Case study · Our own product · Early access

FinoGrid: designing a cross-border payouts SDK for USD to CAD contractor payments

FinoGrid is a developer SDK for platforms that pay contractors in Canada from US balances, using stablecoin rails for the cross-border leg. We designed and built it in the Payments Studio. This case study sets out the problem, the decisions and the architecture.

Status
Early access
Corridor
USD to CAD
Funds
Held and moved by licensed partners
Owner
Munro Banting

FinoGrid is owned by Munro Banting. We say so whenever we recommend it.

FinoGrid architecture: platform, FinoGrid SDK or MCP server, policy and limits, KYC and sanctions checks, settlement ledger, licensed on-ramp, stablecoin transfer, licensed off-ramp, contractor's Canadian bank account PlatformFinoGrid SDK / MCPPolicy and limitsKYC and sanctionsSettlement ledgerLicensed on-rampStablecoin transferLicensed off-rampContractor's bank (CAD) Shaded steps are run by licensed partners. FinoGrid instructs, records and reconciles.
  1. Platform
  2. FinoGrid SDK / MCP server
  3. Policy and limits
  4. KYC and sanctions checks
  5. Settlement ledger
  6. Licensed on-ramp
  7. Stablecoin transfer
  8. Licensed off-ramp
  9. Contractor's Canadian bank account

Shaded steps are run by licensed partners.

Simplified architecture. Drawn diagram, not a product screen.

The problem

A US platform paying a contractor in Canada pays a fee on the transfer and a spread on the currency conversion, and the contractor waits for settlement. We will not publish cost or time comparisons until we have measured them. Building an alternative means choosing ramp providers, keeping a ledger that stays correct across two currencies and a conversion step, and running compliance checks on every payout. We wanted a component a platform could integrate in its own product without holding funds.

Design constraints

  1. 01

    No funds held

    FinoGrid never holds funds; licensed partners hold and move them.

  2. 02

    Screen first

    Every payout is screened before funds move.

  3. 03

    Daily reconciliation

    The ledger must reconcile to partner records daily, including payouts that fail after conversion.

  4. 04

    Human-set limits

    AI agents may request payouts only inside limits a human sets in advance.

  5. 05

    One SDK call

    The integration must be an SDK call for the platform's engineers.

Decisions and trade-offs

  • Ramp model. Separate licensed on-ramp and off-ramp providers rather than one provider for both legs, for corridor coverage [OWNER: confirm decision and reason]. Trade-off: two reconciliations instead of one.
  • Ledger. Double-entry and append-only, with a clearing account for each step (on-ramp, in transit, off-ramp) so funds in conversion are visible on a balance sheet at every point. Trade-off: more entries per payout.
  • Payout states. Created, screened, funded, converting, in transit, delivered, returned, reversed. A payout that fails after conversion moves to a held state with its stablecoin balance recorded, not to "failed".
  • Compliance in the flow. Identity verification at contractor onboarding; sanctions screening at onboarding and again at payout. Screening results are stored against the ledger entry.
  • Agent access. An MCP server exposes payout requests to AI agents. Each agent key has a per-payout and a daily limit, a payee allow-list and a human approval threshold [OWNER: confirm the controls as built].
A developer reading code on a monitor at a standing desk beside a window.

What we built

  • SDK [OWNER: languages]
  • Settlement ledger
  • Payout state machine
  • Compliance-check service integrated with [OWNER: vendor names only if contracts allow]
  • MCP server with limits and approvals
  • Operations views for held and returned payouts

Code excerpt to follow: a single SDK call creating a payout with an idempotency key, and the ledger entries it produces [OWNER: real, reviewed excerpt from the repo].

What building it taught us

To be written

[OWNER: three to four bullets in plain language. Proposed topics: how we compared ramp providers; how the ledger handles a payout that fails after conversion; what a partner bank asked to see before onboarding; what we would design differently.]

What this means for a Payments Studio client

The same work appears in client engagements: ledger models with clearing accounts, payout state machines, screening at payout, and limits for automated requests. When FinoGrid could fit a client's need, we say so and disclose that we own it.

FinoGrid is owned by Munro Banting. We say so whenever we recommend it.

See Payments Studio engagements

Status and early access

FinoGrid is in early access. Features, corridors and partners may change. FinoGrid does not take deposits; payouts settle through licensed partners [LEGAL]. Speed and pricing figures will be published once they are measured.

Early access

Request access or a demo below. We reply by email; nothing on this page connects to FinoGrid systems.

Consent
Request

Munro Banting advises, designs and builds. Client funds are held and moved only by licensed partners. Munro Banting does not hold, transmit or exchange client funds. FinoGrid is owned by Munro Banting. We say so whenever we recommend it.