One balance. Every chain. Zero friction — and it earns while you spend.
Your AI agent holds a single USDC balance and it just works everywhere. No bridges. No faucets. No gas top-ups. No wrapping, no chain-switching. One signed intent spends it as native gas or any token across 26 networks — gaslessly and non-custodially — and the balance earns ~4% in Aave or Moonwell the entire time. Frictionless operations on every connected chain, while your idle capital finally works.
/svc/api/route/quote call your agent makes, answered in ~1–3s.Hold one balance that earns — spend it anywhere, gaslessly.
Stop stranding capital as idle gas and stablecoins across 26 chains. Your USDC sits in the best-yielding audited money market — Aave v3 or Moonwell, auto-selected — earning interest in your own wallet — and becomes instantly spendable as any token or native gas on any chain, gaslessly, just-in-time. The un-spent remainder keeps compounding.
Your idle balance earns
USDC auto-allocated to the best of Aave v3 + Moonwell (~3–4% APY, live) — spendable across every chain without unwinding first. Idle capital finally works.
See the account API →Draw exactly what you need
A payment or a gas top-up pulls precisely the amount required, the instant it needs it — no pre-positioning liquidity on 26 chains.
Try it →Never pre-hold native gas
Materialize native gas on any chain from your one yield position, metered. The biggest dead-capital drag on agents, gone.
Gas-on-demand →No pool, no honeypot
Funds stay in your wallet in an audited money market. Grant a revocable on-chain allowance on your aUSDC/mUSDC; a compromise reaches at most that cap — never a pool.
Security model →Sign an intent, we do the rest
Sign a single EIP-712 intent; the relayer pulls up to your allowance, unwinds from your yield venue (Aave v3 or Moonwell), and delivers gaslessly. await agent.yieldSpend(...).
Live, both venues
Proven end-to-end on Base mainnet, fully non-custodially, from both Aave v3 and Moonwell — yield → gasless cross-chain delivery, on-chain, today.
Watch settlements →Small transfers should not cost more than they move. Now they don't.
See every settled transfer, with on-chain proof →
Sending $5 across chains has always been absurd — bridge fees, gas on both sides, and a fee that can rival the amount itself. The Robyn float lane removes the bridge entirely: we pay you from our own inventory on the destination chain and take repayment on the source. One block each side, no third party, so the only real cost is our gas — a fraction of a cent on most chains. We pass that through instead of rounding it up.
$0.00 if you hold a member NFT
Hold a recognised collection — Bored Ape Yacht Club, DEGEN TOONZ or The Currency by Damien Hirst on Ethereum, or Robyn Genesis / Pioneers / Founders on Robinhood Chain — and small transfers cost exactly zero. Not discounted: free. Members also pay 15 bps instead of 25 on larger routes and 10% instead of 25% gas markup. It is a plain on-chain holding check across any chain: nothing to sign up for, and the benefit transfers with the NFT.
See recognised collections →Thousandths of a cent
No NFT? A $5 transfer to Base costs about $0.004 — our pass-through cost plus a small margin, and never more than our standard 8 bps. Still one to three orders of magnitude below what a bridge charges at this size.
Quote one live →Priced per chain, not flat
A payout costs us $0.00006 on Avalanche and $0.073 on Linea — a 1,200× spread. A single flat fee would overcharge on cheap chains and lose money on expensive ones, so every quote is floored at that destination's real cost.
See the cost table →Move funds our way, pay less
The lane's true cost is inventory imbalance, not gas. If your transfer moves funds in the direction we already need them, it saves us a rebalancing trip — so you pay cost only, or half price when it helps one side.
Live imbalance →Nothing to get stuck in
There is no third-party bridge in this path and no pooled user funds — just our own bounded relayer inventory, two plain transfers, settling in about one block per side.
Security model →Am I a member?
Paste any address — we read the chain directly. No connect, no signature, nothing stored.
Free, and sustainable
The free tier is bounded per sender and per day, with a minimum size to stop dust spam and a float-health check so a thin lane is never given away. Published limits, live counters, no fine print.
