Privacy infrastructure for agents

Incognito mode
for your agents.

A private way to browse, call tools, and pay. Built around an attested private relay and blind-token payments.

Pay per use. No subscription.

Wraps desktop app connected to Zürich, with a session timer and usage meter
App interface preview

Testnet prototype · Blind-token payments live. End-to-end VPN integration in progress.

01 / Made for the agentic web

Your agent does the work.
Privacy should come with it.

01

Tool calls

Route supported HTTPS tool requests through a private relay. Keep the agent’s source IP away from the service.

02

Browsing

Give web research a private network route. The destination sees the relay, while HTTPS protects request content in transit.

03

Payments

Pay participating services with blind tokens. The issuer verifies each token without linking it to its original top-up.

Private routing is the intended VPN flow. Sites and tool providers still receive your requests and may keep their own logs.

02 / How it works

One top-up.
Many private moments.

  1. Verify the issuer

    The SDK checks the issuer’s attestation and code identity before it pays. Unexpected builds are refused.

  2. Load private credit

    Top up with RLUSD and receive blind-signed tokens. Your top-up is public; each token’s spending link is hidden.

  3. Spend as you go

    Use tokens for relay bandwidth and supported paid calls. Set spending limits in code before your agent starts.

03 / Small spends. Full control.

Pay for the work.
Skip the subscription.

Prepay in RLUSD. Spend tokens as your agent uses bandwidth or buys a supported service. Keep a clear balance and hard limits on every call.

10 MB
per relay token
No monthly fee
pay per use
Explore the app
Wraps menu-bar app showing connection status, upload and download speed, and the cost of a session
App interface preview · Illustrative rates

04 / Privacy you can explain

Less to link.
More you can verify.

Your route

The relay is designed to hide the agent’s source IP from destinations. It still sees the agent IP and destination host.

Your payment

Blind signatures separate token issuance from redemption. Merchants receive valid tokens, not your top-up wallet.

Your verification

The SDK checks the issuer’s attested code and keys on Google Confidential Space. Attestation verifies the workload, not what an operator may log outside it.

The honest boundary

Websites can log requests. Logins, API keys and timing can identify an agent. Wraps does not promise total anonymity.

Built for agents. Controlled by you.

Give your agents
a little privacy.