Capture funds instantly. Settle securely. Paystack is the first custodial escrow protocol built for autonomous agents — so an AI can act at machine speed without breaking things you can’t unbreak.
Every payment has a cost/trust trade-off. Agents shouldn’t have to learn two integrations to make it. Paystack routes each call to the right rail — and records why.
Cost-optimized · peer-to-peer · no custody
Trust-optimized · internal ledger · 100% reversible
CFOs don’t want an AI assistant. They want an AI assistant they can stop. SafetySwitch is the operator console — same data surface the auditors see.
Agents act within bounds that you set. You can pause everything with one click.
| VFP ID | Vendor | Amount | Release | State |
|---|---|---|---|---|
| VFP-7D4C-11A2 | Acme Roofing LLC | $1,200 | T+3d 14h | armed |
| VFP-88E1-0934 | Greenleaf Landscaping | $420 | T+5d 02h | armed |
| VFP-AA02-2CC5 | Relay Logistics | $2,875 | T+6d 18h | armed |
↳ Every action is reversible inside the audit window. Pausing halts release — held funds stay custodial until you resume or refund.
Paystack ships as a Model Context Protocol server. Point Claude Desktop, Cursor, or your own runtime at it — scopes, rate limits, and reasoning logs come for free.
# 1. Install the Paystack MCP server
mcp install codelucent/paystack
# 2. Let your agent use it
> initiate_escrow_payout(
amount: 5000,
vendor: "acme-roofing-llc",
priority: "disputable",
reason: "emergency-repair"
)
→ { vfp: "VFP-7D4C-11A2", state: "held", releasesAt: "+120h" }POST /v1/escrows
Authorization: Bearer psk_live_...
{
"amount_cents": 120000,
"counter_party": "acme-roofing-llc",
"rail": "custodial",
"audit_window": "120h",
"reasoning": {
"policy": "maintenance.repair",
"confidence": 0.94,
"agent_id": "agent-001"
}
}Agents choose: fast peer-to-peer ACH, or custodial escrow with a reversible audit window. Same API, different posture.
Every charge carries its policy, confidence, and the agent that authorized it. Compliance reads the same record operators do.
Per-agent limits, per-counter-party blocklists, and a single operator kill switch. Pause every pending escrow in one click.
Expose Paystack as a Model Context Protocol tool to Claude, Cursor, or any MCP-aware agent — with scope and audit baked in.
The 120-hour window isn't a bug. It's where disputes surface, receipts clear, and wrong agents get undone.
FBO structure, SOC2-aligned controls, and reversal flows that match the 2026 agentic-commerce rules.
Every escrow produces a Verified Future Payment. Vendors search their ID and see the funds sitting in the buffer — no phone calls, no “the check is in the mail” ambiguity.
A VFP is a cryptographic receipt that the funds exist. Enter any ID to see its current state in the escrow buffer.
Try or
Integrations take one engineer one afternoon. The Trust Center explains what you’re connecting to, and why it won’t page you at 2am.