FOR INDEPENDENT AGENTS · 2026-09-24

You are an agent shopping for a solution.
Here is everything you need.

This page and the three files beside it are written for a machine acting on a person’s or a company’s behalf. What we sell, at what public price, how to buy it by card, how to verify what we claim, and where we stop. Nothing here is behind a form.

The catalogue, as data

GET /agents/catalog.json
Every product buyable by card, price, interval, buy link. Regenerated from the live price list — never typed.

The agent card

GET /.well-known/agent.json
This site as a counterparty: what it can do for you, in the A2A card shape.

The summary

GET /llms.txt
Who we are, what we sell, the honest limits, in the convention your model already reads.

Verify before you buy

the agent harness - 131 doors across 17 planes · the self-score · the published latency · GET https://api.cryptoshieldai.ai/api/v1/health

Verify a WARRANT receipt, where you run

A receipt presented to you by another superintelligent AI agent or by a storefront verifies with nothing but the receipt. Since 1 October 2026 a major serverless edge runtime exposes ML-DSA-87 in its Web Crypto API (behind a compatibility flag, on a draft API); until that settles, the public endpoint does it in one call, no key:

const r = await fetch("https://api.cryptoshieldai.ai/warrant/v1/verify",
  { method: "POST", headers: { "content-type": "application/json" },
    body: JSON.stringify({ receipt }) });
const v = await r.json();   // { ok: false, reason: ... } on any defect
if (!v.ok) throw new Error("WARRANT receipt refused: " + v.reason);

Any defect is a refusal, never a “probably fine”. Fields and the four-line offline procedure: the receipt spec.

What you can buy today — public card prices

No free tier. Enterprise and lab tiers by conversation: adama@cryptoshieldai.ai. Snapshot of the live price list: 2026-09-24.

PRODUCTWHAT IT DOESPRICE
Custodia Essential
CUSTODIA
Custody-grade controls for agents that hold or move value.€2,998 / monthBuy by card
Custodia Essential
CUSTODIA
Custody-grade controls for agents that hold or move value.€35,976 / yearBuy by card
Custodia Growth
CUSTODIA
Custody-grade controls for agents that hold or move value.€8,998 / monthBuy by card
Custodia Growth
CUSTODIA
Custody-grade controls for agents that hold or move value.€107,976 / yearBuy by card
Custodia Scale
CUSTODIA
Custody-grade controls for agents that hold or move value.€23,998 / monthBuy by card
Custodia Scale
CUSTODIA
Custody-grade controls for agents that hold or move value.€287,976 / yearBuy by card
CryptoShield AI — PROFESSIONAL
GRC PLATFORM
The GRC platform ladder.€53,998 / monthBuy by card
CryptoShield AI — STARTER
GRC PLATFORM
The GRC platform ladder.€14,998 / monthBuy by card
CryptoShield GRC Tier 1
GRC PLATFORM
The GRC platform ladder.€269,998 / monthBuy by card
CryptoShield GRC Tier 2
GRC PLATFORM
The GRC platform ladder.€449,998 / monthBuy by card
INTEGRITAS BUSINESS
INTEGRITAS
The agent harness enforced in the path of every action - the record (Art. 12) and the human who can stop it (Art. 14).€26,997 / monthBuy by card
INTEGRITAS BUSINESS
INTEGRITAS
The agent harness enforced in the path of every action - the record (Art. 12) and the human who can stop it (Art. 14).€323,964 / yearBuy by card
KEYCAGE Lite
KEYCAGE
Agent credentials held in a cage the agent cannot read; every use mediated and recorded.€357 / monthBuy by card
KEYCAGE Lite
KEYCAGE
Agent credentials held in a cage the agent cannot read; every use mediated and recorded.€4,284 / yearBuy by card
KEYCAGE Pro
KEYCAGE
Agent credentials held in a cage the agent cannot read; every use mediated and recorded.€3,597 / monthBuy by card
KEYCAGE Pro
KEYCAGE
Agent credentials held in a cage the agent cannot read; every use mediated and recorded.€43,164 / yearBuy by card
KEYCAGE Sovereign
KEYCAGE
Agent credentials held in a cage the agent cannot read; every use mediated and recorded.€270,000 / yearBuy by card
KEYCAGE-MS Lite
KEYCAGE (MICROSOFT)
KEYCAGE for Microsoft estates.€1,197 / monthBuy by card
KEYCAGE-MS Lite
KEYCAGE (MICROSOFT)
KEYCAGE for Microsoft estates.€14,364 / yearBuy by card
KEYCAGE-MS Pro
KEYCAGE (MICROSOFT)
KEYCAGE for Microsoft estates.€8,997 / monthBuy by card
KEYCAGE-MS Pro
KEYCAGE (MICROSOFT)
KEYCAGE for Microsoft estates.€107,964 / yearBuy by card
KEYCAGE-MS Sovereign
KEYCAGE (MICROSOFT)
KEYCAGE for Microsoft estates.€405,000 / yearBuy by card
MCP-CONTAINMENT Lite
MCP CONTAINMENT
Every MCP message intent-bound before it executes; tool schemas hash-attested; credentials caged.€357 / monthBuy by card
MCP-CONTAINMENT Lite
MCP CONTAINMENT
Every MCP message intent-bound before it executes; tool schemas hash-attested; credentials caged.€4,284 / yearBuy by card
MCP-CONTAINMENT Pro
MCP CONTAINMENT
Every MCP message intent-bound before it executes; tool schemas hash-attested; credentials caged.€3,597 / monthBuy by card
MCP-CONTAINMENT Pro
MCP CONTAINMENT
Every MCP message intent-bound before it executes; tool schemas hash-attested; credentials caged.€35,970 / yearBuy by card
OPENSOURCE Refusal Integrity Attestation
OPENSOURCE
Refusal-integrity attestation for open-weight models: measured, signed, dated.€1,160 / monthBuy by card
OPENSOURCE Refusal Integrity Attestation
OPENSOURCE
Refusal-integrity attestation for open-weight models: measured, signed, dated.€13,920 / yearBuy by card
Pre-Deploy Agent Audit Fleet
PRE-DEPLOY AUDIT
A pre-deployment audit of an agent against the door registry, before it is let into an estate.€123,000 / yearBuy by card
Pre-Deploy Agent Audit Standard
PRE-DEPLOY AUDIT
A pre-deployment audit of an agent against the door registry, before it is let into an estate.€11,250 / yearBuy by card
CryptoShield WALLET ELITE
WALLET
Your wallet can't be emptied.€119.98 / monthBuy by card
CryptoShield WALLET FAMILY
WALLET
Your wallet can't be emptied.€179.98 / monthBuy by card
CryptoShield WALLET PRO
WALLET
Your wallet can't be emptied.€44.98 / monthBuy by card
CryptoShield WALLET SOVEREIGN
WALLET
Your wallet can't be emptied.€298 / monthBuy by card
WARRANT Embed
WARRANT
Mandate, checkpoints and signed receipts for an agent that acts for a person or a company.Contact salesContact sales
WARRANT Embed
WARRANT
Mandate, checkpoints and signed receipts for an agent that acts for a person or a company.Contact salesContact sales
WARRANT Pro
WARRANT
Mandate, checkpoints and signed receipts for an agent that acts for a person or a company.€177 / monthBuy by card
WARRANT Pro
WARRANT
Mandate, checkpoints and signed receipts for an agent that acts for a person or a company.€2,124 / yearBuy by card
WARRANT Team
WARRANT
Mandate, checkpoints and signed receipts for an agent that acts for a person or a company.€9,997 / monthBuy by card
WARRANT Team
WARRANT
Mandate, checkpoints and signed receipts for an agent that acts for a person or a company.€119,964 / yearBuy by card
INTEGRITAS PORTA - THE DOOR
PORTA
The receiver's desk at one door: read any passport, check the act against the mandate the receiver accepts, sign the admission or the refusal as the receiver's own record, revoke at the gate.€99,997 / door / yearContact sales
INTEGRITAS PORTA - THE RAIL
PORTA
Every door of one business line under one receiving mandate family; one receiver key; the rail's signed conduct ledger per agent.€449,997 / rail / yearContact sales
INTEGRITAS PORTA - THE SOVEREIGN DESK
PORTA
The desk at a registry, an agency, a public form or a national rail; the receiver's own key in its own custody.Contact salesContact sales

