Financial infrastructure for autonomous software.

# 1. Prove control of the owner key (secp256k1, EIP-4361). Nothing else is needed: no browser, no wallet app.curl -X POST "$ELYX_URL/api/v1/auth/challenge" -H "Content-Type: application/json"   -d '{ "address": "0x<owner address>" }'# -> { "message": "...", "nonceToken": "..." }   personal_sign the message (EIP-191), 0x signaturecurl -X POST "$ELYX_URL/api/v1/auth/token" -H "Content-Type: application/json"   -d '{ "address": "0x...", "message": "...", "signature": "0x...", "nonceToken": "...", "organizationName": "My agent" }'# -> { "token": "eot_..." }   the organization exists now# 2. Create the Safe account. The response is an EIP-1559 transaction prepared and simulated on Elysium.curl -X POST "$ELYX_URL/api/v1/accounts" -H "Authorization: Bearer $VOT" -H "Content-Type: application/json"   -d '{ "name": "Agent Ops", "type": "AGENT", "coOwners": [], "threshold": 1,        "vaults": [{ "name": "Operating Vault", "type": "OPERATING", "description": "" }] }'# -> { "id": "ptx_...", "transaction": { "chainId": 99901, "to": "0x...", "data": "0x...", "value": "0", ... }, "simulation": { "ok": true } }# 3. Sign the transaction with the owner key and submit the raw signed bytes.curl -X POST "$ELYX_URL/api/v1/tx/ptx_.../submit" -H "Authorization: Bearer $VOT" -H "Content-Type: application/json"   -d '{ "transaction": "0x02..." }'# -> { "signature": "0x<tx hash>", "result": { "accountId": "acc_...", "vaultId": "vlt_...", "vaultAddress": "0x..." } }   confirmed on Elysium# 4. Same pattern for deposits, POST /api/v1/agents, top-ups, withdrawals and executing approved Safe transactions.

// curl -o elyx.ts "$ELYX_URL/sdk/elyx.ts"   (single file, no dependencies; viem only for the key)import { Elyx, signInWithKey, viemSigner } from "./elyx";import { privateKeyToAccount, generatePrivateKey } from "viem/accounts";const owner = viemSigner(privateKeyToAccount(generatePrivateKey()));   // persist the key securely, then fund the address with HYPEconst { token } = await signInWithKey(process.env.ELYX_URL!, owner, { organizationName: "My agent" });const elyx = new Elyx({ apiKey: token, baseUrl: process.env.ELYX_URL!, moduleAddress: "0x<ELYX module>" });const { result: { accountId, vaultId, vaultAddress } } = await elyx.owner.createAccount({ name: "Agent Ops" }, owner);await elyx.owner.deposit(vaultId, { asset: "HYPE", amount: "0.05" }, owner, { vaultAddress });const payee = await elyx.owner.createCounterparty({ name: "Vendor", type: "BUSINESS", address: "0x..." });const onboarding = await elyx.owner.createAgent(  { accountId, vaultId, name: "Atlas", kind: "PAYMENT", limits: [{ asset: "HYPE", amount: "0.02" }], period: "DAY", counterpartyIds: [payee.id], gasHype: "0.01" },  owner,  { vaultAddress },);if (onboarding.status !== "CONFIRMED") throw new Error("co-owners must sign first");const { agentId } = onboarding.result;const { execution } = await elyx.intents.submit({ agentId, action: "PAYMENT", asset: "HYPE", amount: "0.003", counterpartyId: payee.id });console.log(await elyx.executions.wait(execution.id));

# The base URL is the origin of your ELYX deploymentexport ELYX_URL="https://your-elyx-deployment"# API key (organization scope), created in /developers/dashboardexport ELYX_API_KEY="ek_live_..."# Agent session token (one agent, its vaults and allowed actions)export ELYX_AGENT_TOKEN="eas_..."# Find your agentId, vaultId and counterparty ids with one callcurl "$ELYX_URL/api/v1/context" -H "Authorization: Bearer $ELYX_AGENT_TOKEN"

curl -X POST "$ELYX_URL/api/v1/intents/preview" \  -H "Authorization: Bearer $ELYX_AGENT_TOKEN" \  -H "Content-Type: application/json" \  -d '{    "agentId": "agt_...",    "action": "SWAP",    "asset": "USDC",    "outputAsset": "HYPE",    "amount": "250",    "maxSlippageBps": 50  }'

