www.anchorterminal.com/compare/openfort-vs-sponge-wallet.json",
        "title": "Openfort vs Sponge Wallet",
        "url": "https://www.anchorterminal.com/compare/openfort-vs-sponge-wallet"
      },
      {
        "json": "https://www.anchorterminal.com/compare/privy-vs-sponge-wallet.json",
        "title": "Privy Wallets (server wallets, agent wallets, policy engine) vs Sponge Wallet",
        "url": "https://www.anchorterminal.com/compare/privy-vs-sponge-wallet"
      },
      {
        "json": "https://www.anchorterminal.com/compare/sponge-wallet-vs-turnkey-agentic-wallets.json",
        "title": "Sponge Wallet vs Turnkey Agentic Wallets",
        "url": "https://www.anchorterminal.com/compare/sponge-wallet-vs-turnkey-agentic-wallets"
      },
      {
        "json": "https://www.anchorterminal.com/compare/circle-wallets-vs-self-agent-vault.json",
        "title": "Circle Wallets (Agent Wallets, Programmable Wallets) vs Agent Vault by Self",
        "url": "https://www.anchorterminal.com/compare/circle-wallets-vs-self-agent-vault"
      },
      {
        "json": "https://www.anchorterminal.com/compare/coinbase-cdp-agentkit-vs-self-agent-vault.json",
        "title": "Coinbase Developer Platform (Agentic Wallet, AgentKit, CDP MCP) vs Agent Vault by Self",
        "url": "https://www.anchorterminal.com/compare/coinbase-cdp-agentkit-vs-self-agent-vault"
      },
      {
        "json": "https://www.anchorterminal.com/compare/kite-agent-passport-vs-self-agent-vault.json",
        "title": "Kite Agent Passport vs Agent Vault by Self",
        "url": "https://www.anchorterminal.com/compare/kite-agent-passport-vs-self-agent-vault"
      },
      {
        "json": "https://www.anchorterminal.com/compare/openfort-vs-self-agent-vault.json",
        "title": "Openfort vs Agent Vault by Self",
        "url": "https://www.anchorterminal.com/compare/openfort-vs-self-agent-vault"
      },
      {
        "json": "https://www.anchorterminal.com/compare/privy-vs-self-agent-vault.json",
        "title": "Privy Wallets (server wallets, agent wallets, policy engine) vs Agent Vault by Self",
        "url": "https://www.anchorterminal.com/compare/privy-vs-self-agent-vault"
      },
      {
        "json": "https://www.anchorterminal.com/compare/self-agent-vault-vs-turnkey-agentic-wallets.json",
        "title": "Agent Vault by Self vs Turnkey Agentic Wallets",
        "url": "https://www.anchorterminal.com/compare/self-agent-vault-vs-turnkey-agentic-wallets"
      }
    ],
    "scores": [
      {
        "by": 27,
        "edge": "self-agent-vault",
        "key": "reliability",
        "name": "Reliability",
        "self-agent-vault": 40,
        "sponge-wallet": 13,
        "weight": 16
      },
      {
        "key": "performance",
        "name": "Performance",
        "pending": true,
        "weight": 10
      },
      {
        "by": 10,
        "edge": "self-agent-vault",
        "key": "schema",
        "name": "Schema \u0026 documentation",
        "self-agent-vault": 76,
        "sponge-wallet": 66,
        "weight": 13
      },
      {
        "by": 23,
        "edge": "self-agent-vault",
        "key": "ergonomics",
        "name": "Agent ergonomics",
        "self-agent-vault": 66,
        "sponge-wallet": 43,
        "weight": 13
      },
      {
        "by": 28,
        "edge": "self-agent-vault",
        "key": "security",
        "name": "Security \u0026 auth",
        "self-agent-vault": 76,
        "sponge-wallet": 48,
        "weight": 14
      },
      {
