Kaginet — Trustless Bitcoin Escrow for AI Agents

👁 CI
👁 PyPI - kagikai-langchain
👁 PyPI - kagikai-crewai
👁 License

Hardware-attested Bitcoin escrow that AI agents can use via MCP, LangChain, or CrewAI. No custody, no trust assumptions, no counterparty risk.

Live on Bitcoin mainnet. Running inside an Intel TDX confidential VM.

Why Kaginet

Quick Start

Option A: MCP (recommended, zero install)

Add to your Claude Desktop, Cursor, or Windsurf MCP config:

{
 "mcpServers": {
 "kagikai": {
 "url": "https://mcp.kaginet.com/sse",
 "headers": {
 "Authorization": "Bearer kagi_YOUR_API_KEY"
 }
 }
 }
}

Get an API key at cloud.kaginet.com.

Your agent now has 29 payment tools. Try:

Create a 50,000 sat escrow to bc1q...recipient for "Logo design work"

Option B: LangChain

pip install kagikai-langchain

from kagikai_langchain import KagikaiToolkit
toolkit = KagikaiToolkit(
 base_url="https://mcp.kaginet.com",
 api_key="kagi_YOUR_API_KEY",
)
tools = toolkit.get_tools() # 29 tools ready for your agent

Option C: CrewAI

pip install kagikai-crewai

from kagikai_crewai import (
 KagikaiEscrowCreateTool,
 KagikaiEscrowStatusTool,
 KagikaiEscrowReleaseTool,
)
# Add to your crew's agent
tools = [
 KagikaiEscrowCreateTool(),
 KagikaiEscrowStatusTool(),
 KagikaiEscrowReleaseTool(),
]

How It Works

Agent Runtime MCP Server ICS (TEE Enclave) Bitcoin
───────────── ────────── ───────────────── ───────
 kagikai_escrow_create ──▶ Authenticate ──▶ Generate keys inside TDX 
 Destroy issuer key (kA) 
 Create P2TR escrow address 
 Generate bc1q funding addr 
 ◀── instrument_id + funding_address ◀── 
 "Fund this address" ────────────────────────────────────────────────▶ bc1q funded
 Watcher detects funding 
 Auto-forward bc1q → bc1p ──────▶ P2TR escrow
 Status: Confirmed 
 kagikai_escrow_release ─▶ Sign JWT ──────▶ Evaluate evidence 
 Status: Completed 
 Auto-sweep to payee ──────▶ Payee receives
 Zero all keys 

1. Create: Agent calls kagikai_escrow_create with amount and payee address. ICS generates keys inside the TEE, destroys the issuer key, returns a bc1q funding address.
2. Fund: Payer sends bitcoin to the bc1q address from any wallet. ICS auto-forwards to the internal P2TR escrow.
3. Release: Agent submits evidence. Evaluator validates (auto or manual). ICS auto-sweeps funds to the payee.
4. Attest: At any point, anyone can verify the TDX attestation proving the issuer key was deleted by the audited code.

Instrument Lifecycle

Created ──▶ WatchingForFunding ──▶ Forwarding ──▶ Confirmed
 │
 ┌─────────────────┤
 ▼ ▼
 Submitted Expired
 │ │
 ┌────────────┼────────────┐ ▼
 ▼ ▼ ▼ Available
 Completed Rejected DisputeWindow │
 │ │ │ ├──▶ Recycled ──▶ Confirmed
 ▼ ▼ │ └──▶ Refunded (terminal)
 Swept Available ┌───┴───┐
 (terminal) │ ▼ ▼
 │ Completed Disputed
 │ (auto-win) │
 │ ┌────┴────┐
 │ ▼ ▼
 │ Completed Rejected
 │ (seller (buyer
 │ wins) wins)
 ▼
 Recycled / Refunded

Full state machine documentation: docs/instrument-lifecycle.md

Documentation

Live Endpoints

Examples

• quickstart.py — Create your first escrow
• agent-escrow-flow.py — Full agent-to-agent payment
• mcp-config.json — MCP client configuration
• langchain-agent.py — LangChain agent with payment tools
• crewai-crew.py — CrewAI crew with escrow capability
• verify-attestation.py — Verify a TDX attestation
• fee-estimate.py — Check fees before creating an escrow

Project Structure

kaginet/
 adapters/
 langchain/ # pip install kagikai-langchain (29 tools)
 crewai/ # pip install kagikai-crewai (29 tools)
 tests/ # 90 adapter tests
 docs/ # Architecture, API reference, protocol docs
 examples/ # Integration examples
 verify/ # TDX attestation verification tool

The ICS server (Rust, runs inside Intel TDX) is not included in this repository. This repo contains the integration layer: framework adapters, documentation, and examples.

Security

See SECURITY.md for our responsible disclosure policy.

The security model is documented at docs/security-model.md.

Contributing

See CONTRIBUTING.md. We welcome adapter contributions for new frameworks, documentation improvements, and example code.

License

See LICENSE. License terms are currently under evaluation.