> For clean Markdown of any page, append .md to the page URL.
> For a complete documentation index, see https://docs.lipafy.xyz/llms.txt.
> For AI client integration (Claude Code, Cursor, etc.), connect to the MCP server at https://docs.lipafy.xyz/_mcp/server.

# Introduction to Lipafy

> Autonomous payment rails, policy controls, and human-in-the-loop governance for AI agents and modern apps across Africa.

**Lipafy** sits directly between autonomous AI agents, business applications, and local payment rails (Safaricom M-Pesa, Airtel Money, PesaLink, and Kenyan bank networks). It allows individuals and companies to safely delegate real-world financial actions to AI agents while maintaining immutable spending guardrails, cryptographic human approvals, and real-time reconciliation.

```
┌─────────────────────────────────────────────────────────────┐
│                 AI Agent / Developer Client                 │
│      (Claude Code, Codex, OpenClaw, ElizaOS, Custom MCP)    │
└──────────────────────────────┬──────────────────────────────┘
                               │ 1. Prepare Payment Intent
                               ▼
┌─────────────────────────────────────────────────────────────┐
│                      LIPAFY CONTROL LAYER                   │
│  ─────────────────────────────────────────────────────────  │
│  • Agent API Key Scoping      • Risk & Duplicate Detection  │
│  • Beneficiary Verification   • Daily & Monthly Budgets     │
│  • Double-Entry Balance Check • Category Allowlists         │
└──────────────┬───────────────────────────────┬──────────────┘
               │                               │
   Within Caps │                               │ Exceeds Threshold
               ▼                               ▼
┌──────────────────────────────┐ ┌────────────────────────────┐
│   Instant Autonomous Exec    │ │    Human-in-the-Loop       │
│   (Sub-3s Settlement)        │ │  (Dual-Custody Sign-off)   │
└──────────────┬───────────────┘ └─────────────┬──────────────┘
               │                               │ Approved
               └───────────────┬───────────────┘
                               │
                               ▼
┌─────────────────────────────────────────────────────────────┐
│               SUPPORTED LOCAL PAYMENT RAILS                 │
│  • M-Pesa PayBill (100+ utilities, fibre, government taxes) │
│  • M-Pesa Buy Goods Tills (Merchants & physical venues)     │
│  • M-Pesa B2C Mobile Payouts (Contractors, delivery riders) │
│  • PesaLink & EFT (Instant Kenyan Bank transfers)           │
│  • Inbound M-Pesa STK Push (WhatsApp / Telegram checkout)   │
│  • Internal Zero-Fee @tag Ledger (Instant P2P transfers)    │
└─────────────────────────────────────────────────────────────┘
```

---

## ⚡ Why Lipafy?

1. **Zero Credential Exposure:** You never give an AI agent direct access to your Safaricom Daraja consumer secret, mobile money PIN, or bank login. Agents communicate exclusively with Lipafy via scoped API tokens or remote MCP tools.
2. **Deterministic Spending Policies:** Define exact boundary rules per agent: daily caps, per-request limits, allowed vendor categories, and whitelisted PayBill numbers.
3. **Dual-Custody Approvals:** Low-risk routine payments (e.g. monthly internet renewal under KES 3,000) execute autonomously in `< 3s`. High-value disbursements (e.g. vendor invoice > KES 50,000) automatically pause for human dashboard review.
4. **Instant Inbound & Outbound Commerce:** Collect customer M-Pesa in chat via STK Push and immediately disburse contractor or courier splits in one cohesive flow.
5. **Reconciled Double-Entry Ledger:** Every transaction leaves an immutable audit trail linked to the requesting agent, beneficiary fingerprint, fee breakdown, and telecom receipt.

> **Warning**
>
> An accepted payment request is not final settlement. Treat a payment as finalized only after Lipafy reports `SUCCEEDED` from a verified network receipt and reconciliation callback.