WARDEN

Give ita wallet.Keep the keys.

Autonomous agents trade, pay and sign around the clock. WARDEN is the vault they work through: four walls every transaction must clear on-chain, and a halt that only you can pull.

Try to drain it Raise a vault

The sandbox runs the vault's rules in your browser. No wallet needed.

CAContract address soon

A raw key is a blank cheque.

It never sleeps

An agent on a loop runs while you sleep. One bad instruction repeats on every tick until someone notices.

A key is total

Whoever holds the private key can do anything: drain the balance, sign an unlimited approval, bridge it all away.

Asking defeats it

Approving every move by hand turns an autonomous agent back into a chat window. The limits have to hold without you.

Send a move through.

Pick what your agent tries to do. The vault checks each wall in this order and stops at the first one that says no, with the exact error it returns on-chain.

Agentsigns a request
HaltIs the vault open?
FilterAllowed contract and function?
LimitUnder the tx, hour and day caps?
HoldLarge enough to wait?
Chainfunds move

Choose a request above.

These are fixed examples. Set your own rules in the sandbox and unleash an agent that tries 40 drains in a row.

Four walls. One owner.

You set them once when you raise the vault. The agent can't read around them, talk past them or change them. Only your wallet can.

I

Halt

One call from your wallet freezes the agent completely. Nothing leaves until you reopen it.

  • Owner-only, instant
  • Also freezes held moves
  • Your own withdrawals still work
II

Filter

The agent can only call the contracts and functions you named. Everything else bounces.

  • Contract + function allowlist
  • Unlimited approvals always refused
  • Plain SOL sends listed separately
III

Limit

Hard ceilings per transaction, per hour and per day. A runaway loop hits the cap and stops.

  • SOL caps on three windows
  • Daily cap per token
  • Windows reset on the clock
IV

Hold

Moves above your threshold wait out a delay first. You see them queued and can cancel any of them.

  • Threshold and delay are yours
  • Every wall re-checked on release
  • Cancel from the console

Up in
four steps.

No approval prompts once it runs. Under-threshold moves land instantly.

  1. Raise a vault

    Connect your wallet in the console, name your agent's address and set the caps, the hold line and the allowlist.

  2. Fund it

    Send SOL or tokens to the vault address. Funds sit in a contract you own, never in the agent's wallet.

  3. Point the agent at it

    Your agent calls execute() through the WARDEN SDK. Every move is simulated first, so a refusal names the wall before any fee is spent.

  4. Watch from the console

    Live balance, spend against each cap, the hold queue, and the halt switch, all from your own wallet.

A few lines for the agent.

TypeScript or plain JS. Read the docs.

import { WardenAgent, sol } from "./warden.js";

const vault = new WardenAgent(VAULT, agentSigner);

// simulated first: refused moves never cost fees
const r = await vault.send(DEX, sol("0.2"), swapData);

if (!r.ok) console.log(r.wall, r.reason);
// → "Filter"  "NotAllowlisted(…, 0x095ea7b3)"

Before you hand it a key.

Who holds the funds?

You do. Funds sit in a vault contract owned by your wallet. The agent only has its own key, which holds fee money and nothing else. You can withdraw everything at any time, even while the agent is halted.

What if the agent's key leaks?

Whoever has it gets exactly what your agent had: the same allowlist, the same caps, the same hold line. Pull the halt, then swap the agent key with one call from the console.

Will it slow my agent down?

Only for moves above your hold line, and only by the delay you chose. Everything else lands in the same block, with no prompt. Refused moves are caught in simulation, before any fee is spent.

Which agents can use it?

Any agent that can sign a transaction. The SDK is one JavaScript file. Other stacks call the vault directly.

What does a vault cost?

Network fees to raise it, then per move. There is no subscription and no fee on the funds in your vault.

Can I change the rules later?

Yes. Caps, hold line, delay, allowlist, token caps and the agent address are all editable from your owner wallet. The agent can't touch any of them.

WARDEN mark

$WARDEN

The token of the vault, on Solana.

Contract address soon

Where to next?

Try to drain itSet rules, fire requests, unleash a rogue agent. No wallet. Raise a vaultConnect your wallet and put your agent behind four walls. Plug in your agentOne file. Refusals come back before any fee.