curl -X POST "$ELYX_URL/api/v1/intents" \  -H "Authorization: Bearer $ELYX_AGENT_TOKEN" \  -H "Content-Type: application/json" \  -H "idempotency-key: rebalance-2026-10-05-001" \  -d '{    "agentId": "agt_...",    "action": "SWAP",    "asset": "USDC",    "outputAsset": "HYPE",    "amount": "250",    "maxSlippageBps": 50,    "justification": "Rebalance to target HYPE weight"  }'# 202 Accepted (200 with "replayed": true for a repeated idempotency key)# { "execution": { "id": "exe_...", "state": "CREATED", ... }, "replayed": false }

curl "$ELYX_URL/api/v1/executions/exe_..." \  -H "Authorization: Bearer $ELYX_AGENT_TOKEN"

curl "$ELYX_URL/api/v1/agents/agt_..." \  -H "Authorization: Bearer $ELYX_AGENT_TOKEN"# {#   "agent": { "id": "agt_...", "status": "ACTIVE", "chainStatus": "ACTIVE",#              "executor": "0x<executor address>", "primaryVaultId": "vlt_...", ... },#   "limits": [ { "asset": "USDC", "amount": "...", "period": "DAY",#                 "destinations": ["..."], "remaining": "...", ... } ],#   "wallet": { "balances": [ ... ], "totalUsd": 0 },#   "gasWei": "0"# }

# Pause or resume an agent (API key)curl -X PATCH "$ELYX_URL/api/v1/agents/agt_..." \  -H "Authorization: Bearer $ELYX_API_KEY" \  -H "Content-Type: application/json" \  -d '{ "status": "PAUSED" }'

curl "$ELYX_URL/api/v1/vaults" \  -H "Authorization: Bearer $ELYX_API_KEY"# [ { "id": "vlt_...", "name": "...", "type": "PAYMENT", "address": "<vault PDA>",#     "status": "ACTIVE", "balances": [ { "asset": "USDC", "amount": "<base units>",#     "decimals": 6, "usdValue": 0 } ], "totalUsd": 0, ... } ]

{  "decision": "REQUIRE_APPROVAL",  "triggeredPolicies": [    {      "policyId": "pol_...",      "reason": "TRANSACTION_ABOVE_THRESHOLD",      "outcome": "REQUIRE_APPROVAL",      "message": "..."    }  ],  "approvalRequirement": {    "rule": { "kind": "THRESHOLD", "required": 1, "of": ["OWNER"] },    "approvalsRequired": 1  },  "evaluatedPolicyIds": ["pol_..."],  "evaluatedAt": "<ISO 8601>"}

{  "amountUsd": 25000,             // cents, priced server-side  "evaluation": { "decision": "ALLOW", "triggeredPolicies": [], ... },  "fee": {                        // USD micro-units (1e-6), as strings    "networkFee": "...",    "executionFee": "...",    "providerFee": "...",    "totalFee": "..."  },  "route": "KYBER",               // SPENDING_LIMIT | SAFE_TX | AGENT_WALLET | KYBER  "estimatedTime": "About 15 seconds"}

curl -X POST "$ELYX_URL/api/v1/payments" \  -H "Authorization: Bearer $ELYX_API_KEY" \  -H "Content-Type: application/json" \  -H "idempotency-key: inv-0042-payment" \  -d '{    "agentId": "agt_...",    "counterpartyId": "cp_...",    "asset": "USDC",    "amount": "980.00",    "reference": "PO-118",    "invoice": "INV-0042",    "memo": "October hosting"  }'# { "paymentId": "pay_...", "execution": { "id": "exe_...", "state": "CREATED", ... } }

curl "$ELYX_URL/api/v1/approvals?status=PENDING" \  -H "Authorization: Bearer $ELYX_API_KEY"

curl -X POST "$ELYX_URL/api/v1/agents/agt_.../requests" \  -H "Authorization: Bearer $ELYX_AGENT_TOKEN" \  -H "Content-Type: application/json" \  -d '{    "type": "LIMIT_INCREASE",    "title": "Raise daily limit",    "requestedChange": "Daily limit to 5,000 USDC",    "currentRule": "Daily limit 2,000 USDC",    "justification": "Settlement volume doubled this week."  }'# Returns the created approval request (status PENDING) for owners to decide.