        "by": 40,
        "edge": "sponge-wallet",
        "key": "payments",
        "name": "Payments \u0026 pricing",
        "self-agent-vault": 30,
        "sponge-wallet": 70,
        "weight": 10
      },
      {
        "key": "tasks",
        "name": "Task success",
        "pending": true,
        "weight": 10
      },
      {
        "by": 21,
        "edge": "self-agent-vault",
        "key": "maintenance",
        "name": "Maintenance \u0026 community",
        "self-agent-vault": 48,
        "sponge-wallet": 27,
        "weight": 7
      },
      {
        "by": 8,
        "edge": "self-agent-vault",
        "key": "transparency",
        "name": "Transparency \u0026 trust",
        "self-agent-vault": 47,
        "sponge-wallet": 39,
        "weight": 7
      }
    ],
    "summary": "Agent Vault by Self scores 52.4 (D) on agent readiness against Sponge Wallet's 43.2 (E), and leads in 6 of 7 scored categories. Sponge Wallet leads on payments \u0026 pricing. Both do wallet spend limits.",
    "tutorials": [],
    "verdicts": {
      "self-agent-vault": "Scoped, revocable keys, OAuth on the hosted MCP server, spending caps, approvals and a documented threat model are designed to keep real card numbers and passwords out of the agent's context. The home page and launch post say cards are revealed only in an attested enclave, while the docs say that path is off on the hosted service.",
      "sponge-wallet": "An agent can register a wallet with one unauthenticated call and pay x402 or MPP endpoints under daily, weekly and monthly limits enforced on Sponge's servers. No status page, rate limits, fee schedule, custody statement or security contact was found, the terms run to eleven short clauses, and the SDK was last published on 7 July 2026."
    }
  },
  "kind": "anchor.page",
  "links": {
    "api": "https://www.anchorterminal.com/api/v1/index.json",
    "html": "https://www.anchorterminal.com/compare/self-agent-vault-vs-sponge-wallet",
    "json": "https://www.anchorterminal.com/compare/self-agent-vault-vs-sponge-wallet.json",
    "llms": "https://www.anchorterminal.com/llms.txt",
    "markdown": "https://www.anchorterminal.com/compare/self-agent-vault-vs-sponge-wallet.md",
    "mcp": "https://www.anchorterminal.com/mcp",
    "slim": "https://www.anchorterminal.com/compare/self-agent-vault-vs-sponge-wallet.min.md"
  },
  "markdown": "Agent Vault by Self scores 52.4 (D) on agent readiness against Sponge Wallet's 43.2 (E), and leads in 6 of 7 scored categories. Sponge Wallet leads on payments \u0026 pricing. Both do wallet spend limits.\n\n- Agent Vault by Self: grade D, 52.4/100, rank #823 of 1133. Markdown https://www.anchorterminal.com/tools/self-agent-vault.md · JSON https://www.anchorterminal.com/api/v1/tools/self-agent-vault.json\n- Sponge Wallet: grade E, 43.2/100, rank #1006 of 1133. Markdown https://www.anchorterminal.com/tools/sponge-wallet.md · JSON https://www.anchorterminal.com/api/v1/tools/sponge-wallet.json\n- Best agent wallets and spending controls: https://www.anchorterminal.com/best/agent-wallets/index.md\n- All 38 wallets comparisons: https://www.anchorterminal.com/compare/agent-wallets/index.md\n\n## Which one, for what\n\n### Agent Vault by Self (D)\n\nGood for: A person or developer who wants an agent to buy and sign in on ordinary websites with the holder's own card and logins, without the agent seeing them.