XRPL examples

XRPL policies evaluate decoded transaction fields signed via xrpl_signTransaction.

Your app uses xrpl_signTransaction for RPC transaction signing. Rules for this method can use the xrpl_transaction field source below.
Your app uses raw_sign for raw hash signing. Rules that apply to raw_sign requests can only use system conditions, since there’s no decoded transaction to evaluate.
XRPL policies also apply to the exportPrivateKey and exportSeedPhrase methods. No other method is supported — * is not a valid method for the xrpl chain type.

The policy engine inspects fields on these transaction types: Payment, OfferCreate, OfferCancel, and TrustSet. All conditions use the xrpl_transaction field source.

Restrict to Payment transactions only

{
    "version": "1.0",
    "name": "Allow only Payments",
    "chain_type": "xrpl",
    "rules": [
        {
            "name": "Restrict to Payment type",
            "method": "xrpl_signTransaction",
            "conditions": [
                {
                    "field_source": "xrpl_transaction",
                    "field": "TransactionType",
                    "operator": "eq",
                    "value": "Payment"
                }
            ],
            "action": "ALLOW"
        }
    ]
}

Allowlist Payment destinations

{
    "version": "1.0",
    "name": "Allowlist destinations",
    "chain_type": "xrpl",
    "rules": [
        {
            "name": "Allow payments to specific addresses",
            "method": "xrpl_signTransaction",
            "conditions": [
                {
                    "field_source": "xrpl_transaction",
                    "field": "TransactionType",
                    "operator": "eq",
                    "value": "Payment"
                },
                {
                    "field_source": "xrpl_transaction",
                    "field": "Payment.Destination",
                    "operator": "in",
                    "value": [
                        "ra5nK24KXen9AHvsdFTKHSANinZseWnPcX",
                        "rPT1Sjq2YGrBMTttX4GZHjKu9dyfzbpAYe"
                    ]
                }
            ],
            "action": "ALLOW"
        }
    ]
}

Cap XRP payment amount

XRP amounts are expressed in drops (1 XRP = 1,000,000 drops). Cap native XRP transfers with the Payment.Amount.drops field.

{
    "version": "1.0",
    "name": "Cap XRP payments",
    "chain_type": "xrpl",
    "rules": [
        {
            "name": "Allow XRP payments under 1000 XRP",
            "method": "xrpl_signTransaction",
            "conditions": [
                {
                    "field_source": "xrpl_transaction",
                    "field": "TransactionType",
                    "operator": "eq",
                    "value": "Payment"
                },
                {
                    "field_source": "xrpl_transaction",
                    "field": "Payment.Amount.drops",
                    "operator": "lt",
                    "value": "1000000000"
                }
            ],
            "action": "ALLOW"
        }
    ]
}

Restrict IOU payments by currency and issuer

For issued currency (IOU) payments, constrain the token, issuer, and amount. Use Payment.Amount.value, Payment.Amount.currency, and Payment.Amount.issuer.

Payment.Amount.drops and Payment.Amount.value are mutually exclusive — a condition using .drops matches only native XRP payments, while .value matches only IOU payments.

{
    "version": "1.0",
    "name": "Allow specific IOU payments",
    "chain_type": "xrpl",
    "rules": [
        {
            "name": "Allow USD payments from trusted issuer under 10000",
            "method": "xrpl_signTransaction",
            "conditions": [
                {
                    "field_source": "xrpl_transaction",
                    "field": "TransactionType",
                    "operator": "eq",
                    "value": "Payment"
                },
                {
                    "field_source": "xrpl_transaction",
                    "field": "Payment.Amount.currency",
                    "operator": "eq",
                    "value": "USD"
                },
                {
                    "field_source": "xrpl_transaction",
                    "field": "Payment.Amount.issuer",
                    "operator": "eq",
                    "value": "rvYAfWj5gh67oV6fW32ZzP3Aw4Eubs59B"
                },
                {
                    "field_source": "xrpl_transaction",
                    "field": "Payment.Amount.value",
                    "operator": "lt",
                    "value": "10000"
                }
            ],
            "action": "ALLOW"
        }
    ]
}

Cap OfferCreate amounts

Your app can constrain DEX offers with the OfferCreate.TakerPays and OfferCreate.TakerGets fields.

