Give your agents an allowance.

Not your keys. Dispensator is a spending wallet for Claude Code, Codex and any MCP agent on Robinhood Chain, with limits you set.

Install now Try the rules

Small ones paidUp to 0.002 ETH goes straight through.
Big ones waitAbove that, you approve first.
Over the limit refused0.02 per payment, 0.05 a day.
Any MCP agentClaude Code, Codex, Cursor and more.

An agent holding your private key can spend everything you own.

Agents need to pay. Gas, API credits, a token you asked them to buy. Approving every one by hand defeats the point.

Your main wallet is the wrong tool. One bad instruction and there is no limit to what leaves it.

Pages can lie to agents. A website can tell your agent to “send funds”. A limit and your approval stop that.

Set it up in three commands

Createdispensator init
A separate, encrypted spending wallet. Send it a little ETH.
Unlockdispensator daemon
Keeps the key in memory and opens your approvals page.
Connectdispensator mcp
Add it to your agent. Now it can ask to pay.

Claude Code session

Try the rules

Move the limits, then ask the steward to pay. This is the same logic the wallet runs.

Pay without asking up to 0.002 ETH Refuse any payment over 0.02 ETH Refuse once a day passes 0.05 ETH

Your agent asks to send

ETH

Spent today: 0.000 ETH

Big payments wait for your seal

Your approvals page shows who is asking, how much, to whom and why. Only you can approve: your agent's key can ask, never seal.

Approvals127.0.0.1:7717

0.012 ETH to 0x7a1c…91e4

“Pay the image API for 40 renders”, asked by Claude Code

Above your 0.002 ETH limit for paying without asking.

Works with any agent that speaks MCP

{
  "mcpServers": {
    "dispensator": { "command": "dispensator", "args": ["mcp"] }
  }
}

Your agent gets six tools: wallet info, send ETH, send a token, call a contract, check a request, list recent requests.

What it protects, and what it doesn't

The key stays in memory. It is encrypted on disk with your passphrase and only unlocked inside the daemon. No agent ever receives it.

Asking and approving are separate. Your agent's token can request a payment. Approving needs the owner link that only your terminal shows.

Limits are checked twice. When the agent asks, and again when you approve. A full day stays full.

Everything is written down. A local log of every request, decision and transaction.

It stops mistakes and instructions that reach your agent through MCP. An agent with full shell access to your computer can still read your files, so keep this wallet separate and small.

$DISPENSATOR

The community coin behind the steward, on Robinhood Chain.

Contractcoming soon

Only trust the contract shown here and pinned on our X account.

Follow on X

Install

Free and open source. Needs Node 20 or newer, on macOS, Linux or Windows.

$

dispensator init, then dispensator daemon
Add the MCP server to your agent
Set your limits, for example dispensator policy set dailyMaxEth 0.05

Source code on GitHub