Who can use this feature? PayBox is available globally. You don't need a MoonPay account — PayBox is a standalone product with its own onboarding.
Getting started
Do I need a MoonPay account to use PayBox?
No. PayBox is a standalone product with its own account and onboarding. You can sign up for PayBox directly without a MoonPay account.
Where can I use PayBox?
PayBox is available globally, with the exception of sanctioned countries.
What can I store in PayBox?
You can store three types of sensitive material: on-chain wallets, payment cards, and secrets. Secrets cover anything you'd treat like a password — API keys, login credentials, KYC fields, or any named credential you choose to provision to a trusted agent client. Payment card support is coming in Phase 2.
Credentials and access
Can an agent see my raw card number or wallet private key?
No. For cards, agents receive scoped payment tokens or one-time virtual cards — never your actual card number. For wallets, agents receive signatures or transaction hashes — never your private key, seed phrase, or MPC share.
What about my secrets — can an agent see those?
Yes, secrets work differently from cards and wallets. When you store a secret in PayBox, it's returned as-is to the agent clients you've granted access to, based on the rules you set. Only store secrets you're comfortable sharing with those agents. You can require approval before any secret is released.
Important: Secrets are stored and returned as raw credentials. Cards and wallets are tokenized so agents never see the underlying credential, but secrets pass through. Treat your secret store like a password manager — only put in what you're willing to share.
Can I get my own credentials back from PayBox?
Yes. You can export your own wallet private key or any of your raw secrets back to yourself from the PayBox dashboard at any time. Exports go to you only, never to an agent.
Approvals
What are the different approval modes?
PayBox supports three approval modes, set per agent client:
Always approve — every operation pauses for your explicit sign-off before PayBox executes it
Approve above limit — small, pre-scoped operations run automatically; anything larger or outside the defined scope requires approval
Autonomous within policy — the agent acts without per-operation approval, but only inside a tightly defined grant you've configured
What happens if I don't respond to an approval request?
The request times out. Timeouts are logged as audit events alongside approvals and denials. The agent receives a timeout response and can't proceed with that operation.
Can an agent change the details of a pending approval?
No. Approvals are operation-bound. If anything changes — amount, merchant, recipient, contract, function, or secret name — the agent must submit a new request.
How do I know what I'm approving?
Every approval request shows you the full context before you decide: the requesting agent client, the credential being accessed, the merchant or destination, the amount and currency (for payments), the chain and contract details (for wallet operations), the secret name (for secret requests), and the expiration time of the request.
Money and disputes
Does PayBox move my money?
No. PayBox is a control plane for credentials, not a payment processor or custodian. It authorizes and gates operations, then issues scoped credentials to the agent. Actual fund movement happens directly between your funding source and the merchant or recipient.
How do I dispute a transaction made by an agent?
For card transactions, contact your card provider — they handle disputes the same way they would for any other charge on your card. For wallet transactions, the same rules apply as any non-custodial wallet: on-chain transactions can't be reversed once broadcast, so use approval modes and spend limits to protect yourself.
Activity and audit
Where can I see what my agents have done?
From the PayBox dashboard. You'll see every request, approval, denial, and credential issued. You'll also receive audit events by email so you always have a record of what your agents did.
What gets logged?
Every request, approval, denial, timeout, and credential issued is recorded in an append-only audit log. The log captures the requesting agent client, the credential accessed, the operation details (merchant, amount, chain, contract, etc.), and the outcome.
Security and account management
How do I revoke an agent client's access?
You can revoke an agent client's access at any time from the PayBox dashboard. Removing a client's grant immediately prevents it from making further requests.
How do I lock all agent access at once?
Use the kill switch in your PayBox account settings. This immediately revokes access for every agent client at once.
Tip: Review your active agent clients and their grants periodically, especially after completing a project or workflow where an agent no longer needs credential access.
What if I think my PayBox has been compromised?
Use the kill switch in your account settings to immediately revoke all agent access. Then contact our support team — they can freeze your PayBox account while you investigate and re-secure things.
Can I lose access to my own credentials?
Your wallet uses non-custodial MPC infrastructure, so MoonPay never holds your full private key. You can always export your own credentials back to yourself from the dashboard. For account recovery, follow the standard PayBox recovery flow set up during onboarding.