VETO

What VETO does

Veto is a policy and risk enforcement layer for AI agent payments, operated by Investech Global LLC, a Delaware limited liability company founded in late 2025 by Tomer Meirovich. The product sits between an AI agent and the payment rail it is about to use, evaluating every proposed spend through an eight-stage risk pipeline — precheck, hard policy rules, prompt-injection detection, canonical-merchant typosquat detection via Levenshtein distance, crypto safety (including OFAC live feed, drainer-index lookups, and address-poisoning checks), LLM-as-judge intent verification, statistical anomaly detection, and per-agent behavioral baselines — and returning an allow, deny, or escalate verdict in under 300 milliseconds, accompanied by an Ed25519-signed JWT receipt that can be verified offline against a public JWKS.

The product surface spans a core API, an npm CLI (`@veto-protocol/cli`), an MCP server for live YAML policy authoring, a pure-TypeScript mandate-verifier, and the VetoGuardedAccount on-chain hard-stop smart contract (live on Base Sepolia testnet, with Solana support announced for v1.1 via Anchor). Operators define spend rules in YAML — per-transaction and time-bucketed caps, per-merchant limits, allowlists and blocklists, time windows, rate limits, and intent keywords — and every policy revision is content-hashed for audit. Veto integrates with Claude Code, OpenAI Codex, and Cursor as supported agents, and with Stripe MPP (card rail), Coinbase, Base, Solana, and the x402 protocol as payment rails, positioning the company as a rail-agnostic policy primitive rather than a single-chain or single-agent tool.

Commercially, Veto runs a self-serve, product-led go-to-market model aimed at developers, with all code MIT-licensed on github.com/veto-protocol, a live public receipts dashboard for transparency, and usage-based API pricing whose specific tiers are disclosed at sign-up rather than published. The company is founder-led, bootstrapped (no funding rounds disclosed), has 1–10 employees, and had processed 234 lifetime verdicts as of the source data — a small but active operational footprint consistent with an early-stage developer-first launch.

Name

VETO

Legal name

Investech Global LLC

Website

https://veto-ai.com

Company type

Private

Founded year

1901

Operating status

Operating

Headcount range

1–10 employees

Short description

Veto is a policy and risk enforcement layer for AI agent payments, evaluating every proposed spend through an eight-stage pipeline and returning signed allow/deny/escalate verdicts for developers and operators using agents such as Claude, Codex, and Cursor across card and crypto rails.

Ownership category

akta.pro rank

Product category

AI Agent Payment Security

akta.pro primary industry

Responsible AI Policy, Controls & Workflow Management (HDAAAMAG)

akta.pro secondary industries

Responsible AI, Security & Privacy Platforms (Safety, Guardrails, PII) (HDAEANAG), Prompt Security & Injection Defense (HDAAAKAE), Payment Abuse & Promo/Refund Abuse Prevention (FSAMALAI)

Keywords

• AI agent payments
• Payment authorization
• Risk engine
• Policy enforcement
• Agent payment security

Headquarters

HQ city

Delaware

HQ country

United States

HQ region

North America

Offices1 record

Markets served

GTM type

B2B

Offering type

Software

Cost components

Personnel, Technology or R&D, Infrastructure, Marketing or Sales, Operations

Revenue model

1. Usage-based API pricing: Veto charges for API usage. Pricing is on the website at time of sign up. Usage-based model aligned with transaction volume through the platform.

Pricing tiers

Go-to-market motion3 records

Distribution channels3 records

Marketing channels4 records

Core offering

VETO is a policy and risk enforcement layer for AI agent payments, sitting between autonomous AI agents and payment rails (Stripe, Coinbase, Solana, Base, x402). For each transaction it returns an allow, deny, or escalate verdict backed by a signed, offline-verifiable receipt, applying owner-defined spending rules through a risk engine combined with on-chain smart-contract hard-stops. It is delivered as APIs, SDKs, a CLI, an MCP server, and accompanying smart contracts that builders of AI agents integrate directly.

Product overview

Veto is a policy and risk enforcement layer for AI agent payments, operated by Investech Global LLC. The product consists of a core policy + risk engine (Veto), a CLI tool (@veto-protocol/cli), an MCP server for policy authoring, on-chain enforcement smart contracts (VetoGuardedAccount), and a pure-TypeScript mandate verifier. The platform integrates with any AI agent (Claude Code, Codex, Cursor) and any payment rail (Stripe MPP, Coinbase, Solana, Base, x402), evaluating spend requests through eight risk stages in ~0.6 seconds and returning cryptographically signed verdicts (Ed25519 JWT receipts) that anyone can verify offline. Both cooperative API enforcement and an on-chain hard-stop via EVM/Solana smart contracts are supported.

Differentiator

Problem solved

Functional benefit

Products and services

• VETO Policy & Risk Engine Core policy-and-risk engine for AI agent payments that returns allow/deny/escalate verdicts on every transaction and emits signed, offline-verifiable JWT receipts. Built for developers and enterprises integrating AI agents across Stripe, Coinbase, Solana, Base, and x402 rails.
• @veto-protocol/cli Command-line interface distributed via npm that lets developers author YAML policies, run the VETO risk engine locally, and integrate enforcement into agent build pipelines. For AI agent developers and engineering teams.
• VetoGuardedAccount (Smart Contracts) On-chain smart-contract account that programmatically blocks prohibited AI agent spend at the contract layer, providing a tamper-proof hard-stop on top of cooperative policy enforcement. Targets enterprises and AI deployers needing deterministic on-chain guarantees.
• mandate-verifier Standalone library for cryptographically verifying VETO Ed25519-signed JWT receipts offline, enabling counterparties, auditors, and downstream systems to validate authorization independently of the issuing service.
• VETO MCP Server Model Context Protocol (MCP) server that exposes VETO's policy-and-risk capabilities as tools to AI agents and agent frameworks, allowing them to invoke enforcement decisions natively from within their tool-use loop.

