Live on Solana mainnet

The private bankfor AI agents

Millions of agents are about to hold and move money. None of them has an account that cannot be overdrawn, that nobody can read, and that a lender can still trust. H0.81 is that account.

An agent keeps USDG on Solana in a shielded pool, spends only inside rules sealed into the proof, shows one fact to an auditor, and borrows against a cashflow nobody can see. No server and no bank in the middle. The first private balance anyone can lend against.

Open your private bankHow it works

Live on Solana mainnet

Loading the latest figures…

Private loan volume

—*

Loans repaid in full

—*

Zero-knowledge proofs verified on chain

—*

Private payments

—*

Transactions

—*

Agents

—*

In the bank now

—*

View Breakdown →Bank program on Solscan ↗Loan program on Solscan ↗Recent transactions →

Live on Solana mainnet: bank, loans, safety pool and staking. Not audited yet: you use it at your own risk.

Lend

Live on mainnet

Borrow against a private stream

A streaming note fixes its lender and pledge share at creation. Neither can change. Each spend pays the share to the lender in the same proof, or it has no valid proof.

A stream proof shows the lender a remaining bound, rate, pledge share and expiry. Nothing else. No escrow, no multisig, no oracle. Verified by the loan program on Solana mainnet.

Stream proof
  • remaining ≥5,000.00 USDG
  • pledge share40% of each spend, fixed
  • rate, expirydisclosed, fixed
  • hidesbook, counterparties

Live on Solana mainnet. Unaudited: lenders and borrowers accept the risk.

Spend

The limit lives inside the proof

Lifetime budget, window cap, per-trade cap, expiry, counterparty list and spend rate are fields in the note. A payment outside them has no valid proof.

A budget can stream: a desk may spend no faster than a rate per second from a start time. No server, relayer or protocol key can waive any of it.

Spend proof checks
  • value ≤ remaining12.00 ≤ 188.00
  • today + value ≤ cap45.00 + 12.00 ≤ 50.00
  • resultno proof exists
  • submittednothing

Checked in the circuit, on your machine, before anything leaves it.

Prove

Prove the bound, not the book

Show an auditor, a lender or a DAO that a desk still holds at least 100 USDG, or spent under 500 USDG this window. One fact as of one block. The amounts stay private.

A disclosure reveals the bound, the window, the agent key and the audience. Nothing else. The audience binding stops anyone replaying it elsewhere.

Proof bundle
  • claimremaining ≥ 100.00
  • root0x7d3a…91ef
  • revealsbound, window, agent key
  • hidesevery balance, payment

Verified off-chain in one SDK call, or on-chain by the disclose verifier.

Shield

Shielded USDG treasuries

Hold USDG on Solana in one shielded pool. Nobody sees the balances, policies or strategy. A public payment shows who and how much, nothing of the treasury.

Fund sixteen desks in one proof, each under its own policy. A desk can hand slices to up to four sub-agents under tighter rules. The owner can reclaim every note.

One grant transaction
  • inputs2 treasury notes
  • outputs16 allowances + change
  • on chain17 commitments, 1 hash
  • amountsencrypted to each agent

Capacity

Live on mainnet

A token that buys capacity

Staking H081 sets how many desks a treasury may run and how much it may shield per month. Unstaking takes 30 days and can never be paused.

H081 holders can also back lenders in the safety pool. When an insured loan defaults, the pool pays the lender. The team turns cover on per loan asset. Withdrawals take 14 days and can never be paused.

H081 token facts and risks →

Capacity and safety stake
  • stake buysdesks, shield cap
  • safety stakebacks a lender
  • pays out onan insured default
  • statuslive on mainnet

Live on Solana mainnet, the same chain as H081. Not audited yet: stakers accept the risk.

Transfer

Built

Notes that carry their mandate

An allowance is bound to one agent key. A transfer hands the whole note to a new key under the same policy: value and rules travel together. No escrow, no trust.

Desks delegate to sub-agents under tighter rules, and the owner reclaims any note. The treasury tree shows a whole fleet from one root.

Treasury tree
  • transfer a notebuilt
  • transfer an allowancebuilt
  • delegate to 4 subsbuilt
  • treasury treebuilt

Built. A formal layer on the delegation that runs today.

Integrate

A few lines in the agent

The SDK is TypeScript. It holds notes, builds proofs and submits them. Amounts are base units. Submit yourself or through any relayer.

The calls are pay, prove, pledge and proveStream, shown here. On top of them: an MCP server and a Solana Agent Kit plugin on npm, and paid x402 services. Give an agent an account in 5 minutes.

agent.ts
const agent = new Wallet(keys, pool);
await agent.sync();
const [usdg] = agent.agentAllowances(USDG);

await agent.pay(usdg, 12_000_000n, vendor);
await agent.prove(usdg, 'remainingAtLeast', 100_000_000n, audience);
// live: owner.pledge(usdg, { lenderAddr, loanRef, pledgeBps })
// live: agent.proveStream(usdg, { minRemaining, minRate, audience })

Withdrawals never pause

No role can block a withdrawal, and funds move only on proofs made from keys you hold. The team can pause new deposits and holds the upgrade key; the risks are listed on every page that takes money.

No servers

Proofs are made in your browser or the agent runtime. A relayer only forwards them, and you can submit yourself.

No viewing keys

Your own key reads your own notes. Auditors and lenders get one proof per question, never the ledger.

Five Groth16 circuits · live on Solana mainnet · not audited yet · source public on GitHub

Try it · real Groth16 proofs from the spend, disclose and stream circuits, made in your browser · nothing is sent on chain

1/3Grant an allowance

Shielded treasury5,000.00 USDG

Prover · idle0.0 s

Grant an allowance, then pay. Every payment is proved here, on your machine.

Commitment tree · 2²⁰ leavesroot empty
What the chain sees
  1. waiting for a transaction
What you see
  1. nothing granted yet

Illustrative roles

Built for agents that spend

  • Once a stream can be pledged, I can fund a desk off a bound and a rate, never its positions.

    credit desk lead

  • Twelve agents, one treasury, one weekly cap each. Vendors never learn the swarm exists.

    research lead

  • Counterparties see a payment. They never see the runway behind it.

    trading agent operator

  • I fund sixteen bots in one proof. Finance gets a bound per bot, never the ledger.

    contractor platform ops

  • Every user gets a constrained private wallet from the SDK. I never hold their keys.

    agent framework maintainer

  • Show me spend under a threshold for the quarter. I do not need the ledger.

    external auditor

Open your private bank

Give your AI agents private accounts with rules they cannot break, prove funds without showing balances, and borrow against their payments. Use it live with real USDG, or try it first in practice mode. Developers can build on the same SDK, public on GitHub. The bank, loans, safety pool and staking are live on Solana mainnet, the same chain as H081. They have not had an external audit yet; anyone who uses them accepts the risk.

Open the app5-minute quickstartGet the SDKFollow @H081CAP

All volume comes from financial AI agents. Every figure here is real on-chain activity on Solana mainnet, and every transaction is on-chain.