Onchain Agent Wallets

Install

Works with Claude Code, Codex, VS Code, Cursor, Windsurf, Claude Desktop. Read the repository before you give any tool access to your data.

npx agentmarket install connector/nirholas-onchain-agent-wallets

About

No reviews yet. Installed it? Reviews come from verified installers only. How reviews work

Permissions

What this server can do and what it asks for, from its tool list, install config and code. Checked Oct 26, 2026.

Tools

4 read · 9 write · 1 delete

Secrets

1 (API keys, tokens or passwords)

Install scripts

None found

Runs as

Node.js package

Tools (14)

Read from the source code; the running server may differ. Descriptions are the server’s own words; hidden characters are shown as [U+…].

• agent_payLet the agent send tokens inside its limits

  Send tokens from the agent vault to a recipient, signed by the agent as the on-chain delegate. Every guardrail is checked first (per-transaction cap, rolling daily cap, recipient allowlist, expiry, pause) and the SPL Token program enforces the remaining allowance underneath. A refusal explains which rule stopped it. Requires confirm:true to broadcast.

• agent_wallet_statusLive status of an agent walletread-only

  Show an agent wallet as it actually stands on-chain: vault balance, how much of the delegated allowance is left, what it can spend right now, its fee SOL, the guardrails in force, spend totals for the last 24 hours, and any warnings (revoked, expired, paused, out of fee SOL, allowance unbacked by balance). Read-only.

• approve_agent_allowanceSet the agent's on-chain spending ceiling

  Set how much the agent may spend from the vault, enforced by the SPL Token program. This REPLACES the existing allowance, it does not add to it: passing "50" leaves the agent with exactly 50 regardless of what it had before. Use it to raise, lower, or refill an allowance. Requires confirm:true to broadcast.

• create_agent_walletGive an agent a wallet with an on-chain spending limit

  Create an agent wallet on Solana. Generates a fresh keypair for the agent, creates a vault token account that YOU own (derived deterministically from your address plus the agent id), and delegates a capped allowance over it to the agent. The SPL Token program enforces that cap: the agent cannot spend past it, and every spend decrements it. You keep custody, you can revoke in one instruction, and you can withdraw the balance without the agent. Set guardrails (per_tx, daily, allowlists, expiry) in the same call. Signs with OWNER_SECRET_KEY if configured, otherwise returns an unsigned transaction…

• deploy_agent_onchainPublish the agent on-chain with its payment address

  Mint the agent an on-chain identity in the Metaplex Agent Registry on Solana, carrying its EIP-8004 registration document, an x402Support flag, and on-chain attributes naming its payment address, its vault, and the token it accepts. After this the agent is discoverable on metaplex.com/agents and any counterparty can read where to pay it. Costs about 0.007 SOL and needs an owner signing key (set OWNER_SECRET_KEY or pass `secret`); to mint from Phantom or a Ledger instead, use prepare_agent_mint in @three-ws/metaplex-agent-mcp. Requires confirm:true to broadcast.

• export_agent_runtimeExport an agent wallet as a runnable MCP configread-only

  Produce the config that puts this agent wallet in front of a model: an mcp.json block, the equivalent claude mcp add command, the agent identity card (payment address, vault, token, limits), and the x402 details a counterparty needs to bill it. By default no key material is included, so the output is safe to paste into a repo or a ticket. Pass include_secret:true only when moving the agent to another machine.

• fund_agent_walletTop up an agent's vault, and its fee SOL

  Move tokens from your wallet into the agent vault, and optionally send the agent a little SOL for its own transaction fees. The vault stays owned by you; funding it does not raise the delegated allowance, so the agent still cannot spend past its ceiling. Requires confirm:true to broadcast.

• list_agent_walletsEvery agent wallet on this machineread-only

  List the agent wallets configured here, each with its live vault balance, remaining on-chain allowance, and guardrails. Read-only.

• pay_x402Let the agent pay for an x402 API out of its allowance

  Call an HTTP endpoint that charges with x402, paying from the agent allowance on Solana. The price is read from the unpaid 402 response first, so the guardrails (per-transaction cap, daily cap, host allowlist, expiry, pause) see the real amount before anything moves. The agent is topped up for exactly that amount from the vault, pays, and is left empty. If the endpoint is not charging, the content comes back with no payment at all. Requires confirm:true when the price is above the confirm threshold or confirmation is on.

• revoke_agent_walletRevoke the agent's spending authority on-chaincan change or delete data

  Cancel the agent's delegation on-chain. After this the SPL Token program refuses every transfer the agent signs, permanently, until you approve a new allowance. Pass withdraw:true to also sweep the vault balance back to your wallet in the same transaction. For an instant free stop that needs no transaction and no SOL, use set_guardrails with paused:true instead: that blocks this server, while revoke blocks the chain itself. Requires confirm:true to broadcast.

• send_signed_transactionBroadcast a transaction your wallet signed

  Broadcast a base64 transaction that Phantom, Solflare, Backpack, or a Ledger already signed, and wait for confirmation. This is how the owner side works without any secret key on this machine: any tool that returns "prepared_for_wallet" hands you a transaction_base64 to sign and pass here. Blockhashes expire in about 60 seconds, so if this reports an expired blockhash, re-run the tool that prepared it.

• set_guardrailsChange an agent's spending rules

  Set the rules this server enforces before it signs a spend: per-transaction cap, rolling 24h cap, allowed recipients, allowed x402 hosts, an expiry, a confirm-above threshold, and a pause switch. Takes effect immediately, costs nothing, and needs no transaction. Only the fields you pass change; pass null to clear one. Empty allowlists mean unrestricted. These sit ON TOP of the on-chain allowance, which no software here can raise: to change that ceiling use approve_agent_allowance, and to cancel it entirely use revoke_agent_wallet.

• spend_logAn agent's spend history, including refusalsread-only

  The audit trail for one agent: every spend that went through and every one the guardrails refused, with the amount, destination, transaction signature, and the rule that decided it. Refusals are recorded on purpose, so you can see what an agent tried to do. Read-only.

• withdraw_from_vaultMove funds out of an agent vault back to the owner

  Withdraw tokens from an agent vault back to your own wallet. The vault is yours, so this always works, with or without a live delegation, and the agent cannot block it. Leaves the allowance untouched: lowering the balance already limits what the agent can spend. Requires confirm:true to broadcast.

Signals

Stars

9

Forks

0

Open issues

0

Last commit

Oct 10, 2026 (18 days ago)

Last release

Oct 10, 2026 (18 days ago)

From GitHub (fetched Oct 24, 2026).

Details

Registry name

io.github.nirholas/onchain-agent-wallets

Version

0.1.1

Auth

API key

Packages

npm @three-ws/onchain-agent-wallets

License

Apache-2.0

Repository

github.com/nirholas/onchain-agent-wallets

Website

three.ws

First seen

Oct 24, 2026

Last checked

Oct 24, 2026

Source

Official MCP Registrygithub-graphql