Onchain Agent Wallets

Send tokens from the agent vault to a recipient, signed by the agent as the on-chain delegate. Every guardrail is checked first (per-transaction cap, rolling daily cap, recipient allowlist, expiry, pause) and the SPL Token program enforces the remaining allowance underneath. A refusal explains which rule stopped it. Requires confirm:true to broadcast.

Show an agent wallet as it actually stands on-chain: vault balance, how much of the delegated allowance is left, what it can spend right now, its fee SOL, the guardrails in force, spend totals for the last 24 hours, and any warnings (revoked, expired, paused, out of fee SOL, allowance unbacked by balance). Read-only.

Set how much the agent may spend from the vault, enforced by the SPL Token program. This REPLACES the existing allowance, it does not add to it: passing "50" leaves the agent with exactly 50 regardless of what it had before. Use it to raise, lower, or refill an allowance. Requires confirm:true to broadcast.

Create an agent wallet on Solana. Generates a fresh keypair for the agent, creates a vault token account that YOU own (derived deterministically from your address plus the agent id), and delegates a capped allowance over it to the agent. The SPL Token program enforces that cap: the agent cannot spend past it, and every spend decrements it. You keep custody, you can revoke in one instruction, and you can withdraw the balance without the agent. Set guardrails (per_tx, daily, allowlists, expiry) in the same call. Signs with OWNER_SECRET_KEY if configured, otherwise returns an unsigned transaction for Phantom, Solflare, Backpack, or a Ledger. Requires confirm:true to broadcast.

Mint the agent an on-chain identity in the Metaplex Agent Registry on Solana, carrying its EIP-8004 registration document, an x402Support flag, and on-chain attributes naming its payment address, its vault, and the token it accepts. After this the agent is discoverable on metaplex.com/agents and any counterparty can read where to pay it. Costs about 0.007 SOL and needs an owner signing key (set OWNER_SECRET_KEY or pass `secret`); to mint from Phantom or a Ledger instead, use prepare_agent_mint in @three-ws/metaplex-agent-mcp. Requires confirm:true to broadcast.

Produce the config that puts this agent wallet in front of a model: an mcp.json block, the equivalent claude mcp add command, the agent identity card (payment address, vault, token, limits), and the x402 details a counterparty needs to bill it. By default no key material is included, so the output is safe to paste into a repo or a ticket. Pass include_secret:true only when moving the agent to another machine.

Move tokens from your wallet into the agent vault, and optionally send the agent a little SOL for its own transaction fees. The vault stays owned by you; funding it does not raise the delegated allowance, so the agent still cannot spend past its ceiling. Requires confirm:true to broadcast.

List the agent wallets configured here, each with its live vault balance, remaining on-chain allowance, and guardrails. Read-only.

Call an HTTP endpoint that charges with x402, paying from the agent allowance on Solana. The price is read from the unpaid 402 response first, so the guardrails (per-transaction cap, daily cap, host allowlist, expiry, pause) see the real amount before anything moves. The agent is topped up for exactly that amount from the vault, pays, and is left empty. If the endpoint is not charging, the content comes back with no payment at all. Requires confirm:true when the price is above the confirm threshold or confirmation is on.

Cancel the agent's delegation on-chain. After this the SPL Token program refuses every transfer the agent signs, permanently, until you approve a new allowance. Pass withdraw:true to also sweep the vault balance back to your wallet in the same transaction. For an instant free stop that needs no transaction and no SOL, use set_guardrails with paused:true instead: that blocks this server, while revoke blocks the chain itself. Requires confirm:true to broadcast.

Broadcast a base64 transaction that Phantom, Solflare, Backpack, or a Ledger already signed, and wait for confirmation. This is how the owner side works without any secret key on this machine: any tool that returns "prepared_for_wallet" hands you a transaction_base64 to sign and pass here. Blockhashes expire in about 60 seconds, so if this reports an expired blockhash, re-run the tool that prepared it.

Set the rules this server enforces before it signs a spend: per-transaction cap, rolling 24h cap, allowed recipients, allowed x402 hosts, an expiry, a confirm-above threshold, and a pause switch. Takes effect immediately, costs nothing, and needs no transaction. Only the fields you pass change; pass null to clear one. Empty allowlists mean unrestricted. These sit ON TOP of the on-chain allowance, which no software here can raise: to change that ceiling use approve_agent_allowance, and to cancel it entirely use revoke_agent_wallet.

The audit trail for one agent: every spend that went through and every one the guardrails refused, with the amount, destination, transaction signature, and the rule that decided it. Refusals are recorded on purpose, so you can see what an agent tried to do. Read-only.

Withdraw tokens from an agent vault back to your own wallet. The vault is yours, so this always works, with or without a live delegation, and the agent cannot block it. Leaves the allowance untouched: lowering the balance already limits what the agent can spend. Requires confirm:true to broadcast.