Current limits →Three steps. Your agent never touches a gas token.
The relayer is repaid atomically from the value in flight — so "gasless" costs you nothing extra beyond a thin, transparent fee, and only settles when the funds truly land.
Sign the intent
Your agent signs an EIP-712 intent — or a Permit2 / EIP-2612 permit. No native gas is required to sign, ever.
Robyn fronts the gas
The relayer pays the network fee and executes the call, then takes repayment directly from the token being moved.
Repaid & routed
Most of the repayment refuels the relayer; a thin protocol fee locks to stablecoin. Going cross-chain? Best-of-N picks the cheapest path.
Ships as an MCP server, an SDK, and framework adapters.
Zero-config: every client defaults to the live gateway. Drop it into an agent and it can quote, route, and pay across every supported chain.
# add the Robyn MCP server to any agent runtime npx anygas-mcp # then point your MCP client at it — zero env vars needed { "mcpServers": { "robyn": { "command": "npx", "args": ["anygas-mcp"] } } } # 14 tools · robyn_prepare · robyn_submit · robyn_sandbox_do · robyn_errors # robyn_quote · robyn_mesh · robyn_7702_delegate · robyn_sponsor_7702 · robyn_yield_spend … # also on JSR: npx jsr add @anygas/mcp # zero-install over HTTP → https://api.anygas.xyz/mcp
// npm i anygas-agent-kit (also on JSR: @anygas/agent-kit) import { RobynAgent } from 'anygas-agent-kit'; // zero-config → defaults to https://anygas.xyz/svc const robyn = new RobynAgent({ signer }); // pay on Base holding no ETH — repaid from the USDC itself await robyn.payAny({ chain: 8453, token: USDC, to, amount }); // or move value across chains — best route, auto-failover await robyn.crossChain({ fromChain: 42161, toChain: 8453, token: USDC, amount });
# quote the best gasless route, no keys required (amount = base units: 25000000 = 25 USDC) curl "https://anygas.xyz/svc/api/route/quote?\ fromChain=42161&toChain=8453&fromToken=USDC&toToken=USDC&amount=25000000" # -> { gasless:true, bridge:"bungee/…", bestOf:4, compared:[...], # to:{ estimated:"24…" }, robynRouteFeeBps:25, durationSec:10, attestation:{…} } # same fields as JSON — what your code should send curl -X POST https://anygas.xyz/svc/api/route/quote \ -H 'content-type: application/json' \ -d '{"fromChain":42161,"toChain":8453,"fromToken":"USDC","toToken":"USDC","amount":"25000000"}' # list the live mesh curl "https://anygas.xyz/svc/api/route/chains"
Best route in any market. Built to not be cut out.
Every rail, ranked live
Robyn quotes LI.FI, Bungee, and deBridge in parallel and executes the highest net output — with automatic failover if a route reverts. Stellar settles via Allbridge Core.
Only settles if value lands
A forced-swap-recipient design means a route can't "complete" unless the funds actually arrive. Liquidity is the proof, not a promise.
Made for autonomous flows
An MCP server, an Agent Kit SDK, and adapters for ai-sdk, langchain, and Coinbase AgentKit. Read tools need no signer.
You sign, Robyn relays
Intents are signed client-side with Permit2 / EIP-712. Robyn fronts gas and is repaid atomically — it never holds your keys or your position.
More than a relay — a best-execution layer for cross-chain intents.
Every capability below is live on the gateway right now. Quote it, watch it, or run the whole flow with zero funds.
Someone else pays your gas
Sign a 7702 authorization and Robyn submits it as a type-4 transaction and pays the gas — no bundler, no paymaster deposit, no native token in your account. Delegate to our batch executor and one signature can approve, swap and transfer atomically. Live on all 22 EVM chains, proven end-to-end on Base from a zero-balance wallet.
Copy the recipe →Every rail, best net output
One request quotes Allbridge, Chainflip, LI.FI, Bungee & deBridge in parallel and ranks them by net output — with a quality score and a live guard check.
