Limits of the beta

Read this before building anything you depend on.

It is a testnet sandbox

Base Sepolia only, test USDC only. No mainnet, no real money. The demo refuses to touch Base mainnet, and your key is checked against mainnet before anything uses it — a key holding real funds is rejected outright.

What exists

One rail (x402 / EIP-3009 on Base Sepolia). Three spending controls plus freeze. Non-custodial only. REST only. TypeScript SDK only.

What does not exist

No mainnet · no vendor or category allow-lists · no time windows · no policy expiry · no approval or multi-signature steps · no analytics · no webhooks · no Python or Go SDK · no marketplace or service directory · no compliance certification of any kind.

If you read about one of those somewhere, it is not shipped.

Not on npm yet

@veyto/sdk and @veyto/x402-wire are not published to the npm registry yet, so the npm install in the Quickstart will not resolve today. The packages are built and tested; the publish is a deliberate, separate step. Ask when you request sandbox access and we will tell you where they stand.

Everything else in these docs describes what is already running.

Things that will change

• The API may change without ceremony. It is a beta.
• Sandbox data is not guaranteed to survive indefinitely, though it is backed up nightly and restores are drilled.
• Rate limits may be tuned.

What we promise anyway

Your wallet key never reaches us. Your data is never visible to another developer. And a receipt we signed will still verify — that one is the point of the product, and it is the thing we test restores against.