Sold by: Keyban
Deployed on AWS
Give your AI agents a USDC wallet they can pay from, within the spending policy you set.
Overview
Keyban Agent Wallet is an MCP server that lets an AI agent hold and spend USDC from a wallet you provision in the Keyban dashboard. The agent can check its balance, transfer USDC, sign messages and pay x402-enabled APIs. Every spend is checked server-side against the policy you define: spending caps, destination allow-list and human approval above a threshold. Keys are split with threshold signatures (FROST): your runtime's share is generated in your browser and handed to the runtime in its configuration, and no party alone can sign. The container calls no AWS service.
Highlights
- Let agents pay: USDC transfers and x402 API payments from MCP tools.
- You stay in control: caps, allow-lists and human approval enforced server-side.
- One value to paste, no AWS permission: the key share travels in KEYBAN_CONFIG.
Details
Sold by
Delivery method
Type
Supported services
Delivery option
Amazon Bedrock AgentCore Runtime
Latest version
Operating system
Linux
Deployed on AWS
New
Introducing multi-product solutions
You can now purchase comprehensive solutions tailored to use cases and industries.
Features and programs
Financing for AWS Marketplace purchases
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Pricing
This product is available free of charge. Free subscriptions have no end date and may be canceled any time.
Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator to estimate your infrastructure costs.
Vendor refund policy
This product is free: AWS Marketplace charges nothing for it, so there is nothing to refund. For any question, contact seller@keyban.io .
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA) .
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
Delivery details
Amazon Bedrock AgentCore Runtime
Supported services: Learn more
- Amazon Bedrock AgentCore
Container image
Containers are lightweight, portable execution environments that wrap server application software in a filesystem that includes everything it needs to run. Container applications run on supported container runtimes and orchestration services, such as Amazon Elastic Container Service (Amazon ECS) or Amazon Elastic Kubernetes Service (Amazon EKS). Both eliminate the need for you to install and operate your own container orchestration software by managing and scheduling containers on a scalable cluster of virtual machines.
Version release notes
KEYBAN_CONFIG is now the only value to fill in: the image serves streamable HTTP by itself, and the Keyban API address comes from KEYBAN_CONFIG.
Additional details
Usage instructions
-
In the Keyban dashboard (https://admin.keyban.io ), enable the Agent Wallet feature in your organization, then create an agent wallet and set its policy (caps, allow-list, human approval).
-
Open the wallet's MCP configuration, AWS AgentCore tab, and generate the client share. Copy KEYBAN_CONFIG; it holds the client share, which is shown only once.
-
In the AgentCore console, choose Set up hosting on AgentCore: protocol MCP, security Public, inbound auth IAM, and paste the value into the KEYBAN_CONFIG environment variable. The container needs no AWS permission beyond the default execution role.
-
Once the runtime is Ready, connect your MCP client through AWS's mcp-proxy-for-aws, which signs each call with the IAM identity your AWS CLI already uses. For Claude Code:
claude mcp add keyban-wallet -- uvx mcp-proxy-for-aws@latest "https://bedrock-agentcore.us-east-1.amazonaws.com/runtimes/ <URL-encoded runtime ARN>/invocations?qualifier=DEFAULT" --service bedrock-agentcore --region us-east-1
The URL-encoded ARN replaces ":" with "%3A" and "/" with "%2F". Add --profile <name> to use a named AWS CLI profile.
-
Ask your agent for its wallet address and balance, then to pay.
This product requires an ongoing internet connection to the Keyban API (api.keyban.io), which co-signs every transaction under your wallet's policy.
Support: seller@keyban.io
Support
Vendor support
Email seller@keyban.io . Documentation:
AWS infrastructure support
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Similar products
The Vault MCP Server enables operators to use natural language to perform basic queries and operations in Vault, which would otherwise require traditional methods of issuing requests to Vault via Vault API.
Note: This Vault MCP Server release is experimental in nature and intended for development, testing, and evaluation purposes. Use of the Vault MCP server in production settings is not recommended at this time.
Structured agent access to Elasticsearch: Query indices using natural language via a standardized protocol -- no custom APIs needed
Tavily MCP is a lightweight server that enables AI assistants to perform real time web search, intelligent crawling, and structured data extraction through the Model Context Protocol (MCP).
Customer reviews
No customer reviews yet
Be the first to review this product . We've partnered with PeerSpot to gather customer feedback. You can share your experience by writing or recording a review, or scheduling a call with a PeerSpot analyst.