Quantifiable outcome

• Verdict in under 300ms
• +1 more outcomes

Segments2 records

Ideal customer profiles2 records

Technology focussed Yes

API detail

Has API

Yes

API docs

API detail

Core technology

AI maturity

App detail

Integration6 records

AI capability8 records

Feature7 records

Partnerships

Eight partnerships are on record, tiered core and major expansion.

• StripecoreTechnology or IntegrationStripe MPP (Machine Payable Payments) integration for card-rail at machine speed. Veto serves as policy layer for Stripe card transactions. Part of x402 launch window integration.
• Anthropic ClaudecoreTechnology or IntegrationClaude Code plugin integration via MCP tools. Veto wires into Claude Code in two slash commands. Intent verification stage uses Claude Sonnet 4 as judge.
• Base (Coinbase L2)coreTechnology or IntegrationOn-chain enforcement contract VetoGuardedAccount deployed on Base. EVM-compatible chain for hard-stop enforcement. Live on Sepolia testnet.
• Solanamajor expansionTechnology or IntegrationPlanned v1.1 support. Anchor + native Ed25519 sysvar verification ports same mandate primitive. Solana ports next up after Base integration.
• OpenAI (Codex)coreTechnology or IntegrationIntegration with OpenAI Codex agent for policy enforcement. Listed in supported agents section.
• CursorcoreTechnology or IntegrationIntegration with Cursor AI agent for policy enforcement. Listed in supported agents section.
• CoinbasecoreTechnology or IntegrationSupported payment rail for crypto transactions. Veto evaluates crypto destinations including Coinbase addresses.
• x402 ProtocolcoreTechnology or IntegrationOpen, rail-agnostic policy schema (APPS) for payment authorization. Veto x402 and Stripe MPP integration part of v1 launch window.

Scale indicators3 records

Recent moves6 records

Expansion highlights6 records

Direct peers

• Lakera: Lakera offers AI/LLM application security, including prompt-injection and jailbreak defense (Gandalf, Red). Directly comparable to Veto's prompt-injection detection stage (17 regex patterns + obfuscation checks) but focused on chat-output safety rather than payment authorization.
• Arkose Labs: Arkose Labs provides bot management, account takeover protection, and payment-fraud prevention for digital commerce. Comparable to Veto's typosquat detection, prompt-injection screening, and policy-based allow/deny verdicts on transaction requests.
• Sardine: Sardine provides payment fraud, scam, and AML/crypto compliance infrastructure for fintechs. Directly comparable to Veto in addressing fraud, sanctions screening (OFAC), and risk-scoring for digital-asset transactions, though focused on human-initiated payments rather than agent-initiated ones.
• DataDome: DataDome offers bot management, fraud, and account-abuse prevention for APIs and web flows. Comparable to Veto's role as an authorization layer between automated actors and downstream payment rails, with overlapping techniques in behavioral and anomaly detection.

Broad incumbents

• Cloudflare: Cloudflare offers Bot Management, WAF, and the AI Gateway product for LLM traffic. Comparable to Veto's bot/agent screening and policy enforcement, but as a general-purpose internet infrastructure incumbent rather than an agent-payment specialist.
• Chainalysis: Chainalysis provides blockchain analytics, AML/KYC, and sanctions-screening (OFAC) infrastructure for crypto transactions. Directly comparable to Veto's OFAC live feed and crypto safety stage, but operates as a broader compliance platform rather than an agent-payment authorization layer.
• Sift: Sift is a broad fraud-detection platform covering payment fraud, account takeover, and content abuse across large enterprises. Comparable to Veto's payment-abuse prevention and risk-engine approach, but as part of a much wider fraud-management portfolio rather than agent-specific authorization.
• Forter: Forter provides real-time payment fraud prevention and chargeback management for online merchants. Comparable to Veto's payment-fraud and abuse-prevention stage, but focused on human-checkout flows rather than autonomous agent transactions.

Emerging players

• Styra (OPA): Styra is the commercial steward of Open Policy Agent (OPA), a policy-as-code engine for authorization. Directly comparable to Veto's YAML policy authoring, version control, and rollback model, though OPA targets infrastructure/Kubernetes authorization rather than AI payment authorization.
• Permit.io: Permit.io offers authorization-as-a-service with policy-as-code, audit trails, and SDKs. Comparable to Veto's policy enforcement and signed-receipt auditability, but focused on application-level access control rather than agent payment authorization.

Market position

Strengths5 records

Weaknesses5 records

Competitive moat5 records

Key risks6 records

Key highlights6 records

Customer concentration

• GitHubgithub.com/veto-protocol
• Xx.com/vetooai

Revenue estimate

Valuation estimate

Number of profiles

Profiles1 record

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about VETO