Skip to main content
Use cases

One primitive, five operating postures.

SDK when the path is deterministic. MCP when an agent needs to reason before an irreversible step. Bands enforce the boundary.

Scope
Band-scoped toolsReversible (read · prepare) → irreversible (sign · broadcast)
Custody
Non-custodialHosted MPC · self-hosted OWS
Signing
MPC, OWS, or your signerHosted MPC · OWS vault · Safe · HSM
Audit
Hash-chained JSONLSHA-256 · append-only · SIEM-ready
SHARED

What every page answers

Server-side key isolation

MCP server holds no private keys. Signing happens via MPC, your OWS vault, or your existing signer.

Band filtering at startup

Out-of-band tools never enter the registry — agents cannot see what was never registered.

Policy gates before signing

Chain allowlist, expiry, declarative rules — evaluated before any signature is produced.

Tamper-evident audit

Every sign and broadcast is a SHA-256 hash-chained JSONL event, exportable on demand.

Non-custodial by architecture

MPC by default — neither WalletSuite nor your team can move funds alone. Self-hosted OWS available for teams that require keys on their own infrastructure.

SDK and MCP, same primitives

Use the SDK for deterministic paths. Use MCP when an agent reasons before signing. Compatible with LangChain, CrewAI, Pydantic AI, Claude Agent SDK, and custom runtimes.

Design partner program

Now reviewing a limited number of design partners.

Reference-customer pricing. Contact us to discuss fit.