AI agents can now discover, invest in, redeem, and rebalance tokenized U.S. Treasuries and other financial products within wallet policies and configurable human approvals.
From permissionless DeFi to regulated onchain finance
The first generation of financial agents connected software to permissionless DeFi. Agents could discover lending markets, construct transactions, and monitor positions across thousands of onchain opportunities.
Yield.xyz and Privy entered that first wave together in May, launching guardrailed agents that paired onchain financial intelligence with wallet policies and controlled execution. That infrastructure gave agents a way to operate across DeFi without giving them unrestricted authority over user funds.
Tokenized financial products introduce a different operating problem. Before an investment can proceed, the system may need to verify investor eligibility, surface minimum investment requirements, account for redemption cooldowns, and enforce wallet policies or human approvals before capital moves.
Yield.xyz and Privy have now demonstrated that workflow end to end. In what the companies believe was the first policy-controlled purchase of a tokenized U.S. Treasury product by an AI agent on behalf of a user, Yield.xyz AgentKit identified an eligible Midas product and constructed the transaction. Privy independently applied wallet policies inside its Trusted Execution Environment before signing and executing it. The transaction settled on Base.
The companies also demonstrated human-approved redemption and rebalancing workflows involving products from Midas and Dinari. Together, these workflows show how an agent can manage an investment across its lifecycle while an independent wallet layer controls whether each transaction is permitted to execute.
AgentKit gave financial agents one interface to DeFi
Over the past year, Yield.xyz built an access layer for financial agents, letting developers discover, monitor, and manage more than 3,300 yield opportunities across 85+ networks through a single integration.
Instead of connecting agents to protocols one by one, Yield.xyz AgentKit gave them a unified interface across staking, lending, money markets, vaults, liquid staking, and other onchain yield products.
That was the first frontier: broad access to decentralized finance.
The next frontier requires independent control
Through RWAs on Privy, developers can build agents that discover, monitor, allocate to, and manage tokenized real-world assets, including U.S. Treasuries, money market funds, private credit, CLO strategies, and other institutional products.
The agent can discover a product, check its access requirements, and construct an unsigned transaction. It cannot grant itself permission to move the wallet’s capital. Users and institutions determine which assets the agent may use, how much it may allocate, which contracts it may interact with, and when a person must approve the transaction.
In DeFi, broad access was the first challenge. Regulated finance also requires eligibility checks, approval workflows, and policy-controlled execution. The Yield.xyz and Privy integration is built around those requirements.
How the two systems work together
Yield.xyz provides the financial intelligence layer. AgentKit can discover opportunities, monitor portfolios, check whether a wallet is eligible for a product, surface KYC requirements and investment minimums, track redemption cooldowns, and construct subscription, redemption, or claim transactions.
Privy provides the secure execution layer. Its embedded wallets independently enforce spending limits, supported networks, contract allowlists, and approval requirements inside a Trusted Execution Environment before signing.
Yield.xyz constructs the transaction and passes it to Privy unsigned. Privy then determines whether the transaction satisfies the wallet’s policies. The agent cannot bypass or change those controls.
“For AI agents to manage real financial products, intelligence isn’t enough. They need a secure way to act. Yield.xyz gives agents the context to understand products and transactions, while Privy enforces what they’re allowed to do, including spending limits, approved contracts, and human approvals. Together, agents can act autonomously without giving up the controls users and institutions expect around their assets.”
Debbie Soon, Head of Marketing, Privy
If a wallet is not eligible for a permissioned product, Yield.xyz returns the provider’s KYC URL and the agent submits nothing. The same preflight process surfaces minimum subscriptions and redemption cooldowns before an allocation is prepared.
Invest, redeem, and rebalance
The integration covers the primary actions required to manage tokenized financial products:
Invest. An agent can detect idle capital, review available products, check whether the wallet meets the product’s access requirements, and construct an allocation within predefined wallet policies and spending limits.
Redeem. An agent can prepare the redemption of an existing position and route the transaction to a designated person for approval before capital moves.
Rebalance. An agent can monitor an allocation, prepare an exit from one position, check the requirements for a new product, and construct the reallocation according to predefined policies.
Some tokenized products do not settle redemptions immediately. For those products, Yield.xyz AgentKit can track the cooldown, detect when a pending action becomes available, and construct the final claim transaction before preparing a subsequent allocation.
“We’ve spent the last year building the financial infrastructure that lets AI agents move from understanding markets to actually operating in them. An agent can now discover and compare financial products, understand whether a user is eligible, construct the right investment or redemption, monitor what happens next, and rebalance as opportunities change, all through one interface. With Privy, we can pair that financial intelligence with programmable control over how money moves. That’s what turns an AI assistant into an agent that can actually manage investments on someone’s behalf.”
Apurv Mishra, Co-Founder and Chief Product Officer, Yield.xyz
Autonomous and human-approved workflows
Organizations can choose how much authority an agent receives.
Autonomous allows Privy to sign and execute a transaction automatically when it satisfies predefined policies such as spending caps, supported networks, contract allowlists, and allocation limits.
Semi-Autonomous, or human-approved, routes every transaction through Privy’s Intents API. A designated person must approve the transaction before Privy signs and executes it. This is the recommended default for KYC-gated products, institutional allocations, and workflows where regulated capital should not move without explicit review.
Humans remain in control wherever judgment, governance, or regulation requires it. Agents handle the continuous work of monitoring positions, preparing transactions, tracking pending actions, and responding as opportunities change.
Management beyond U.S. Treasuries
The same infrastructure can support tokenized money market products, private credit, CLO strategies, tokenized cash-management products, and other institutional investments.
These products can sit alongside permissionless opportunities covering lending, staking, liquid staking, vaults, and money markets through the same Yield.xyz integration. Developers can use that common interface to build AI wealth copilots, treasury management systems, fintech yield products, institutional portfolio tools, intelligent wallets, and embedded investment experiences.
The first generation of financial agents proved that software could operate across DeFi. Yield.xyz and Privy are extending that operating model to financial products that require eligibility checks, investment limits, redemption handling, and independent control over execution.