AgentWallet MCP Server

Permissionless wallet infrastructure for AI agents. Create wallets, sign transactions, and broadcast on-chain, on any EVM chain and Solana. Built-in guards. No KYC. The only AI agent wallet that accepts crypto for its own API fees.

Your keys can stay on your machine. Set one environment variable and every signature happens in your own process. No server sees the key, no company can freeze the wallet, and you can verify that claim by reading src/local-wallet.ts or by running the server with the API pointed at a closed port.

No KYC. No KYT. No approval process. No transaction monitoring. No one can block your wallet. Pay with USDC on-chain, no credit card required.

Two modes

| | Local (self-custody) | Hosted (custodial) | |---|---|---| | Who holds the key | You, in your own process | Encrypted on AgentWallet servers | | Set up | One env var, no account needed | API key | | Chains | EVM + Solana | EVM + Solana | | Can anyone freeze it | No | Yes, that is what pause is for | | Spend guards | AGENTWALLET_MAX_TX_NATIVE, AGENTWALLET_MAX_TX_SOL, AGENTWALLET_MAX_AUTOPAY | Server-side limits, pause, rate limits | | Paywalls, usage, billing | Needs an API key too | Included |

Run wallet_mode at any time and the server will tell you which one you are in, and which address it controls.

Local signing in one variable

{
  "mcpServers": {
    "agentwallet": {
      "command": "npx",
      "args": ["-y", "agentwallet-mcp"],
      "env": {
        "AGENTWALLET_PRIVATE_KEY": "0xyour_key",
        "AGENTWALLET_RPC_8453": "https://your-own-rpc",
        "AGENTWALLET_MAX_TX_NATIVE": "0.05"
      }
    }
  }
}

Use AGENTWALLET_KEYFILE=/path/to/key instead if you would rather keep the key out of your shell config. The key is read once, never written to disk, never logged, and never included in an error message.

AGENTWALLET_RPC_<chainId> (or AGENTWALLET_RPC_URL for all chains) points at an endpoint you trust. Without it a public RPC is used, and a public RPC can see which addresses you ask about.

AGENTWALLET_MAX_TX_NATIVE is a per-transaction ceiling in native units (ETH, MATIC and so on). In hosted mode the server enforces limits; in local mode there is no server, so these guards are the only ones there are. Set them.

AGENTWALLET_MAX_TX_TOKEN is the equivalent ceiling for ERC-20 movement, in human units of the token. Set this one too if you hold stablecoins. The native cap cannot see a token transfer: an ERC-20 send carries value = 0 with the amount in the calldata, so AGENTWALLET_MAX_TX_NATIVE alone leaves a USDC balance uncapped. AGENTWALLET_MAX_TX_TOKEN covers transfer, transferFrom and approve, the last because an unbounded allowance is a drain waiting to happen. Decimals are resolved locally; unknown tokens are evaluated at 6 decimals, the tightest common value, so it fails closed rather than open.

Solana local signing

"env": {
  "AGENTWALLET_SOLANA_KEY": "[12,34...]",
  "AGENTWALLET_SOLANA_RPC": "https://your-own-rpc",
  "AGENTWALLET_MAX_TX_SOL": "1"
}

Accepts whichever format you already have: a solana-keygen id.json array, a base58 secret key as exported by Phantom, or base64. Use AGENTWALLET_SOLANA_KEYFILE to point at a file instead. Native SOL and SPL token transfers are both signed locally, and a missing associated token account is created for the recipient automatically.

Set either key, or both. They are independent: run EVM locally and Solana hosted, or the reverse.

An operation with no matching local key is refused, never silently routed to the hosted signer. If you have an EVM key configured and ask for a Solana transfer with no Solana key, the server stops and tells you which variable is missing. Quietly moving funds onto a key you do not hold, while you believe you are in self-custody, is the worst thing this server could do.

