Let an agent act on-chain. Never hand it your master key.
The problemLetting software transact for you usually means giving it a private key outright. One bug or one prompt injection, and everything the key controls is gone.
- Session keys checked by consensus. The master key grants a scoped key with a spending cap; every validator enforces it.
- Spends within its cap. Sponsored gas lets a new agent start with no balance.
- Driven through MCP. An LLM agent works as a client, within its grant.
- No self-approval. A risky move waits for the owner’s own key.