{
    "version": "1.0",
    "name": "Cap DEX offers",
    "chain_type": "xrpl",
    "rules": [
        {
            "name": "Allow offers paying under 500 XRP",
            "method": "xrpl_signTransaction",
            "conditions": [
                {
                    "field_source": "xrpl_transaction",
                    "field": "TransactionType",
                    "operator": "eq",
                    "value": "OfferCreate"
                },
                {
                    "field_source": "xrpl_transaction",
                    "field": "OfferCreate.TakerPays.drops",
                    "operator": "lt",
                    "value": "500000000"
                }
            ],
            "action": "ALLOW"
        }
    ]
}

Restrict TrustSet limits

Your app can control which trust lines a wallet establishes and set a maximum amount.

{
    "version": "1.0",
    "name": "Restrict trust lines",
    "chain_type": "xrpl",
    "rules": [
        {
            "name": "Allow trust lines to specific issuer with limited amount",
            "method": "xrpl_signTransaction",
            "conditions": [
                {
                    "field_source": "xrpl_transaction",
                    "field": "TransactionType",
                    "operator": "eq",
                    "value": "TrustSet"
                },
                {
                    "field_source": "xrpl_transaction",
                    "field": "TrustSet.LimitAmount.issuer",
                    "operator": "eq",
                    "value": "rvYAfWj5gh67oV6fW32ZzP3Aw4Eubs59B"
                },
                {
                    "field_source": "xrpl_transaction",
                    "field": "TrustSet.LimitAmount.value",
                    "operator": "lte",
                    "value": "1000000"
                }
            ],
            "action": "ALLOW"
        }
    ]
}

Denylist destinations with condition sets

Reference a dynamic address list with in_condition_set. Manage the list via the condition sets API.

The policy engine denies a request by default if no rule’s conditions are satisfied. Pair the DENY rule with an unconditional ALLOW rule for the same method — DENY still takes precedence for sanctioned addresses, and every other request falls through to the ALLOW rule.

Store classic r-addresses in condition sets, not X-addresses — an X-address item, tagged or untagged, never matches, so a sanctions-list DENY rule silently fails to catch that address. Condition sets also can’t match on destination tags; use a separate Payment.DestinationTag condition for that.

{
    "version": "1.0",
    "name": "Denylist Payment destinations",
    "chain_type": "xrpl",
    "rules": [
        {
            "name": "Deny payments to sanctioned addresses",
            "method": "xrpl_signTransaction",
            "conditions": [
                {
                    "field_source": "xrpl_transaction",
                    "field": "Payment.Destination",
                    "operator": "in_condition_set",
                    "value": "your-condition-set-id"
                }
            ],
            "action": "DENY"
        },
        {
            "name": "Allow all other requests",
            "method": "xrpl_signTransaction",
            "conditions": [],
            "action": "ALLOW"
        }
    ]
}

Only allow signing after a certain date

Your app can gate signing on the current timestamp with system conditions.

{
    "version": "1.0",
    "name": "Time-gated XRPL signing",
    "chain_type": "xrpl",
    "rules": [
        {
            "name": "Allow signing after launch date",
            "method": "xrpl_signTransaction",
            "conditions": [
                {
                    "field_source": "system",
                    "field": "current_unix_timestamp",
                    "operator": "gt",
                    "value": "1757304000"
                }
            ],
            "action": "ALLOW"
        }
    ]
}

Combine transaction and system conditions

{
    "version": "1.0",
    "name": "Time-gated payments to allowlist",
    "chain_type": "xrpl",
    "rules": [
        {
            "name": "Allow payments to approved addresses after launch",
            "method": "xrpl_signTransaction",
            "conditions": [
                {
                    "field_source": "xrpl_transaction",
                    "field": "TransactionType",
                    "operator": "eq",
                    "value": "Payment"
                },
                {
                    "field_source": "xrpl_transaction",
                    "field": "Payment.Destination",
                    "operator": "in",
                    "value": [
                        "ra5nK24KXen9AHvsdFTKHSANinZseWnPcX",
                        "rPT1Sjq2YGrBMTttX4GZHjKu9dyfzbpAYe"
                    ]
                },
                {
                    "field_source": "system",
                    "field": "current_unix_timestamp",
                    "operator": "gt",
                    "value": "1757304000"
                }
            ],
            "action": "ALLOW"
        }
    ]
}

Deny all signing requests

* is not a supported method for the xrpl chain type. To deny every xrpl_signTransaction request, use an empty-conditions DENY rule for that method instead.

