Money without keys for your agent
Your agent can see your wallet and prepare real operations: swaps, sends, deposits, bridges. It cannot sign. Every operation waits for you in ODEI, where you see what it does and sign it yourself.
- The five wallet tools on eight networks: state, read, propose, status, cancel.
- Manual approval: the agent proposes, the owner reviews and signs in ODEI.
- Auto is coming soon; today the owner approves each operation in ODEI.
- An agent signing, sending or holding a key.
Checked against release 0f396bb04bde, 2026-11-08. Compare with /health.
In plain words
The ODEI Wallet is yours. Its key is created or unlocked on your own device, and ODEI never receives your wallet password or the unencrypted key. Your AI never gets either.
What your AI gets is a way to prepare work for you. Ask it to put 100 USDC into a lending market on Base, and it builds that operation. ODEI checks it, simulates it and works out the network fee. You get a review link. You open it, read what will happen, and sign, or you don't.
Manual: the agent proposes, you sign
- Your AI calls
odei_wallet_proposewith a recipe, such asaave-supply-withdraw, or with exact contract calls. - ODEI decodes and simulates the calls and prepares fees. A call outside your access runs nothing and answers
needs_permission. - The answer is
awaiting_ownerwith areviewUrl. Your AI gives you that link and cannot approve for you. - You review in ODEI: the decoded calls, the simulation and the network fee. You sign in the ODEI app with your wallet password.
- Your AI tracks it with
odei_wallet_status. Prepared, sent and executed differ, and onlyconfirmedmeans it happened on chain. - If you change your mind before signing, your AI can withdraw it with
odei_wallet_cancel, only when you ask.
On every network except Avalanche C-Chain, several calls go into one transaction with one signature. A plain wallet is upgraded for that in the same transaction (EIP-7702); its address, key and funds stay the same.
Auto
Auto is coming soon; today the owner approves each operation in ODEI. Until then no operation runs without your signature, on any network. Results still carry autoState and autoDecision for older clients; how to read them: Wallet tools.
Networks
| chainId | Network |
|---|---|
| Chain ID 1 | Ethereum |
| Chain ID 10 | Optimism |
| Chain ID 56 | BNB Chain |
| Chain ID 137 | Polygon |
| Chain ID 4663 | Robinhood Chain |
| Chain ID 8453 | Base |
| Chain ID 42161 | Arbitrum |
| Chain ID 43114 | Avalanche C-Chain |
What your agent can and cannot do
| Your agent can | Your agent cannot |
|---|---|
Read balances, approvals, quotes and history with odei_wallet_state and odei_wallet_read | Sign, send or approve an operation |
| Propose swaps, sends, bridges, deposits, withdrawals, staking and revokes from the recipe list | Use owner-only recipes such as borrowing (recipe_unknown) |
| Propose exact contract calls and typed data for you to sign | Hold a key, a signature or a recovery phrase |
| Track and, when you ask, cancel its own unsigned proposals | Run a Network Alpha. Only you can press Run in ODEI. |
| Explain fees, routes and refusals | Split one operation into smaller ones to avoid review |
Every recipe, its networks and its fields: Wallet tools and capabilities.json.
Signatures
- You sign in the ODEI app. No connected AI ever receives signature bytes.
- For a CoW order or its cancellation, you sign typed data and ODEI posts it itself.
- Revoking a connection cancels no transaction you already signed.
- Treat any request for your password, recovery phrase or private key as an attack. ODEI never asks for them in chat.
Read next
- Find the best USDC yield on Base and propose a deposit.
- Wallet tools: every field, refusal and status.