agent-wallet

# Agent Wallet

Self-custodial crypto wallet CLI for AI agents. Your keys, your coins — the agent never sees your mnemonic after init.

- **Open source**: [github.com/donald-jackson/agent-wallet-cli](https://github.com/donald-jackson/agent-wallet-cli) — audit before use
- **npm package**: [npmjs.com/package/agent-wallet-cli](https://www.npmjs.com/package/agent-wallet-cli)
- **Self-custodial**: Keys encrypted locally with Argon2id + AES-256-GCM. No server, no third party.
- **Session-based access**: Agents use time-limited tokens, never your password directly.
- **Multi-chain**: Ethereum, Solana, Polygon, Arbitrum, Base — native coins and tokens.

## Security Model

1. **You** create or import a wallet with a password → encrypted on disk in `~/.agent-wallet-cli/`
2. **You** (or the agent) unlock with the password → get a time-limited session token (`wlt_...`)
3. **The agent** uses only the session token — it expires automatically (default 1hr, max 24hr)
4. **No telemetry, no analytics, no server calls** — only public blockchain RPCs for queries and transactions

**Important: If you give the agent your WALLET_PASSWORD**, it can perform any password-level operation (init, import, unlock, and export). For maximum security, **unlock the wallet yourself** and only give the agent the session token. Session tokens cannot export mnemonics or change passwords — they can only sign transactions and read balances.

**Before trusting this skill with real funds:**
- Audit the source: [github.com/donald-jackson/agent-wallet-cli](https://github.com/donald-jackson/agent-wallet-cli)
- Verify the npm package matches the repo: `npm info agent-wallet-cli`
- Test with small amounts first
- Use short session durations (1hr default)
- Run in an isolated environment if possible

## Setup

```bash
npm install -g agent-wallet-cli
```

Verify installation: `agent-wallet-cli --version`

## Workflow

1. **Init** (first time): `agent-wallet-cli init --password "$WALLET_PASSWORD"`
   - Displays mne...