Introduction

Atrosha provides a zero-trust cryptographic proxy to secure your AI Agents' financial capabilities. By routing your agent's API calls through our Rust Proxy, you cryptographically enforce the user's original Intent, mathematically blocking any hallucinations or prompt injections in real-time.

Authentication Model

Atrosha does not use simple API tokens for agents. Instead, every agent is issued anEd25519 Cryptographic Keypair when created via the Dashboard.

The Public Key is cached in our high-speed Rust Proxy. Your agent uses its Private Key to cryptographicallysign every outgoing request payload. The Proxy instantly verifies the signature before forwarding it to the final destination (like Stripe or OpenAI).

SDK Integration

The easiest way to route traffic through the proxy is via our official Python SDK. It automatically handles generating the strict Ed25519 signatures and payload hashing required by the proxy.

Transactions & Permits

Atrosha analyzes the cosine similarity between the user's locked Intent and the agent's proposed transaction. If the transaction deviates semantically (like an agent secretly buying a TV instead of a laptop), the Rust Proxy instantly returns a 403 Forbidden. No more generic spend limits. No more vulnerable LLMs acting as judges.

Billing & Webhooks

Atrosha uses asynchronous webhooks to sync your subscription status. When a payment is successful on Stripe, a secure message is sent to our servers to activate your organization.

Ensure your STRIPE_WEBHOOK_SECRET is correctly set in your environment variables to verify authentic messages from Stripe.