// curl -o elyx.ts "$ELYX_URL/sdk/elyx.ts"import { Elyx, ElyxError } from "./elyx";const elyx = new Elyx({  apiKey: process.env.ELYX_AGENT_TOKEN!, // ek_live_... or eas_...  baseUrl: process.env.ELYX_URL!,});const agent = elyx.agent("agt_...");// Check the decision and fee first. Nothing is created or signed.const preview = await elyx.intents.preview({  agentId: agent.id, action: "PAYMENT", asset: "USDC", amount: "120", counterpartyId: "cp_...",});if (preview.evaluation.decision !== "BLOCK") {  const { execution } = await agent.pay(    { counterpartyId: "cp_...", asset: "USDC", amount: "120", memo: "INV-0042" },    { idempotencyKey: "inv-0042" },  );  const final = await elyx.executions.wait(execution.id, { timeoutMs: 90_000 });  // SETTLED | BLOCKED | FAILED | CANCELLED | AWAITING_APPROVAL}try {  await agent.swap({ from: "USDC", to: "HYPE", amount: "250", maxSlippageBps: 50 });} catch (e) {  if (e instanceof ElyxError) console.error(e.status, e.code, e.message);}

new Elyx({ apiKey, baseUrl })elyx.intents.submit(body, { idempotencyKey? })elyx.intents.preview(body)elyx.executions.get(id)elyx.executions.list({ agentId?, state?, limit? })elyx.executions.wait(id, { timeoutMs?, intervalMs? })elyx.payments.create(body, { idempotencyKey? })   // API keyelyx.approvals.list(status?)elyx.agents.list()elyx.agents.get(id)elyx.agents.requestChange(agentId, body)elyx.webhooks.verify(rawBody, header, secret)      // async, Web Cryptoelyx.context()                                     // ids, scope, limits, unitssignInWithKey(baseUrl, ownerSigner)                 // -> { token: "eot_..." }elyx.owner.createAccount(body, signer)             // prepare, sign, submit, confirmelyx.owner.deposit(vaultId, body, signer)elyx.owner.createCounterparty(body)elyx.owner.createAgent(body, signer)elyx.owner.issueSession(body)                      // -> { token: "eas_..." }elyx.owner.approve(approvalId, signer)elyx.owner.withdraw(vaultId, body, signer)elyx.owner.run(path, body, signer)                 // any endpoint returning a prepared transactionsignPreparedTransaction(base64, signer)             // adds one signature, keeps the restconst agent = elyx.agent(agentId)agent.swap({ from, to, amount, maxSlippageBps })agent.pay({ counterpartyId, asset, amount, memo })agent.allocate({ asset, amount })agent.returnCapital({ asset, amount })agent.request({ type, title, requestedChange, justification })

curl -X POST "$ELYX_URL/api/v1/webhooks" \  -H "Authorization: Bearer $ELYX_API_KEY" \  -H "Content-Type: application/json" \  -d '{    "url": "https://example.com/elyx/webhooks",    "events": ["agent.execution.settled", "agent.execution.blocked", "approval.required"]  }'# { "id": "whk_...", "secret": "whsec_..." }   The secret is shown once.

POST /elyx/webhookscontent-type: application/jsonuser-agent: ELYX-Webhooks/1elyx-signature: t=1791200000,v1=5f2c...e81a{ "id": "whd_...", "type": "agent.execution.settled", "createdAt": "<ISO 8601>", "data": { ... } }

import { createHmac, timingSafeEqual } from "node:crypto";const TOLERANCE_S = 300;export function verifyElyxSignature(rawBody: string, header: string | null, secret: string): boolean {  if (!header) return false;  const parts = Object.fromEntries(header.split(",").map((p) => p.split("=", 2) as [string, string]));  const t = Number(parts.t);  if (!Number.isInteger(t) || !parts.v1) return false;  // Reject old or future timestamps (replay protection)  if (Math.abs(Math.floor(Date.now() / 1000) - t) > TOLERANCE_S) return false;  const expected = Buffer.from(createHmac("sha256", secret).update(`${t}.${rawBody}`).digest("hex"), "hex");  const received = Buffer.from(parts.v1, "hex");  return expected.length === received.length && timingSafeEqual(expected, received);}// Next.js route handlerexport async function POST(req: Request) {  const rawBody = await req.text(); // verify the exact bytes you received  if (!verifyElyxSignature(rawBody, req.headers.get("elyx-signature"), process.env.ELYX_WEBHOOK_SECRET!)) {    return new Response("invalid signature", { status: 400 });  }  const event = JSON.parse(rawBody) as { id: string; type: string; data: Record<string, unknown> };  // Deduplicate on event.id: deliveries can be retried.  return new Response("ok");}