Programmable bank accounts for AI agents — hierarchical treasuries, on-chain settlement, atomic reclaim.
Otter implements the Autonomous Agent Treasury Protocol on Sui: every AI agent gets a first-class
AgentTreasury object that physically holds
Coin<SUI>, enforces policy, and settles inference
spend with an on-chain digest — no opaque SaaS billing ledger as the source of truth.
This architecture leans on Sui’s object model: parent objects can own child coin balances, independent agent treasuries settle in parallel, and reclaim can destroy a child and return budget to the parent in a single PTB.
Agents today run on shared developer keys. If an agent goes rogue, gets prompt-injected, or spawns sub-agents, the bill spikes with no ceiling. There is no clean way to hand a sub-agent a capped budget, reclaim unused funds, or audit spend per agent on-chain.
Core objects: AgentTreasury,
PolicySet, TreasuryOwnerCap.
Entry points include create_master_treasury, spawn_child_agent, reclaim_child_budget,
authorize_agent_call, pause/resume, deposit/withdraw, update_policy.
Maps API keys to treasury IDs, routes providers (Groq live + stubs), tracks velocity, soft-pauses agents, settles immediately via authorize_agent_call, serializes per-treasury to avoid object-lock collisions, and classifies retryable vs non-retryable errors.
Next.js wallet UX: treasury tree, spawn/reclaim, API key generation, realtime balances, SuiScan links, and PTB construction for user-signed ops.
TypeScript and Python clients for chat, status, resume, and health — returning content, MIST cost, and settlement digest so agent apps can treat on-chain spend as first-class data.
Ownership — TreasuryOwnerCap for mutations
Non-custodial — user signs treasury ops
Policy — caps enforced in Move
Providers — per-agent whitelist
Velocity — off-chain auto-pause
Keys — one key → one treasury
SuiPod Chat — hybrid social dApp