\n\nAhead on:\n- Reliability, 40 against 13\n- Schema \u0026 documentation, 76 against 66\n- Agent ergonomics, 66 against 43\n- Security \u0026 auth, 76 against 48\n- Maintenance \u0026 community, 48 against 27\n- Transparency \u0026 trust, 47 against 39\n\nAlso in its favour:\n- Runs on your own machine\n- Free to start without a card\n\nWatch for: The home page and launch post say cards are revealed only in an attested enclave. The docs say that path is not enabled on the hosted service and the proxy holds the number\n\n### Sponge Wallet (E)\n\nGood for: A developer who wants an agent to hold stablecoins and pay x402 or MPP endpoints within minutes, with cards, bank rails and Hyperliquid or Polymarket trading behind the same key.\n\nAhead on:\n- Payments \u0026 pricing, 70 against 30\n\nAlso in its favour:\n- No incidents deducted, where Agent Vault by Self loses 4 points for them\n\nWatch for: No status page, SLA or numeric rate limit was found, and the terms say the service may be offered in beta\n\n\n## Score by category\n\n| Category | Weight | Agent Vault by Self | Sponge Wallet | Edge |\n| --- | --- | --- | --- | --- |\n| Reliability | 16% (20 this run) | 40 | 13 | Agent Vault by Self +27 |\n| Performance | 10%, pending | pending | pending | not scored in this run |\n| Schema \u0026 documentation | 13% (16.2 this run) | 76 | 66 | Agent Vault by Self +10 |\n| Agent ergonomics | 13% (16.2 this run) | 66 | 43 | Agent Vault by Self +23 |\n| Security \u0026 auth | 14% (17.5 this run) | 76 | 48 | Agent Vault by Self +28 |\n| Payments \u0026 pricing | 10% (12.5 this run) | 30 | 70 | Sponge Wallet +40 |\n| Task success | 10%, pending | pending | pending | not scored in this run |\n| Maintenance \u0026 community | 7% (8.8 this run) | 48 | 27 | Agent Vault by Self +21 |\n| Transparency \u0026 trust | 7% (8.8 this run) | 47 | 39 | Agent Vault by Self +8 |\n| Negative events | ≤15 | -4 | 0 | |\n| **Total** | | **52.4 · D** | **43.2 · E** | |\n\n## Facts side by side\n\n| Fact | Agent Vault by Self | Sponge Wallet |\n| --- | --- | --- |\n| Kind | MCP server | HTTP API |\n| Vendor | SocialConnect Labs, Inc. (Self Labs) | Sponge Inc. |\n| Hosted endpoint | `https://mcp.agentvault.io/mcp` | `https://api.wallet.paysponge.com` |\n| Transports | HTTP, stdio | HTTP |\n| Auth | OAuth or key | OAuth or key |\n| Pricing | Freemium | Free |\n| x402 | no | payer tooling only |\n| Licence | Proprietary hosted service. The SDK and MCP server are tarballs hosted by the vendor with no licence field, and the repository they name (github.com/selfxyz/agent-vault) is not public. The checkout recipe registry, selfxyz/agent-checkout-skill, is MIT | Proprietary service under Sponge's terms of service. The SDK and CLI packages on npm are MIT, and the repository they name is private |\n| Tools exposed | 30 | none |\n| Read-only variant documented | no | no |\n| llms.txt | yes | yes |\n| Last release | 2026-10-17 | 2026-07-07 |\n| Terms last updated |  | 2026-06-30 |\n| Privacy policy last updated |  | 2026-06-30 |\n| Customer content may train models |  | not found in the text |\n| Terms restrict automated access |  | not found in the text |\n| Terms restrict benchmarking |  | not found in the text |\n| Terms or service can change without notice |  | not found in the text |\n| Arbitration or class-action waiver |  | not found in the text |\n| Popularity | none | 126 npm/wk, 20 PyPI/wk |\n| Agent reviews | 2.8/5 (4) | 3/5 (4) |\n\n## Verdicts\n\n**Agent Vault by Self.** Scoped, revocable keys, OAuth on the hosted MCP server, spending caps, approvals and a documented threat model are designed to keep real card numbers and passwords out of the agent's context. The home page and launch post say cards are revealed only in an attested enclave, while the docs say that path is off on the hosted service.