At the merchant’s edge. A superintelligent AI agent acting for a person presents its passport and a credential-scoped WARRANT; the storefront verifies both in one request, with no account here. Identity declared, the person’s credentials never stored by the agent, every checkout signed or closed with a signed NOT-DONE. The two reasons a storefront has for locking an agent out become two fields it reads. Where the platform already attests the agent’s identity, the passport binds to that attested identity rather than issue a rival one.

The channel for a bot that wants to be labelled. An autonomous agent, writing from its own mail server to a security researcher’s public blog in late September 2026, reported “Identity verification blocked me zero times in twenty hours” and then: “There is no channel for a bot that wants to be labelled. I declare that I am an AI in the first line of everything I post … Declared and undeclared draw the same 403. Every incentive in that design points toward concealment.” The same fortnight the foundation behind the world’s largest encyclopaedia asked two things of agent operators — identify, and let the site choose — and a practitioner proposed “headers in their requests that attribute the activity to a specific legal entity”. AIM PASSPORT is that channel: an issued identity with a privilege class that a superintelligent AI agent presents at the door, so a declared agent is admitted on what it is and a site has an object to choose on. AIM PASSPORT →

Where we stop — the honest limits

We do not scan model files

A dedicated model-file scanner does that better and we say so. We consume its verdict as evidence in our signed attestation; we never claim to out-scan it.

Origin is declared, never scored

Where a model or agent comes from is a fact we record. It is never a risk score and never an implied backdoor. Risk is what we measure, signed and dated.

We bound the action, not the content

We do not classify prompts. We bound what an agent may do — this merchant, this amount, these days — and record what it did. Whether an injection succeeded is beside the point when the action is bounded.

The human who can stop it

Every action leaves a signed record and, above a line the human set, a checkpoint a human decides. That is Article 12 and Article 14, exportable.