Purpose: WAIaaS is a self-custody wallet service designed for AI agents. It solves the dilemma of AI agents' on-chain transactions—either holding private keys and bearing the risk of theft, or relying on centralized custodians, creating a single point of failure and trust dependency. WAIaaS lets agents instantly process small transactions, while large transactions require owner approval, all running locally on the user's machine with no third-party dependencies.
Main capabilities:
- Security model: three-layer authentication (operator masterAuth, fund owner ownerAuth, AI agent sessionAuth); a four-layer policy engine automatically classifies transactions by USD value as INSTANT / NOTIFY / DELAY / APPROVAL; 12 policy types, including cumulative spending limits, token allowlists, contract allowlists, approved spenders, etc.; defense in depth includes Kill Switch, AutoStop engine, audit logs, and four-channel notifications.
- Multi-chain support: 13 networks in total (3 Solana + 10 EVM). The Solana adapter supports SPL / Token-2022; the EVM adapter supports ERC-20 via viem.
- Functional scope: native transfers, token transfers, contract calls, approve, batch transactions, Action Provider plugins (Jupiter Swap, etc.), NFTs, smart contracts, signing, and x402 payments (automatically handling HTTP 402 payments using EIP-3009 signatures).
- USD policy evaluation: evaluates all transactions in USD via price oracles (CoinGecko / Pyth / Chainlink).
- Multiple interfaces: REST API, TypeScript SDK, Python SDK, MCP server, CLI, Admin Web UI, Tauri Desktop, Telegram Bot.
- Skill files: prebuilt .skill.md instruction files that teach AI agents to use the API, including setup, quickstart, wallet, transactions, policies, admin, actions, x402.
Usage:
- Quick start: the quickset command automatically creates Solana Mainnet + EVM Ethereum Mainnet wallets, signs for each walletissues an MCP session token, and outputs a copyable Claude Desktop MCP configuration snippet. For testing, use waiaas quickset --mode testnet to create Solana Devnet + EVM Sepolia wallets.
- After starting the daemon, manage via http://127.0.0.1:3100/admin (requires masterAuth).
- There are two paths for connecting AI agents: Path A is MCP (suitable for Claude Desktop / Claude Code that support the Model Context Protocol), where the agent directly calls wallet tools through the MCP protocol; Path B is skill files (suitable for agents that do not support MCP or prefer the REST API), where adding the .skill.md file to the agent's context lets it automatically learn the WAIaaS API.
- Agent self-setup (automatic configuration): using the --auto-provision flag generates a cryptographically random master password and saves it to ~/.waiaas/recovery.key, which subsequent CLI commands automatically read. For manual setup, install the skill and follow waiaas-setup/SKILL.md.
- Docker operation is also supported.
- Admin panel: dashboard (system overview, wallet balances, recent transactions), wallets, sessions, policies (visual form editing for 12 policy types), notifications (Telegram, Discord, Slack), security (Kill Switch, AutoStop, JWT rotation), system settings. Enabled by default, supports settings search (Ctrl+K / Cmd+K) and unsaved changes protection.
Architecture: a monorepo of 12 packages, including @waiaas/core (shared types, Zod schemas, enums, interfaces), @waiaas/daemon (self-custody wallet daemon based on a Hono HTTP server), @waiaas/adapter-solana, @waiaas/adapter-evm, @waiaas/actions (DeFi Action Providers: Jupiter, 0x, LI.FI, Lido, Jito), @waiaas/sdk, @waiaas/mcp, @waiaas/cli, @waiaas/admin (Preact admin interface), @waiaas/wallet-sdk, @waiaas/push-relay, @waiaas/skills.
Applicable scenarios: developers and owners who need AI agents to execute on-chain transactions, DeFi operations, NFT trading, smart contract interactions, signing, or x402 payments, while wanting fund controlControl is retained in one's own hands, agent behavior is restricted through a policy engine, and multiple layers of security protection are in place.
Limitation: The project is a self-hosted local daemon, and keys do not leave the local machine; the daemon listens on http://127.0.0.1:3100。许可证为 MIT (Copyright (c) 2026 WAIaaS Contributors). Information regarding fees, prices, performance metrics, etc., has not yet been provided.
