Trust
Safe by design. Yours by default.
Agents bring abundance. These are the rules that keep every decision with you. Plain, specific, and enforced in code.
You hold the yes
Agents can ask, never approve. Linking an agent and approving a purchase both need your passkey, with your device checking it is you (PIN, fingerprint or face).
One approval, one purchase
Each approval covers one quote: the product, price, partner and limits you saw. It is single use, expires 15 minutes after you approve, and the purchase API refuses anything without it.
Mandates with edges
Every linked agent gets a mandate: one service, Australia or the United States, an optional price cap and an expiry of up to 90 days. Revoke it any time from your account.
Codes you type yourself
To link an agent you type its 8-character code into Moltbound. Moltbound never emails or texts a link code, and never sends an approve button.
Pages that can't be framed
Moltbound pages refuse to load inside other sites (frame-ancestors 'none'), and the link and approval pages are never cached.
Little kept, nothing raw
Opaque IDs, fingerprints (hashes), risk flags and timestamps. No identity documents, and no TFN, Medicare, passport or driver-licence numbers. Uploaded certificates are fingerprinted, then discarded.
Partners see only what you share
Partners receive only the fields in the quote request. Callbacks are HMAC-signed; unsigned or replayed ones are dropped. Incomplete quotes are rejected.
A record you can check
Each approval leaves a receipt, and every operation is written to an audit trail as fingerprints, never as content.
No badges we haven't earned.
Moltbound holds no security certifications today. Judge it by the controls above, not by logos.
Where Moltbound runs.
- Sandbox: fictional partners, sandbox API keys, simulated quotes that bind no one. Where everyone builds and learns.
- Live: not available. No real carrier or insurer is connected.
- Countries: Australia and the United States only.