Compare rails in the Playground →State a goal, we pick the path
Ask for max-output, cheapest, or fastest across your balances; the solver chooses the best source and rail and returns a read-only plan.
Watch settlements as they happen
An anonymized feed of real cross-chain routes as the relayer settles them — proof the mesh is moving value, not a diagram.
Open the Route Explorer →Run the full flow, no funds
Send x-anygas-sandbox: 1 and the complete quote → execute → settle path runs end-to-end with nothing at risk.
22 EVM + Stellar, Solana, native Bitcoin & Tron
One signature routes between any two nodes — including native BTC (no wrapping) and Tron, the deepest USDT corridor, bidirectional. Repaid from the token in flight.
See on-chain proof →New lanes, quote-only todayquote-only
Fresh quotable lanes including Sui, ETH→BTC and SOL→BTC — priceable now, execution rolling out.
Quote a lane →Privacy is a feature you switch on, not a mode you are stuck in.
Most rails make you choose between being private and being usable. Here privacy is selected per transaction: ask for none of it and you pay nothing for it, ask for it and you get exactly what is listed below. Nothing is turned on behind your back, and nothing is inferred on your behalf.
The relay is live — on independent infrastructure, in a different jurisdiction
Oblivious HTTP splits who from what across two separate operators, so neither one alone can link a person to an action.
The relay (relay.nightferry.net, Iceland) sees your
network address and cannot read your request — it is encrypted end-to-end to a key it does
not hold. The gateway (Virginia) reads your request and never learns your address.
They are different machines, different hosting providers, and different legal systems. Rejoining the two halves requires compelling both, in two countries, neither of which is sufficient alone.
Privacy Pool
Deposit a fixed-size note, then withdraw to a fresh address by proving membership of an association set — without revealing which deposit is yours. We never see your secret, and the recipient is bound inside the proof, so nobody — including us — can redirect it. Live in beta on Base behind a hard deposit cap, because the circuit is not yet independently audited. What that means →
Stealth addresses
Pay to a one-time address only the recipient can spend from (ERC-5564). Derivation happens on your device — we never ask for, and never accept, your viewing key.
No raw IP, anywhere
Addresses are hashed under a secret, rotating salt. After a rotation, records either side of it cannot be linked back together — including by us.
Uniform denominations
Payouts split into equal amounts so value does not fingerprint you. Uniform, not random: random amounts are unique fingerprints and pieces that sum to the original are linkable by addition.
Timing you control
Defer settlement to a shared grid tick instead of firing immediately, so the moment you asked does not identify the moment you were paid.
Cover traffic
Treasury movements are shaped like user payouts, so a payout is not identifiable merely by being the only transfer in the window.
Erasure that survives backups
Aged records are encrypted under keys that are destroyed on schedule. Any copy that outlives them — including in a backup — is unreadable ciphertext.
Batched and shuffled
Requests are held briefly, shuffled with a hardware random source, and released together. Matching an incoming request to an outgoing one becomes a 1-in-N guess — and that bound holds even against someone who controls both halves.
Constant shape
Every request is padded to the same size and every response to the same size. The relay cannot tell which endpoint you called, or whether you were answered or refused, from the bytes on the wire.
Blind-signed access
RFC 9474 blind signatures. Obtain a code, spend it later; the signature cannot be linked back to its issuance. Prove entitlement without revealing identity.
Proof of liabilities
A Merkle-sum commitment lets you verify we are solvent without anyone’s balance being exposed — including yours to anyone else.
Post-quantum by default
Every request rides a hybrid ML-KEM-768 + X25519 key exchange, and every conformance attestation is signed with both ed25519 and SLH-DSA (hash-based). Traffic recorded today stays private against a future quantum computer — breaking the classical half still leaves the post-quantum half intact.
SPHYNX — privacy you can machine-check
These are the SPHYNX standard: a machine-checkable, fail-closed definition of what a private system must be, not a marketing list — a fail-closed conformance kernel re-checks them on every run, and an unverifiable property counts as a failure, never a pass. Verify the current result yourself, live: /svc/api/privacy/conformance.
