Safety limits

Rate limits

• 60 API requests per minute per wallet
• 60 MCP requests per minute per API key (override with MCP_MAX_REQUESTS_PER_MINUTE)
• Maximum 3 concurrent sessions per wallet
• Session timeout after 15 minutes idle
• Withdrawals: 5 distinct requests per wallet per hour, with min and max amounts

Agent step caps

Computer-use loops can burn tokens if a model gets stuck. Each session has hard caps independent of your balance:

• Maximum 80 agent steps per session (override with SESSION_MAX_STEPS)
• Auto-stop if the screenshot is unchanged for 4 consecutive steps (override with SESSION_STALE_SCREEN_STEPS)

Spend caps

• Sessions stop when balance is depleted
• Daily spend limits available (configurable)

Sandbox security

• Isolated Docker containers
• No access to host networks
• Metadata endpoints blocked
• Resource limits (CPU, memory)
• No privileged operations

Abuse prevention

Wallets engaging in abuse may be blocked. This includes:

• Attempting to break out of sandbox
• Mining cryptocurrency
• Attacking other systems
• Generating illegal content