OurGlass

OurGlass is a recurring ERC20 subscription protocol built on the MetaMask Smart Accounts Kit (Delegation Toolkit). It lets a subscriber sign a single EIP-712 delegation that authorizes an organization to pull a capped amount of tokens per period (e.g. monthly). The cap is enforced fully on-chain by the Delegation Framework's built-in erc20PeriodTransfer caveat — no custom enforcer contracts, no trusted off-chain logic. A second pull within the same period is automatically a no-op.

How it works: the subscriber's funds sit in a Hybrid smart account controlled by their EOA. They sign one delegation scoped to a token, a per-period amount, a period duration and a start date. From then on, the organization collects each period by calling the DelegationManager's redeemDelegations with the signed delegation — the caveat caps every pull on-chain. The subscriber keeps full control: they can revoke at any time via disableDelegation, after which any further charge reverts with CannotUseADisabledDelegation.

The origin of the idea: while building Sofia, we needed a reliable way to charge DAOs a monthly fee for a service. There was no clean, trust-minimized primitive for recurring on-chain billing without handing a service an unlimited spending allowance. OurGlass is the answer — the per-period cap is enforced on-chain and revocable, so the subscriber stays in control while the org gets predictable, automated monthly collection. Two DAOs are set to use OurGlass as their recurring billing rail for the Sofia service.

• Implemented the end-to-end subscription flow: create a Hybrid smart account, sign the delegation, charge per period, and revoke.

• Integrated the erc20PeriodTransfer caveat as the sole on-chain enforcement of the per-period cap, with salt = keccak256(terms) binding each signature to its exact pinned agreement.

• Built the org collection path via the DelegationManager redeemDelegations, demonstrating both the happy path and the post-revoke revert (CannotUseADisabledDelegation).

• Built the Safe App front-end (Vite + React + TypeScript, wagmi/viem, @safe-global/safe-apps-react-sdk): create subscription, sign delegation, charge, and revoke flows.

• Full product rebrand to OurGlass with a glassmorphism design system.

• Migrated hosting from Vercel to Coolify and deployed the live app, registered as a Safe App.

No funding raised yet. We are pre-seed and currently focused on production validation with two DAOs that will use OurGlass for monthly service billing. Open to grants and ecosystem support aligned with the MetaMask Delegation Toolkit .