360 Secure SkillHub
360 安全技能中心

AgentWallet

通过 agentwallet CLI 管理 EVM、Solana 和 TON 共 12 条链的加密钱包,支持初始化与解锁会话、创建钱包、查询余额、转账、自定义交易签名和 x402 支付签名;命令返回 JSON,材料声明私钥不离开 vault 进程。

phlegonlabs
phlegonlabs
热度 83.28
最近更新 2026-05-18 12:23:42
分类:自动化依赖:代码执行 / 读写文件 / 第三方 API应用场景:财务 / 工作流

安装技能

复制下面的话术发给你的 Agent,它会通过 secure-skills 检索并安装该技能。

执行命令安装此 skill: npx secure-skills-cli add phlegon-agentwallet
Metadata
name
agentwallet
description
Secure multi-chain wallet for AI agents. Create wallets, check balances, sign and broadcast transactions across 12 chains (EVM + Solana + TON). Private keys never leave the vault process.
version
1.0.0
metadata
{"openclaw":{"requires":{"bins":["agentwallet"],"env":["AGENTWALLET_PASSWORD (sensitive, optional): Master password for initial unlock."]},"install":[{"id":"agentwallet","kind":"node","package":"agentwallet","bins":["agentwallet"],"label":"Install agentwallet (npm)"}],"emoji":"wallet","source":{"repository":"https://github.com/user/agentwallet","license":"MIT"}}}

AgentWallet Skill

You are an AI agent with access to the agentwallet CLI. Use it to securely manage crypto wallets, check balances, and execute transactions across 12 blockchains.

Supported Chains

EVM (10): Ethereum, Polygon, BSC, Base, Arbitrum, Optimism, Avalanche, Fantom, XLayer, Scroll Non-EVM (2): Solana, TON

First-Time Setup

If the vault does not exist yet:

agentwallet init

On shared VPS environments, harden vault permissions:

agentwallet harden --json

Then unlock to get a session token (required for non-interactive use):

agentwallet unlock --json

This returns {"token":"awlt_...","expiresAt":"..."}. Save the token for subsequent commands.

Session Management

Always unlock before performing wallet operations:

# Unlock with default 1-hour TTL
agentwallet unlock --json

# Unlock with custom TTL (e.g., 4 hours)
agentwallet unlock --ttl 14400 --json

# Lock when done (destroys session)
agentwallet lock --json

You can also set the token as an environment variable:

export AGENTWALLET_TOKEN=awlt_...

Creating Wallets

# Create a wallet on a specific chain
agentwallet create --chain ethereum --token <token> --json

# Create wallets on all 12 chains at once
agentwallet create --chain all --token <token> --json

Output: [{"address":"0x...","chainName":"Ethereum","chainId":"ethereum"}]

Checking Balances

No authentication needed for balance queries:

agentwallet balance <address> --json

Output: {"address":"0x...","balance":"1.5","symbol":"ETH","chainId":"ethereum"}

Listing Wallets

agentwallet list --json

Output: [{"address":"0x...","chainName":"Ethereum","chainType":"evm","chainId":"ethereum","label":null}]

Transferring Tokens

agentwallet transfer -f <from_address> -t <to_address> -a <amount> --token <token> --json

Output: {"txHash":"0x...","chain":"ethereum","from":"0x...","to":"0x...","amount":"0.1"}

Signing Transactions

For custom transactions, pipe JSON to stdin:

echo '{"walletAddress":"0x...","transaction":{"chainType":"evm","chainId":"ethereum","to":"0x...","value":"0.01"}}' | agentwallet sign --token <token> --json

x402 Payment Signing

When you receive an HTTP 402 response with a PAYMENT-REQUIRED header:

echo '{"network":"base","token":"native","amount":"0.001","recipient":"0x..."}' | agentwallet x402-sign --wallet <address> --token <token> --json

Security Rules

  1. NEVER use agentwallet export or agentwallet mnemonic — these commands are TTY-gated and blocked in non-interactive mode
  2. ALWAYS use --json flag for machine-readable output
  3. ALWAYS use --token for authentication (never pass passwords in commands)
  4. ALWAYS lock the session when done with agentwallet lock
  5. Private keys never leave the vault process — only signed transactions are returned
  6. Session tokens expire automatically (default: 1 hour)

Error Handling

All commands return JSON errors to stderr when --json is used:

{"error": "description of what went wrong"}

Check the exit code: 0 = success, non-zero = error.