Keys are generated and encrypted on your machine. The agent proposes on-chain actions. A fail-closed gate sits between every proposal and every signature.
Free and MIT-licensed. No server component, no telemetry, nothing uploaded.
Built on what you already trust
Ethereum
Base
Solana
viem
Electron
React
TypeScript
Node.js
ViteEVM and Solana accounts derived from one BIP-39 phrase, encrypted at rest with AES-256-GCM. The master password lives in memory only and is wiped on lock, on quit, and after fifteen idle minutes.
Twelve checks run on every fund-moving action, in every mode. An unknown network, an unparseable amount or a thrown error is a block, not a pass. The agent has no way to reach the rules.
Four execution modes, from asking before every transfer to running a mission unattended. Autonomy decides whether a human is asked — never whether the gate runs.
Every proposal is answered before anything is signed, and the verdict is shown to you in full — the checks that passed and the one that refused. The transfer allowlist starts empty, so a destination is refused until you deliberately add it.
Point a mission at an objective and a budget. It runs until one of nine terminating conditions is met, and it tells you which one — objective met, deadline reached, capital exhausted, max loss, no opportunities, step limit, emergency stop, operator stop, runtime error.
Every decision is appended to a hash-chained file in your own user directory. Editing a past line breaks every hash after it, and the app names the exact sequence number where the chain gave way.
There is no server component and no telemetry. Keys, state, audit log and memory all sit in your OS user directory.
Sepolia, Base Sepolia and Solana Devnet. Mainnet networks cannot even be selected until you turn real funds on in Guardrails.
The UI is sandboxed with no Node and no network access at all. Signing authority never crosses the process boundary.
Create a vault, write down the recovery phrase, and point the agent at Sepolia. It is shown once and cannot be recovered.
MIT licence — Windows 10/11 and macOS 12+. Node 20+ to build from source.
