Skip to main content
Altheia is the on-chain control plane for AI agents on Sui. An agent gets its own key and a vault governed by a Move Policy object: per-transaction and per-day spend caps, an allowed-action set, a protocol scope, an expiry, and instant revocation. The SDK builds the policy-gated transactions. The contract enforces the policy. An over-budget or out-of-scope action reverts on-chain. The contract enforces it, not a server you trust.
Altheia — on-chain agents, on a leash
Altheia is live on Sui testnet. The deployed package ids are in SUI_TESTNET. RPC, coin types, and faucet links below are testnet.

The spec

Sui Foundation’s Overflow 2026 Agentic Web sub-track 2 specifies a Move policy object granting an AI agent a capped budget and protocol scope, with self-enforced ceilings, on-chain activity logs, and owner revocation. Altheia is the implementation: a Move Policy shared object, a Vault, a non-transferable AgentCap, a DeepBook adapter, and on-chain audit events.

What Altheia is not

  • Not a wallet. The agent holds its own key; Altheia governs what that key may do.
  • Not a payment rail. The DeepBook adapter is one gated action, not a settlement service.
  • Not a server-side guard. Enforcement is in the Move contract. The backend reads chain state; it does not decide it.

The policy model

An operator provisions one agent: a vault funded with a budget asset, and a Policy that grants the agent’s AgentCap a scoped capability. Every agent action routes through policy::check_and_consume, which asserts the policy is live and the spend is within the caps before any coin leaves the vault. A denied action aborts; no coin moves.
ControlFieldEnforced
Per-transaction capAssetCap.per_tx_capcheck_and_consume aborts over_per_tx_cap
Per-day cap (rolling 24h)AssetCap.per_day_capcheck_and_consume aborts over_per_day_cap
Allowed actionsallowed_actions (default-deny)assert_allows aborts action_not_allowed
Protocol scopeallowed_packagescheck_and_consume aborts package_not_allowed
Expiryexpires_at_msaborts policy_expired
Pausepausedaborts agent_paused (reversible)
Revokerevokedaborts policy_revoked (terminal)
Caps live in a shared object, so cumulative daily spend persists across transactions. An agent cannot bypass a cap by splitting a spend across multiple PTBs.

Start here

Quickstart

Install @altheia-xyz/sui, run a five-line agent, see allowed and denied.

Concepts

The Move Policy object, Vault, AgentCap, and on-chain enforcement.

DeepBook swap example

A runnable agent that swaps on DeepBook, capped and revocable.

SDK reference

AltheiaSui, agentRefs, the PTB builders, chain reads.

Repositories

Open the dashboard

Connect a Sui wallet on testnet to provision your first agent.