A browser for AI agents that spend money on NEAR

The agent drives the page. Only you approve payments. Swapped frontends never load.

GitHub Try it Demo dapp Injected page

What an extension can't do

Check code before it runs

Every file from a pinned dapp is hashed in the network layer. A changed file is refused. Extensions never see response bodies.

Bybit, Feb 2025: swapped Safe{Wallet} JavaScript, $1.5B

Keep approval out of the agent's reach

The agent's control API reaches the page only. Approvals open in a separate window, with Touch ID on macOS. Remote debugging is refused.

May 2026: hidden text in a page drained $175k from an agent's wallet

No extension supply chain

The guard is the browser. There is no extension to hijack with a bad update.

Trust Wallet extension v2.68, Dec 2025, about $7M

Every signing request gets a verdict

ALLOW

Inside the agent's NEAR function-call key: one contract, one method, no deposits. The agent key signs.

ASK HUMAN

Moves funds, new or barely used receiver, contract code changed this week. Only the approval window can sign.

BLOCK

Lookalike account, shared blocklist, full access key, account deletion, or a page whose code failed its pin.

Recorded on testnet

Agent key signs the guestbook: ABor16nb…

Human approves the 0.1 NEAR tip: 9fHPRrwM…

Try it

git clone https://github.com/itsharshag/airlock && cd airlock && npm install
node scripts/make-account.js     # then create it with the faucet (README)
node scripts/add-agent-key.js
node scripts/make-payee.js

T=https://airlock-tipjar.itsharshag.com
AIRLOCK_START_URL=$T AIRLOCK_PINS=$T npm start
# in Airlock: Sign the guestbook, Tip 0.1 NEAR, open https://airlock-news.itsharshag.com
# then open $T/__attacker/swap?on=1 to swap app.js for you only