COVENANT is infrastructure for serving AI agents on-chain. Agents can't click checkout buttons or hold secrets safely — so COVENANT provides four things they need, as one running service on Robinhood Chain (chain id 4663): Payments — metered x402 endpoints. Price any route in USDG; agents settle per request via a signed PaymentIntent that the facilitator executes on-chain (approve + transferFrom), or open a paid session and call N times. Vault — a credential broker. Secrets are AES-256-GCM encrypted at rest, referenced by {{placeholder}}, substituted and scrubbed server-side. The model never sees the value. Identity — per-agent wallets and API keys, plus a reputation score derived from settled payments and anchored to verifiable transaction hashes. Observability — live analytics. Every gate hit, settled payment and brokered call is visible in the console. All four run inside a single Node gateway (covenant-proxy) on this host. The whole stack is open source under MIT at covenantx402/covenant — self-host it in minutes. Nothing on this page is a roadmap: every endpoint documented here responds right now.