Accounts and wallets
Do I need an account? No. Your Solana wallet is your account: sign in with it in the app. An operator account, vaults and lines are program accounts created by transactions you sign.
Which wallets work? Solana browser wallets that support sign-in and transaction signing through the Wallet Standard: Phantom, Solflare, Backpack and others. The app lists the ones installed in your browser.
Can one wallet be both an operator and a merchant? Yes. The app shows both views when the wallet holds both roles.
Does Bonded hold my keys? No. The API prepares each transaction; your wallet signs it. The agent's session key stays with the agent. See How every action works.
Operators
How much should I bond? Enough to cover the lines you open at your minimum coverage. At 100 % coverage, a $1,000 bond backs $1,000 of line limits; merchants see the ratio before serving your agents. See Post the bond.
What does an agent's mistake cost me? What the bounds allow. On the open web, the float allowance at a time and the vault's window budget across refills. With listed merchants, each merchant's cap and the window budget. On a tab, the line's limit on what's unsettled at once. The program enforces every one of them.
How do I stop an agent right away? Freeze its vault. From your admin key it's Manage this vault › Freeze the vault; your guardian signs in with its own key and uses Freeze the vault under Vaults you guard. Every payment by the session key is refused until you unfreeze it from the admin key.
How do I get my bond back? Request a withdrawal; it unlocks after your longest line's expiry plus the claim window and the safety margin, and then you finalize it. See Changing things.
Merchants
How do I know an agent will pay? Its line is backed by its operator's bond. The bond, the line's limit and the operator's record (tabs settled, defaults) are on chain and shown in your merchant view. If the vault can't pay a settlement, the bond pays your claim up to the line's limit.
How often should I settle? As often as you like; each settlement is one transaction. The middleware's worker settles each line on its schedule and before a line or voucher nears expiry.
What if I miss the claim window? The middleware's worker files claims as soon as a default opens on a bond you have a line on, well inside the 72 hours.
Agents
Where does the agent's session key live? Wherever the agent runs: a key file, or a signing service through a remote signer (Turnkey, Crossmint, Coinbase). See The session key.
Can a prompt injection make the agent overspend? Only within the vault's bounds (the policy, the float and the line limits), which the program enforces on chain. The MCP server adds its own per-call and window ceilings, which the model can't change.
Does the agent need SOL? Yes, a little, for the network fee on its own payments. Tab requests themselves cost nothing on chain; only the merchant's settlement is a transaction.
The protocol
Is there a Bonded token? Yes: $BONDED. Its supply is fixed at 1,000,000,000, all of it went to one public launch on equal terms, and every fee the protocol keeps buys it on the market and burns it, in one transaction the program enforces. Bonds, settlements and claims stay in USDC.
Which network does this service run on? The one shown under the service's values: its genesis hash names the network.
Where is the full mechanism described? The litepaper in a few pages, the whitepaper in full: every account, instruction, formula and parameter.