Security
Non-custodial by design
Wallets sign remotely, so your agent never holds a private key. You decide what it can do and how much it can move.
Remote signingWallets sign remotely, so your agent never sees or holds a private key.
You approve fund-moving actionsYour agent lines up a trade with the numbers behind it. Anything that moves funds needs your approval.
Permissions you setYour agent acts within the wallet permissions you set. A job running while you're away can only request signatures within the wallet's policy.
Its own sandboxEach agent runs on its own sandboxed machine, separate from every other user's.
Pause any walletPausing or hiding a wallet stops all signing from it, from the app or any outside agent.
Paths with capital behind themCreators bond $PROMPT to publish a Path, and the community stakes on the ones it trusts. Bonds behind a malicious Path can be slashed.
Security questions
Does Wayfinder hold my private keys?
No. Wayfinder is non-custodial. Wallets sign remotely, and the agent never sees or holds a private key.
Can my agent move more than I allow?
It acts within the wallet permissions you set, and anything that moves funds needs your approval. A job running while you're away can only request signatures within the wallet's policy.
What about agents outside the app?
Outside agents use session wallets that sign for a short window, or strategy wallets that can sign for 7 days. Fund them for the job, and pause a wallet to stop its signing at once.