nuanu-ai/agent-payment-node

APN is an open-source, local-first payment runtime for AI agents. An agent drives it through the apn CLI or a local
stdio MCP server; a human owner sets the limits and approves every signature in a foreground terminal. APN keeps each
payment as a durable operation with an idempotency key, so a crash or a lost response never sends the same money twice.
It covers:
direct transfers of native coins and listed tokens on EVM networks, Solana and TRON;
standard x402 purchases (EIP-3009 USDC, Permit2, ERC-20 transfer-proof merchants);
USDC transfers whose gas is paid from the USDC amount (local wallet, MetaMask Agent Wallet, MetaMask Smart Account,
Coinbase, PayAI facilitator) and Ethereum USDT through a keyless sponsor;
bridges (LI.FI with Across and Stargate, Relay, Circle CCTP V2, GasZip, NEAR 1Click, direct Stargate V2);
guarded swaps (Uniswap V3 on Ethereum, SunSwap on TRON, Jupiter and Orca on Solana);
an owner allowlist that admits each asset, rail and mechanism with per-operation and daily caps.
APN runs on Apple Silicon macOS with Node 24. The platform support matrix records the
boundary and what Linux or Windows would need. A matching version number does not prove that an installed artifact
contains a given source change: check apn --version, the release provenance and apn help --json together.
## Install
sh
brew install nuanu-ai/tap/apn
The Formula installs apn and the Homebrew node@24 dependency. The first wallet command creates ~/.apn with mode
0700 and one encrypted wallet envelope per profile with mode 0600.
### Discover the installed contract
sh
apn --help
apn wallet --help
apn help pay transfer prepare-asset
apn help --json
Discovery runs before any state, Keychain, wallet, policy, network or signing work. Help is raw text; apn help --json
prints one raw apn.command-manifest.v2 JSON object, the machine source of truth. Every operational command prints
exactly one apn.cli.v1 JSON envelope with ok, error, operation, receipt and nextactions. nextactions
names the next command to run, or the variable or option to fix.
Manifest v2 merged several v1 commands (the -network twins, wallet balance-asset, the Relay route groups) and
removed the historical Circle v1 and LI.FI recovery commands, whose operations are all terminal. The manifest's
removedv1commands lists each removed path with its replacement, or with replacement: null and a reason when it
has none. Running an old path fails with APNUNSUPPORTEDCOMMAND: its first next action is the replacement, and a
removal without a successor names the reason.
### Verify a release
Release artifacts are built twice with Node 24.15.0 and must be byte-identical. The workflow emits the npm tarball, an
SPDX 2.3 SBOM and a release manifest binding names, sizes and SHA-256 digests to the exact commit; GitHub artifact
attestations bind those bytes to the pinned workflow identity.
sh
gh attestation verify nuanu-ai-apn- .tgz \
--repo nuanu-ai/agent-payment-node \
--signer-workflow nuanu-ai/agent-payment-node/.github/workflows/release.yml \
--source-ref refs/heads/main \
--deny-self-hosted-runners
node scripts/verify-supply-chain.mjs verify \
--artifact nuanu-ai-apn- .tgz \
--sbom nuanu-ai-apn- .spdx.json \