Solo
3 agents
1,000 transactions a month
USD 49 a month or USD 400 a year
Thirty days free.
MCP Connector
One connection puts two services behind your AI: the policy engine, the judge, which decides whether an action your agent proposes is permitted under the rules you wrote; and the wallet, the hands, which executes it. Every action is judged first and executed second, and the wallet refuses any action the judge was never asked about. AEREDIUM holds no key to your funds and cannot move them: every signature belongs to the wallet's own custody, threshold custody in enclaves.
Connect your AIYou do. You name it, you choose its role, you write its mandate yourself and approve it with your own passkey, and you can halt it or delete it at any moment from your account page. No AEREDIUM officer approves an agent, and none stands between you and your own wallet.
What you are asked for. A passkey and a payment. No password exists anywhere. If you come through Claude, there is no identity check: Anthropic has already verified you. If you come through any other AI, or straight from this page, a short identity check through AerKYC comes before your credentials are issued.
The policy engine. You answer a questionnaire about what your agent may do: what it may pay and to whom, what it may trade and where, how much in one go and in a day, and what must always wait for you. The answers compile into a policy. From then on, every action the agent proposes is reduced to its facts and read against that policy before anything happens, and the engine answers one of three things: allow, deny, or hold for a person. An action the policy does not cover is never guessed at; it waits for you. The policy is yours to change at any time, and every verdict is kept with the rule it rested on.
The threshold signature engine. A transaction on a chain must be signed, and whoever holds the signing key holds the money. Ordinary wallets keep that key somewhere: on a phone, on a server, in a vault. Ordinary multi-party systems split a key into pieces and keep the pieces apart. AEREDIUM's engine never has a key to split. The signing parts are born separately inside secure enclaves, are never dealt out from a key, are never brought together, and the private key is never computed, not even for an instant. Each party contributes its part to a signature that is only valid when enough of them agree, and they agree only when the policy engine has said yes to that exact transaction. So there is no key anywhere in the system: nothing to steal, nothing to lose, nothing an insider can walk away with. It signs for the EVM chains and for Solana alike.
Put together: your rules decide, the enclaves sign, the register records. AEREDIUM runs the machinery and holds none of the power over your funds.
A threshold signature for every transaction. Nothing leaves an agent's wallet on one key, because no one key exists: every transaction is signed by threshold custody inside secure enclaves, and the policy that ruled the transaction travels with the signature. A transaction the policy did not permit cannot be signed.
Audited step by step. The request, the judge's verdict, the rule it rested on, the signature and the settlement are each written to the audit register as they happen, in order, and kept for seven years. What your agent did, who allowed it and which rule it followed can be answered for any transaction, at any time.
This is the same custody and the same policy engine that serve AEREDIUM's institutional clients, offered to one person and three agents at the same standard as to a desk of fifty.
Every agent has exactly one wallet, and that wallet is a child wallet: an address of its own, born under your account, that holds only what you put in it. It is attached to one policy, the mandate you wrote and approved with your passkey, and to one owner, you. The agent can move what is in its child wallet and nothing else; it cannot reach your other wallets, and no other agent can reach its wallet. You see the child wallet beside your own on the account page, and the two report together as one hierarchy. An agent cannot have a second wallet, and a wallet cannot serve a second agent.
An agent has one role for life, chosen when you create it. Two roles are available on MCP Connector today, and the policy engine carries twelve, which MCP Connector switches on in turn.
Available now. Payer transfers stablecoins (USDC, USDT, PYUSD and EURC) to addresses you have listed, and cannot trade. Trader trades on the exchanges you name, selling one coin for another inside its own wallet, and cannot send money to anyone, not even to you. Both may move their own USDC or USDT between chains, to their own address, through the coin's issuer (Circle's CCTP, Tether's USDT0). Chains offered: Ethereum, Arbitrum and Base; you tick the chains the agent may use, and the first ticked is its home chain.
The venues. A Trader trades at the pools themselves, with no intermediary in between: Curve, Uniswap and PancakeSwap. The connectors to the issuers of USDT and USDC let those two stablecoins move and trade natively, and the same custody reaches Solana and Bitcoin. Every trade carries MEV protection, as every AEREDIUM product does, so it is not front-run or sandwiched on its way to the pool.
The other roles of the engine. Observer reads and reports and moves nothing. Swapper swaps one coin for another on the venues you approved. DCA buys on a schedule, a fixed amount at a time. Earner receives and claims stablecoins it has earned. Yield holder supplies to, withdraws from and claims on the yield venues you approved. Yield optimiser manages and rebalances yield across several venues. Staker does liquid staking and restaking. Rail moves funds between chains on AEREDIUM's own rail. Card spender authorises and settles card payments. Treasury makes batch disbursements for an institution.
This is not a sandbox: agents live on the real chains and every transaction costs real money. A payment or a trade may be refused by the policy engine or by the wallet; either refusal is the policy answering, not a fault.
Gas. For a payment or a trade on Arbitrum you hold no ETH: each is sent as one operation that AEREDIUM's paymaster sponsors, and the gas is charged in dollars to a gas account you top up on the account page, ten dollars at a time or more, on the same card as the package. The balance is shown live; an operation the balance cannot cover is refused before anything is sent.
Fees. One subscription buys both halves; there is no judging-only plan and no executing-only plan. When an agent trades, AEREDIUM charges a service fee of five basis points (0.05%) of what the trade buys, deducted inside the trade and shown on each trade's record. Transfers carry no fee. The venue's pool fee and the chain's gas are the venue's and the chain's.
Every package is the top tier, and the audit trail is on by default: threshold custody in enclaves, every role, every policy control, the pact you write, and the audit register with seven years of retention. The packages differ in three numbers only, agents, transactions a month and price, and never in safety.
Solo
1,000 transactions a month
USD 49 a month or USD 400 a year
Thirty days free.
Team
50,000 transactions a month
USD 149 a month or USD 1,200 a year
Billed from the first day.
Desk
500,000 transactions a month
USD 499 a month or USD 4,000 a year
Billed from the first day.
Estate
That is AER 360, reached through its own connector.
A transaction is one signed action on chain, never a question to the policy engine and never a tool call. If a subscription lapses, every reading tool keeps working and every acting tool refuses; nothing is deleted, and paying again restores acting on the next call.
The connector address, for your AI's connector settings, not a page to visit. Copy it from the box, never out of an email.
Account
Sign in with your passkey; manage your agents, your package and your gas.
https://mcppro.aeredium.io/account
Guide
Every answer, readable without an AI.
https://mcppro.aeredium.io/guide
Terms
What you agree to, and what AEREDIUM agrees to.
https://mcppro.aeredium.io/terms
Privacy
What is kept, what is not, and for how long.
https://mcppro.aeredium.io/privacy