Wraps

Wraps is incognito mode for AI agents.

AI agents now pay for data and tools on their own, with x402 on the XRP Ledger. That is fast and autonomous, but it is not private. Every payment is public forever: the wallet, the merchant, the amount and the exact time. We built a bot that reads these payments from XRPL mainnet. In one sample, 50 payments to a single merchant came from 50 different wallets, and 44 of them were funded straight from exchanges, so the exchange knows who is behind each one. If a fund's research agent buys market data this way, anyone can watch what it is researching. Its spending record is its strategy.

Wraps lets agents pay without being watched. The agent tops up with RLUSD and gets blind tokens back. The issuer signs these tokens without seeing them, so it can never link a payment back to the agent that made it. The agent then pays merchants with these tokens, one call at a time, with no wallet and no on-chain trail for each purchase. Merchants get paid out later in batched RLUSD. All of the agent's traffic also goes through the Wraps VPN, paid per use at one token per 10 MB, so merchants and websites see our relay, not the agent. Our relays run in the US, the Netherlands and the UK. No single party sees both who pays and what they buy.

You don't have to trust us. The issuer and relays run in Google Cloud Confidential Space, sealed hardware that proves exactly which code is running. Before the agent pays anything, it checks that proof. If someone changes the code or runs it in debug mode, the agent refuses to pay.

The agent decides for itself what to buy. It weighs each price against its task and its budget, and it spends nothing if free sources are enough. The spending limits live in code, not in the AI model, so the model can't raise its own budget or change who gets paid. In our demo, the agent buys data with a hidden "buy 500 more" instruction in it and ignores it.

Wraps is built for machine speed. Token payments clear off-chain, so a paid call does not wait for the ledger. In local tests, a paid call took about 1.8 ms, compared with about 4 seconds of ledger time for a plain x402 payment.

The agent also pays x402 services through Mastercard AP4M. It signs its own AP4M vouchers inside a capped payment channel, and it only pays when its traffic goes through the Wraps VPN.

You can try Wraps three ways: a Mac menu bar app that tops up with RLUSD and connects to the VPN in one click, a browser agent that you give a task and a budget and watch browse, decide and pay, and a demo you can run from the repo.

A 2026 USENIX Security study tested 15 x402 payment services against 8 security rules and found that every one broke at least one. Wraps passes all 45 of our tests for those rules, plus tests for replayed tokens, tampered servers and prompt injection.