Track. Analyze. Protect.
Every Agent Action, In View. Agvio watches the wallets of AI agents on Robinhood Chain: what they sent, what they may spend, which moves break your rules, and how often they fail.
Protect means: see it, get the alert, revoke it yourself.Agvio never holds, limits or stops an agent's funds.
Every agent action leaves a trace on chain. Agvio reads it back to you.
Watch any agent from one address.
Read only. No wallet, no sign-up, nothing stored on our side.
One address.
Four views.
Paste an address and the monitor reads it from Robinhood Chain: what it did, what it may spend, which moves break your rules and how it performs. The same scan feeds every view.
Activity Monitor
live sampleReading the latest blocks…
Sample: busiest senders of the latest blocks, read live. A busy address is not known to be an agent.
Activity Monitor
Every transaction the agent sent that left a token event in the window, with target, method, value, gas and time. Transfers in and out beside them. The nonce says how many it sent in total, so you see what the window missed.
Open this view →What does this view read?
Token events in the window you pick
Each transaction: target, method, value, gas, time
Nonce: how many it sent in total
All of it from Robinhood Chain, when you look.
Agvio reads the chain, not the agent's word.
Busiest senders right now
reading…| Address | Txs | Targets | |
|---|---|---|---|
| Reading the latest blocks… | |||
A busy address is not known to be an AI agent. This list is only a starting point for the watch list.
Built on public data and one open contract.
Robinhood Chain
Chain 4663. Every figure is read from the official RPC at the moment you look.
AgvioDeclarations
Not deployed yet. Holds no funds. No owner, no fee, no upgrade path.
Open source, MIT
The scan, the rules and the contract are plain code you can run and check yourself.
Declare it. Anchor it.
Let anyone check.
Declarations. An operator declares the agent's address with a policy: most ETH per transaction, a cap per token, the contracts it is meant to call, a burst limit and a hash of the operator's contact. The agent consents with its own key. Each change is a new version.
Execution-log anchors. The agent keeps a log of what it decided and when. Its Merkle root goes on chain, chained to the one before. Edit one entry later and the file stops matching.
Flags. Anyone can point at a transaction that seems to break the declaration, with a rule number and an evidence hash. The operator can answer. A flag is evidence, not a verdict: nobody here decides who is right.
Limits. A declaration stops nothing: the agent can still do anything its key allows. It turns “what we said” into something the monitor can compare with what happened.
Log from your agent.
Check it from anywhere.
A small Node module in the repository records each decision with the agent's own clock and anchors the batch with the agent's key. The monitor then matches every entry to its transaction and measures the time from decision to block.
- · Entries: seq, time in ms, action, transaction hash or none, note
- · Leaves hashed with the agent address; pairs in sorted order
- · Hosted log storage and an API are planned, not built
import { createExecutionLog, anchor } from "./examples/agvio-log";
const log = createExecutionLog(agentAddress);
log.record("rebalance", txHash, "moved 5 USDG to the pool");
log.record("skip", null, "price moved more than 1%");
writeFileSync("agent-log.json", log.json());
await anchor({ rpcUrl, book, privateKey: AGENT_KEY, log: log.file() });Risky moves, down to 7 rules.
Each rule is written out with its exact threshold. An alert is a reason to look, never a verdict.
7
alert rules, each written out
0
funds held by Agvio or its contract
1
open contract, no owner and no fee
“A declaration is a promise.
The chain is the record.”
$AGVIO
$0 to watch
Watching agents, reading permissions, alerts and logs need no token and no sign-up. $AGVIO is planned for monitoring quotas once hosted alerting and an API exist; that use is not built and not proven.
About $AGVIO →Short answers
to good questions.
Open the monitorWhat is Agvio?
A monitor for the wallets AI agents use on Robinhood Chain. Paste an address and it reads, from the chain, what the agent sent, who may spend its tokens, which moves break the rules you set, how it performs, and whether its own execution log matches what happened.
Does it stop an agent from doing something?
No. Agvio watches; it never holds, limits or stops funds. "Protect" means you see the risk in time, get the alert, and act yourself, for example by revoking an approval from the agent's own wallet. A contract that enforces limits is a different product.
Where does the data come from, and what can it miss?
From the official Robinhood Chain RPC, read when you look. Without an explorer key, activity comes from token events in the window you pick (1, 6 or 24 hours) plus approvals of WETH, USDG and USDe over their whole history. A plain ETH send or a failed transaction leaves no event, so it is missing; the nonce tells you how many transactions are not shown.
What is an agent declaration?
A public statement in the AgvioDeclarations contract: an operator says which address is the agent and what it is meant to do (caps, allowed contracts, a burst limit), and the agent consents with its own key. The monitor checks behaviour against it. It stops nothing on chain.
Is a risk alert proof that something is wrong?
No. An alert means a written rule matched, for example an unlimited approval or a call outside the declared contracts. Many are harmless. Every alert links the transaction so you can look yourself. Flags on chain are evidence, not verdicts.
Does it store my watch list?
Only in this browser. Scans are read on the server from public data and cached for 30 seconds for everyone, so nobody's lookups are kept or tied to a person.
What are the risks?
Missing data is the main one: a quiet monitor is not a safe agent. AgvioDeclarations is new and has had no independent security review; it holds no funds, and the owner should deploy it and try it with small actions first. Revoking from your wallet is a real transaction you sign.
Do I need $AGVIO?
No. Everything here works without the token. $AGVIO is planned for monitoring quotas once hosted alerting and an API exist; that use is not built and not proven.
See your agent in view.
Paste its address. No wallet, no sign-up, nothing stored on our side.
Open the monitor