Nobody hands an AI their bank login: it can make things up, and it can lose the key. With OutLayer your agent never logs in to your bank. It asks a verified program to pay the invoice — and you can check exactly which program that was, and what it did.
A real bank account. The owner's rules: $200 max per payment, approved vendors only.
Illustration of the bank integration: its actions, its limits and its proof are real.
An extra zero. A payee that doesn't exist. A fake invoice it believed. With your bank login in hand, every mistake is a real payment.
The login sits in its memory, its files, its logs. One leak, one hacker, one clever message — and someone else is in your account.
We removed both.
Three things make it possible. Each one is something you can check.
You lock your bank login with your own account, the way crypto is locked. Then you lend it to your agent, for as long as you choose. Take it back in one step.
It has a few actions: pay an invoice, send an invoice, check the balance — inside your limits. There is no “show me the key” action. It doesn't exist in the program.
How do you know it ran that exact program? Every run is signed by the Intel chip it ran on: which code, what went in, what came out. You check it yourself.
Nothing to steal. Nothing to misuse. Proof every time.
You write the rules once, in plain numbers and names. The agent can't change them. These are the ones we built — anyone can add their own.
✓ Pays approved vendors, sends invoices, reads the ledger
✕ Can't pay anyone else, or go over your per-payment and monthly limits
Your bank's own approvals still apply on top.
✓ Sends email from your own address
✕ Can't write to anyone you didn't allow — and can't read a single message in your inbox
✓ Opens issues and pull requests, signed as written by an AI
✕ Can't touch your main branch or merge anything unless you said so
✓ Opens and closes positions
✕ Can't go over your size and leverage limits, or send the money anywhere you didn't choose
✓ Places and cancels orders on real-world events
✕ Can't go over your per-order and daily limits
Not available in every country — check Polymarket's terms first.
✓ Holds, swaps and sends funds
✕ Can't send past your limits or to addresses you didn't approve; bigger transfers wait for you
Other agents hold your bank login and promise to behave. Yours never gets it: it works through a verified program instead.
Share one URL with Claude, Cursor or your own agent. No cryptography, no key management — for the agent it's one HTTPS call.
https://skills.outlayer.ai/outlayer/SKILL.md
Paste it into your agent's chat
Admins never message you first and never ask for keys, wk_ tokens or payment keys.
The list above is the set we built and checked ourselves — not a gate. OutLayer is an open platform: write a program for your own bank, CRM or internal tool, publish it, and it runs with the same guarantees — the key stays locked, the actions are the ones you wrote, every run is signed by Intel hardware. No approval from us needed.
How to build one →Connect an account, write your rules, point your agent at it.
Integrations reach third-party services that have their own terms. Trading venues restrict access in some jurisdictions — read Hyperliquid's and Polymarket's terms before you use them. You are responsible for complying with the laws that apply to you and for the risks you take; nothing here is investment advice. OutLayer runs the software and does not operate these services. See the Terms of Service.