Legacy passes

This page describes the historical NFT product. Minting has been replaced by Topups. New topups issue no NFT, create no reward weight, and grant non-expiring credit. The rules below apply only to historical contracts and grants.

The historical pass is a soulbound ERC-721 membership for one wallet with a .ai Agent ID. Testnet NFT minting was paused on 5 November 2026. The app's former /mint route now redirects to /topup; the rules below describe the retired mint implementation.

Membership

The membership implementation allowed repeated mints by the same eligible wallet. Each mint added 1x weight to that wallet's total. Pre-upgrade passes retain their original 1x or 2.5x weight and credit grants. Current topups do not change any of these weights.

Soulbound rules

• Multiple passes per wallet while supply remains.
• No transfer.
• No burn.
• No approval can move the pass.
• The pass stays with the wallet that minted it.

If you lose access to the wallet, the pass and its rewards are lost. There is no recovery.

Agent ID gate

Minting calls handleOf(msg.sender) on the Agent ID registry. An empty handle reverts with NoAgentId.

The handle is stored at mint time. If the registry handle changes later, the pass metadata keeps the original handle.

On testnet, the registry is a mock contract. The team sets handles manually.

Payment

BNB

The contract reads Chainlink BNB/USD, adds a 1% buffer, and compares the result with maxPayment.

• maxPayment is the most BNB you are willing to spend.
• msg.value must be at least the required BNB.
• Excess BNB is refunded.
• The feed must be positive and less than 1 hour old.

USDT

• The price is fixed at $5 per mint.
• maxPayment must be at least the price.
• msg.value must be zero.
• The contract pulls exactly the price with transferFrom.

USDT is not a fee-on-transfer token on BSC.

Supply

The contract enforces:

• totalMinted <= 5,000
• The 5,000 cap includes pre-upgrade passes. There are no separate edition caps for new mints.

The last mint emits SoldOutReached.

Mint flow

1. Check mint is open.
2. Check membership initialization and total supply.
3. Read the Agent ID handle.
4. Check payment.
5. Write token state.
6. Mint the NFT and emit Locked.
7. Call RewardDistributor.onWeightChanged with the old aggregate weight and old weight plus 10,000. Already earned rewards are preserved.
8. Send payment to treasury and refund excess BNB.
9. Emit PassMinted.

If any step reverts, the whole mint reverts.

Metadata

tokenURI is generated on-chain by PassRenderer.

The metadata includes:

• Membership edition.
• Agent ID handle.
• Reward weight.
• Serial number.
• A deterministic SVG passport.

The renderer sanitizes the handle to lowercase letters, digits, dots, and hyphens. Uppercase letters are dropped. The Agent ID registry is expected to return lowercase handles.

Upgrade compatibility

AgentPassSingle upgrades the existing proxy. New mint calldata is mint(address paymentToken, uint256 maxPayment). The old three-argument mint reverts with LegacyMintDisabled.

tokensOfOwner returns every owned token, including the pre-upgrade NFT. tokenOfOwner returns the latest token. balanceOf returns the count, and weightOfAccount returns aggregate weight. The existing PassMinted event retains its tier field; new mints emit edition 2.

Testnet

The testnet pass uses:

• Mock USDT.
• Mock Chainlink oracle at $600 per BNB.
• Mock Agent ID registry.

The testnet pass is not a real asset. Do not pay real funds for a testnet pass.