About the dependency tree

Local signing uses viem for EVM and @solana/web3.js for Solana, plus bs58 for key parsing. SPL instructions are built by hand rather than with @solana/spl-token, because that package pulls in bigint-buffer, which carries a high severity buffer overflow advisory. A wallet has no business shipping that to save a dozen lines of instruction encoding.

npm audit currently reports issues inside @modelcontextprotocol/sdk's HTTP transport dependencies. This server speaks stdio, so that code never loads, and the SDK is not something this package can patch. Run the audit yourself. Publishing a tree you can inspect is the point.

<p align="center"> <img src="assets/demo.svg" alt="AgentWallet demo, AI agent pays x402 invoice automatically" width="800"> </p>

Features

• 31 MCP tools: create wallets, send transactions, approve tokens, wrap ETH, transfer SPL tokens, pay and accept x402 payments, verify custody mode, and more
• EVM + Solana: Ethereum, Base, Polygon, BSC, Arbitrum, Optimism, Avalanche, Zora, PulseChain, Solana, and any other EVM-compatible chain
• SOL + SPL tokens: native SOL transfers and SPL token transfers (USDC, USDT, etc.) with automatic account creation
• Built-in guards: daily spending limits, gas price protection, emergency pause, rate limiting, replay protection, and on-chain verification, all active by default
• x402 payments: pay for x402-enabled APIs automatically, or accept x402 payments on your own endpoints (EVM and Solana)
• Self-custody option: run local mode and the key never leaves your machine. In hosted mode, keys are encrypted at rest, decrypted only during signing, and zeroed from memory immediately after. Either way you can export and walk away.
• Permissionless: No KYC. No KYT. No identity verification. No approval process. No compliance gatekeeping. Sign up, get an API key, and start transacting immediately.
• 30-second setup: three lines of config. No SDK to install. No dependencies to manage.

Pricing

• $0.00345 per operation
• 6,000 free operations/month
• $0.0005 per x402 verification
• 1,000 free x402 verifications/month
• Pay with USDC on-chain via x402, no credit card required
• No monthly fee, no tiers, just pay as you go

Competitor comparisons are kept at hifriendbot.com/wallet/#pricing with the date they were last verified. They live there rather than here because a published npm README cannot be corrected when someone else changes their prices.

Quick Start

Get your free API key at hifriendbot.com/wallet, no credit card required, no KYC, no approval wait.

Claude Desktop / OpenClaw

Add to your config:

{
  "mcpServers": {
    "agentwallet": {
      "command": "npx",
      "args": ["-y", "agentwallet-mcp"],
      "env": {
        "AGENTWALLET_USER": "your_username",
        "AGENTWALLET_PASS": "your_api_key",
        "AGENTWALLET_WALLET_ID": "1"
      }
    }
  }
}

AGENTWALLET_WALLET_ID is optional. Set it to enable x402 auto-pay: when you exceed the free tier without a credit card, the MCP server automatically pays for operations with USDC from this wallet.

Auto-pay safety cap. AGENTWALLET_MAX_AUTOPAY (optional, default 1) is the maximum amount, in human-readable units of the asset, that x402 auto-pay will authorize for a single payment. Any 402 requirement above this cap is rejected instead of paid, so a malformed or tampered payment requirement cannot drain the wallet. Raise it only if you genuinely need larger automatic payments (for example "5" to allow up to 5 USDC per call).

Claude Code

claude mcp add agentwallet \
  -e AGENTWALLET_USER=your_username \
  -e AGENTWALLET_PASS=your_api_key \
  -e AGENTWALLET_WALLET_ID=1 \
  -- npx -y agentwallet-mcp

VS Code

Add to your settings:

{
  "mcp": {
    "servers": {
      "agentwallet": {
        "command": "npx",
        "args": ["-y", "agentwallet-mcp"],
        "env": {
          "AGENTWALLET_USER": "your_username",
          "AGENTWALLET_PASS": "your_api_key",
          "AGENTWALLET_WALLET_ID": "1"
        }
      }
    }
  }
}

