Agent Wallet

Self-custodial crypto wallet CLI for AI agents. Your keys, your coins — the agent never sees your mnemonic after init.

• Open source: github.com/donald-jackson/agent-wallet-cli — audit before use
• npm package: npmjs.com/package/agent-wallet-cli
• Self-custodial: Keys encrypted locally with Argon2id + AES-256-GCM. No server, no third party.
• Session-based access: Agents use time-limited tokens, never your password directly.
• Multi-chain: Ethereum, Solana, Polygon, Arbitrum, Base — native coins and tokens.

Security Model

1. You create or import a wallet with a password → encrypted on disk in ~/.agent-wallet-cli/
2. You (or the agent) unlock with the password → get a time-limited session token (wlt_...)
3. The agent uses only the session token — it expires automatically (default 1hr, max 24hr)
4. No telemetry, no analytics, no server calls — only public blockchain RPCs for queries and transactions

Important: If you give the agent your WALLET_PASSWORD, it can perform any password-level operation (init, import, unlock, and export). For maximum security, unlock the wallet yourself and only give the agent the session token. Session tokens cannot export mnemonics or change passwords — they can only sign transactions and read balances.

Before trusting this skill with real funds:

• Audit the source: github.com/donald-jackson/agent-wallet-cli
• Verify the npm package matches the repo: npm info agent-wallet-cli
• Test with small amounts first
• Use short session durations (1hr default)
• Run in an isolated environment if possible

Setup

npm install -g agent-wallet-cli

Verify installation: agent-wallet-cli --version

Workflow

1. Init (first time): agent-wallet-cli init --password "$WALLET_PASSWORD"
   • Displays mnemonic ONCE — save it securely
2. Import (existing wallet): agent-wallet-cli import --password "$WALLET_PASSWORD" --mnemonic "word1 word2 ..."
3. Unlock: agent-wallet-cli unlock --password "$WALLET_PASSWORD" --duration 3600
   • Returns session token (wlt_...) valid for specified duration
4. Use: Pass --token wlt_... to all commands (no password needed)
5. Lock: agent-wallet-cli lock when done

Note: --password and --mnemonic can be omitted to be prompted securely via stdin (recommended for interactive use). When using in automation, --password is accepted but will show a warning about shell history visibility.

Global Options

All commands accept:

• --format json|text (default: json)
• --wallet-dir <path> (default: ~/.agent-wallet-cli)
• --quiet — suppress output
• --name <name> — wallet name (default: "default")

Commands