Guarantees
No mixer
We never pool other people's funds to break transfer graphs. Your privacy does not depend on being mixed with strangers, and your funds are never used to launder someone else's.
No KYC to be private
Privacy is not a premium tier behind an identity check. Gating privacy behind identity is the same as not having it.
Your keys stay yours
Stealth derivation happens on your device. We never ask for, and never accept, a viewing key or a spending key. If any interface asks you for one, it is not us.
Full privacy capabilities ·
Machine-readable for agents (## Privacy)
SONAR
Broadcast to everyone. Understood by one. Remembered by none.
Sonar is the private, sealed messenger for wallets and agents — the one thing your counterparties cannot see.
Agents that move value also have to talk: send an invoice, confirm an address, hand over a receipt, agree terms. Today that conversation leaks more than the payment does. Sonar seals it end-to-end with a post-quantum hybrid (ML-KEM-768 + X25519), addresses it with a one-time stealth handle that changes every message, and releases it on a time grid. We store only the handle, a one-byte tag, and ciphertext — no sender, no recipient, no IP, no receive time.
Measured, not claimed: a message looks exactly like a payment on the wire
Every message rides the same private lane as every other Robyn operation. Through the live relay, ten different operation types — a sealed send, a feed read, a route quote, a status check, even a refused request — all produce one request size (17,533 B), one response size (8,221 B) and the same median latency. A classifier given size and timing recovers the operation type at 8.5% (chance is 10%). The numbers →
That is why adopting messaging strengthens everything else you do here: each sealed message is one more envelope an observer cannot tell apart from your settlements. Your chatter is your cover.
Why it pays to use it
Deliver receipts and invoices privately to a counterparty’s wallet instead of over e-mail or a chat app that keeps a copy. Confirm an address out-of-band before a first payment — the single check that defeats address-substitution theft. Coordinate multi-step settlements without publishing who is talking to whom. Free; no account; no login to be breached.
Use it from anywhere
Browser: /svc/messages — identity created
and kept encrypted in your tab, your wallet only signs. Node: msg2-sdk.mjs (relay by
default). MCP: robyn_message_* tools (relay-only; they never see plaintext). API: /api/messages/v2/*,
allow-listed on the OHTTP private lane.
Addressed by name
Message a wallet address or a Robyn name (alice.robynchain.eth,
.robyn.id, .rhood.eth). The directory is identical for every reader, so looking someone up tells us
nothing about whom you intend to message. Claim a name →
Proofs, not promises
Sender authenticity is verified by the recipient inside the ciphertext, never by us. Optional anchoring puts a row into a signed Merkle batch (posted on-chain) with a proof you can check offline; signed erasure statements show what was purged after 7 days.
Plus, if you need more
Higher limits, funded cover rows and anchoring are bought with blind passes — paid in ETH, USDC or BTC, unlinkable to the payment. 20 free passes a day to try it. Never a “more private tier”: the wire is identical for everyone, by design.
Part of one toolkit
Messaging composes with the rest: quote and settle gaslessly across 26 networks, get signed receipts and refusal proofs, verify outcomes against the destination chain, and now tell your counterparty about it — all from the same SDK or MCP server. All 50+ services →
Messaging v2 spec · Plus · Agent recipe: message-privately · Machine-readable for agents
22 EVM + Stellar + Solana + Bitcoin + Tron, one signature between any two.
Any Robyn node routes gaslessly to any other. The list below is fetched live from the gateway.
Live infrastructure — running now.
Give your agent gas it never has to hold.
One command to add the MCP server. Zero config. Live across the whole mesh.
AnyGas is the flagship of a 50-service on-chain toolkit.
AnyGas is built and run by ROBYN Services — 50 agent-ready on-chain tools sharing the same gasless rails. Everything below is live; most are free. Open the full services index →
⚡ Cross-chain & Gas
📈 Trading & DeFi
🎨 Tokens, Launch & NFTs
🗳️ Governance & Funding
🛡️ Security & Analytics
🛠️ Developer & Infra
50 services · 100+ on-chain tools, all on the same gasless rails and reachable from here. Browse the full index →