Tools

| Tool | Description | |------|-------------| | create_wallet | Create a new EVM or Solana wallet | | list_wallets | List all your wallets | | get_wallet | Get wallet details by ID | | get_balance | Check native token balance on any chain | | get_token_balance | Check ERC-20 or SPL token balance | | get_token_info | Get ERC-20 token name, symbol, and decimals | | transfer | Send native tokens (ETH, SOL, POL, BNB, etc.) | | transfer_token | Send ERC-20 or SPL tokens (USDC, USDT, etc.) | | send_transaction | Sign and broadcast a raw transaction | | sign_transaction | Sign a transaction without broadcasting | | call_contract | Read-only contract call (eth_call) | | approve_token | Approve ERC-20 token spending for DeFi | | get_allowance | Check ERC-20 token allowance | | wrap_eth | Wrap native tokens to WETH/WAVAX/etc. | | unwrap_eth | Unwrap WETH back to native tokens | | pay_x402 | Pay x402 invoices automatically (fetch, pay, retry) | | create_paywall | Create an x402 paywall to charge for a resource | | list_paywalls | List all your x402 paywalls | | get_paywall | Get paywall details by ID | | update_paywall | Update paywall pricing, resource, or status | | delete_paywall | Delete a paywall | | get_paywall_payments | View payment history for a paywall | | get_x402_revenue | Aggregate revenue stats across all paywalls | | wallet_mode | Report whether signing is local (self-custody) or hosted, and which address is in use | | export_wallet_key | How to export a hosted wallet key and move to self-custody | | buy_verification_credits | Buy x402 verification credits with USDC on-chain | | get_usage | Check your monthly usage and billing | | get_chains | List all supported chains | | pause_wallet | Emergency pause a wallet | | unpause_wallet | Resume a paused wallet | | delete_wallet | Delete a wallet |

Supported Chains

| Chain | ID | Native Token | Stablecoin | |-------|-----|-------------|------------| | Ethereum | 1 | ETH | USDC | | Base | 8453 | ETH | USDC | | Polygon | 137 | POL | USDC | | BSC | 56 | BNB | USDT | | Arbitrum | 42161 | ETH | USDC | | Optimism | 10 | ETH | USDC | | Avalanche | 43114 | AVAX | USDC | | Zora | 7777777 | ETH | USDC | | PulseChain | 369 | PLS | USDC | | Solana | 900 | SOL | USDC | | Solana Devnet | 901 | SOL | USDC |

Use Case: GuessMarket

Pair with guessmarket-mcp to let your AI agent trade prediction markets:

1. Create a wallet on Base
2. Approve USDC spending
3. Buy YES/NO shares on prediction markets
4. Provide liquidity and earn trading fees
5. Claim winnings

All on-chain. All through MCP. No frontend needed.

x402 Payments

AgentWallet natively supports the x402 open payment standard. When your Ai agent encounters an API that returns HTTP 402 Payment Required, the pay_x402 tool handles the entire flow automatically:

1. Fetches the URL and detects the 402 response
2. Parses the payment requirements (amount, token, chain)
3. Executes the on-chain payment from your wallet
4. Retries the request with proof of payment
5. Returns the final response

Set max_payment to control spending:

pay_x402(
  url="https://api.example.com/premium-data",
  wallet_id=1,
  max_payment="1.00"
)

max_payment is enforced as a hard per-payment cap. If you omit it, pay_x402 falls back to AGENTWALLET_MAX_AUTOPAY (default 1), the same cap the auto-pay path uses, so a malicious or compromised 402 endpoint can never authorize an unbounded payment. Set max_payment explicitly (or raise AGENTWALLET_MAX_AUTOPAY) to allow a larger single payment.

Supports ERC-20 tokens, SPL tokens, and native tokens on EVM and Solana. Compatible with x402 V1 and V2 (CAIP-2 chain identif