Guide

Safety & limits

Pay3 is built so an AI can pay without getting a blank check. Read this before you fund a pot or share an MCP token.

• Primary key never leaves Freighter

  Sign-in and session authorization use Freighter. Pay3 does not store your main wallet private key.

• AI spends only from the allocation pot

  Session keys and MCP tokens cannot drain your main Freighter balance. Fund the pot deliberately.

• Policy before every payment

  Off-chain policy checks session status, budgets, per-tx caps, and contacts. Over the approval threshold → you must approve in the dashboard.

• Ambiguous contacts are rejected

  If a name maps to more than one address, the transfer fails and the AI must ask for clarification.

• Revoke anytime

  Revoke one session or all sessions in the dashboard. MCP tokens stop working immediately.

• Mainnet — real value

  Pay3 runs on Stellar mainnet. Only fund the allocation pot with amounts you accept spending. DeFi: get_swap_quote is read-only; execute_swap is opt-in per session and requires matching Soroswap + Stellar networks.