{
    "version": "1.0",
    "name": "Deny all XRPL signing",
    "chain_type": "xrpl",
    "rules": [
        {
            "name": "Deny all signing requests",
            "method": "xrpl_signTransaction",
            "conditions": [],
            "action": "DENY"
        }
    ]
}

Supported policy fields

address type fields accept both classic r-addresses and untagged X-addresses — Privy normalizes X-addresses to classic format before comparing. Tagged X-addresses are rejected when the policy is created. To restrict by destination tag, add a separate Payment.DestinationTag condition alongside Payment.Destination.

Field	Type	Operators
`TransactionType`	string	`eq`, `in`, `in_condition_set`
`Payment.Destination`	address	`eq`, `in`, `in_condition_set`
`Payment.DestinationTag`	UInt32	`eq`, `lt`, `lte`, `gt`, `gte`
`Payment.Amount.drops`	decimal	`eq`, `lt`, `lte`, `gt`, `gte`
`Payment.Amount.value`	decimal	`eq`, `lt`, `lte`, `gt`, `gte`
`Payment.Amount.currency`	string	`eq`, `in`, `in_condition_set`
`Payment.Amount.issuer`	address	`eq`, `in`, `in_condition_set`
`Payment.SendMax.drops`	decimal	`eq`, `lt`, `lte`, `gt`, `gte`
`Payment.SendMax.value`	decimal	`eq`, `lt`, `lte`, `gt`, `gte`
`Payment.SendMax.currency`	string	`eq`, `in`, `in_condition_set`
`Payment.SendMax.issuer`	address	`eq`, `in`, `in_condition_set`
`Payment.DeliverMin.drops`	decimal	`eq`, `lt`, `lte`, `gt`, `gte`
`Payment.DeliverMin.value`	decimal	`eq`, `lt`, `lte`, `gt`, `gte`
`Payment.DeliverMin.currency`	string	`eq`, `in`, `in_condition_set`
`Payment.DeliverMin.issuer`	address	`eq`, `in`, `in_condition_set`
`OfferCreate.TakerPays.drops`	decimal	`eq`, `lt`, `lte`, `gt`, `gte`
`OfferCreate.TakerPays.value`	decimal	`eq`, `lt`, `lte`, `gt`, `gte`
`OfferCreate.TakerPays.currency`	string	`eq`, `in`, `in_condition_set`
`OfferCreate.TakerPays.issuer`	address	`eq`, `in`, `in_condition_set`
`OfferCreate.TakerGets.drops`	decimal	`eq`, `lt`, `lte`, `gt`, `gte`
`OfferCreate.TakerGets.value`	decimal	`eq`, `lt`, `lte`, `gt`, `gte`
`OfferCreate.TakerGets.currency`	string	`eq`, `in`, `in_condition_set`
`OfferCreate.TakerGets.issuer`	address	`eq`, `in`, `in_condition_set`
`OfferCreate.Expiration`	UInt32	`eq`, `lt`, `lte`, `gt`, `gte`
`TrustSet.LimitAmount.value`	decimal	`eq`, `lt`, `lte`, `gt`, `gte`
`TrustSet.LimitAmount.currency`	string	`eq`, `in`, `in_condition_set`
`TrustSet.LimitAmount.issuer`	address	`eq`, `in`, `in_condition_set`
`TrustSet.QualityIn`	UInt32	`eq`, `lt`, `lte`, `gt`, `gte`
`TrustSet.QualityOut`	UInt32	`eq`, `lt`, `lte`, `gt`, `gte`

Policies

Using policies

Examples

Restrict to Payment transactions only

Allowlist Payment destinations

Cap XRP payment amount

Restrict IOU payments by currency and issuer

Cap OfferCreate amounts

Restrict TrustSet limits

Denylist destinations with condition sets

Only allow signing after a certain date

Combine transaction and system conditions

Deny all signing requests

Supported policy fields

​Restrict to Payment transactions only

​Allowlist Payment destinations

​Cap XRP payment amount

​Restrict IOU payments by currency and issuer

​Cap OfferCreate amounts

​Restrict TrustSet limits

​Denylist destinations with condition sets

​Only allow signing after a certain date

​Combine transaction and system conditions

​Deny all signing requests

​Supported policy fields

Restrict to Payment transactions only

Allowlist Payment destinations

Cap XRP payment amount

Restrict IOU payments by currency and issuer

Cap OfferCreate amounts

Restrict TrustSet limits

Denylist destinations with condition sets

Only allow signing after a certain date

Combine transaction and system conditions

Deny all signing requests

Supported policy fields