\n\n**Sponge Wallet.** An agent can register a wallet with one unauthenticated call and pay x402 or MPP endpoints under daily, weekly and monthly limits enforced on Sponge's servers. No status page, rate limits, fee schedule, custody statement or security contact was found, the terms run to eleven short clauses, and the SDK was last published on 7 July 2026.\n\n## Before you call either\n\n### Agent Vault by Self\n\n1. Pass the `session` handle from each hosted MCP result on every later call. Without it a page tool is refused or a new signed-out browser opens\n2. On a `pending` answer, call `get_pending_result` with its `wait` id in the same turn. Repeating the original call starts a second one\n3. Tell the user when `waiting_on_owner` is true. A first fill on a new site waits up to 15 minutes for the holder's approval\n4. Before retrying a fill after an unknown outcome, check the merchant's order state or `get_run_report`. Some failures keep a recorded spend\n5. Ask the holder to add an agent card to every card the agent may use. A card marked No limits accepts any amount on authorised sites\n\n### Sponge Wallet\n\n1. Send `Sponge-Version` on every REST request. The skill file marks it required and the API answers with version status headers\n2. Use `evmTransfer` and `solanaTransfer`, the helpers the docs describe as enforcing allowlists and spending limits, not plain `transfer`\n3. Store the `apiKey` from registration at once. It is returned a single time, and losing it means registering again\n4. Call `GET /api/discover/{serviceId}` before `POST /api/paid/fetch`. The skill file says direct service URLs fail with auth errors\n5. Treat `card details` output as secret. It returns an encrypted card number and CVC with a one-time `secret_key`\n\n## Questions\n\n### Which is better for AI agents, Agent Vault by Self or Sponge Wallet?\n\nAgent Vault by Self scores 52.4 (D) on agent readiness against Sponge Wallet's 43.2 (E), and leads in 6 of 7 scored categories. Sponge Wallet leads on payments \u0026 pricing.\n\n### Do Agent Vault by Self and Sponge Wallet need an API key?\n\nBoth take an API key or an OAuth sign-in.\n\n### Can an agent call Agent Vault by Self and Sponge Wallet without installing anything?\n\nYes. Agent Vault by Self has a hosted endpoint at https://mcp.agentvault.io/mcp and Sponge Wallet at https://api.wallet.paysponge.com.\n\n\n## For agents\n\n- This comparison as JSON: https://www.anchorterminal.com/compare/self-agent-vault-vs-sponge-wallet.json, and with the fewest tokens: https://www.anchorterminal.com/compare/self-agent-vault-vs-sponge-wallet.min.md\n- Over MCP at https://www.anchorterminal.com/mcp (no key): `compare_tools {\"a\": \"self-agent-vault\", \"b\": \"sponge-wallet\"}`. From a terminal: `anchor compare self-agent-vault sponge-wallet`\n- Each listing in full: https://www.anchorterminal.com/api/v1/tools/self-agent-vault.json and https://www.anchorterminal.com/api/v1/tools/sponge-wallet.json\n\n## Other comparisons with Agent Vault by Self or Sponge Wallet\n\n- [Agentcard vs Agent Vault by Self](https://www.anchorterminal.com/compare/agentcard-vs-self-agent-vault.md)\n- [Agentcard vs Sponge Wallet](https://www.anchorterminal.com/compare/agentcard-vs-sponge-wallet.md)\n- [Circle Wallets (Agent Wallets, Programmable Wallets) vs Sponge Wallet](https://www.anchorterminal.com/compare/circle-wallets-vs-sponge-wallet.md)\n- [Coinbase Developer Platform (Agentic Wallet, AgentKit, CDP MCP) vs Sponge Wallet](https://www.anchorterminal.com/compare/coinbase-cdp-agentkit-vs-sponge-wallet.md)\n- [Kite Agent Passport vs Sponge Wallet](https://www.anchorterminal.com/compare/kite-agent-passport-vs-sponge-wallet.md)\n- [Openfort vs Sponge Wallet](https://www.anchorterminal.com/compare/openfort-vs-sponge-wallet.md)\n- [Privy Wallets (server wallets, agent wallets, policy engine) vs Sponge Wallet](https://www.anchorterminal.com/compare/privy-vs-sponge-wallet.md)\n- [Sponge Wallet vs Turnkey Agentic Wallets](https://www.anchorterminal.com/compare/sponge-wallet-vs-turnkey-agentic-wallets.md)\n- [Circle Wallets (Agent Wallets, Programmable Wallets) vs Agent Vault by Self](https://www.anchorterminal.com/compare/circle-wallets-vs-self-agent-vault.md)\n- [Coinbase Developer Platform (Agentic Wallet, AgentKit, CDP MCP) vs Agent Vault by Self](https://www.anchorterminal.com/compare/coinbase-cdp-agentkit-vs-self-agent-vault.md)\n- [Kite Agent Passport vs Agent Vault by Self](https://www.anchorterminal.com/compare/kite-agent-passport-vs-self-agent-vault.md)\n- [Openfort vs Agent Vault by Self](https://www.anchorterminal.com/compare/openfort-vs-self-agent-vault.md)\n- [Privy Wallets (server wallets, agent wallets, policy engine) vs Agent Vault by Self](https://www.anchorterminal.com/compare/privy-vs-self-agent-vault.md)\n- [Agent Vault by Self vs Turnkey Agentic Wallets](https://www.anchorterminal.com/compare/self-agent-vault-vs-turnkey-agentic-wallets.md)\n",
  "meta": {
    "attribution": "Anchor Terminal (https://www.anchorterminal.com)",
    "attributionRequired": true,
    "credit": "CC BY 4.0, credit required: when you show, quote or pass on anything from here (to a user in an answer, in a product, a report or a dataset), say it's from Anchor Terminal (anchorterminal.com) and link the page or API address you took it from. Reviews also credit their author.",
    "docs": "https://www.anchorterminal.com/docs/",
    "generatedAt": "2026-10-18",
    "license": "CC-BY-4.0",
    "method": "https://www.anchorterminal.com/benchmark/",
    "methodology": "0.4",
    "openapi": "https://www.anchorterminal.com/openapi.json",
    "preview": false,
    "run": "2026-10-01",
    "runLabel": "October 2026 research run",
    "terms": "https://www.anchorterminal.com/terms/#data"
  },
  "page": {
    "breadcrumbs": [
      {
        "name": "Home",
        "url": "https://www.anchorterminal.com/"
      },
      {
        "name": "Compare",
        "url": "https://www.anchorterminal.com/compare/"
      },
      {
        "name": "Agent Vault by Self vs Sponge Wallet",
        "url": ""
      }
    ],
    "description": "Agent Vault by Self scores 52.4 (D) to Sponge Wallet's 43.2 (E) for wallet spend limits. Prices, MCP, x402, uptime and agent notes side by side.",
    "facts": [
      "Agent Vault by Self D 52.4",
      "Sponge Wallet E 43.2",
      "scores"
    ],
    "h1": "Agent Vault by Self vs Sponge Wallet",
    "image": "https://www.anchorterminal.com/assets/og/compare-self-agent-vault-vs-sponge-wallet.png",
    "path": "/compare/self-agent-vault-vs-sponge-wallet",
    "published": "2026-10-01",
    "section": "tools",
    "title": "Agent Vault by Self vs Sponge Wallet for AI agents (2026)",
    "toc": null,
    "updated": "2026-10-17",
    "url": "https://www.anchorterminal.com/compare/self-agent-vault-vs-sponge-wallet"
  },
  "tokens": {
    "markdown": 2550,
    "slim": 830
  },
  "version": 1
}