Seashail
Agent-native trading infrastructure
for crypto
A self-hosted binary that lets AI agents trade across DeFi without ever seeing your private keys.
curl -fsSL https://seashail.dev/install | shThe Key Problem
When you give an AI agent your private key, you give it unlimited access to every asset in your wallet. One prompt injection, one compromised plugin, one hallucination — and your funds are gone.
The OpenClaw incident proved it: 341 malicious skills discovered stealing private keys, prompt injection attacks draining wallets, and a single CVE enabling remote code execution with operator-level access.
The core failure was architectural. Agents held keys in plaintext with no permission boundaries.
A security boundary, not a wrapper
Seashail sits between the agent and your keys. The agent talks MCP. The binary handles everything else.
Keys split into 2-of-3 shares at creation. No single point of compromise. Key bio shares stored separately.
Every transaction passes through configurable rules before signing. Per-transaction limits, daily caps, allowlists.
Agents connect through stdio only. Structured, auditable tool calls. No raw key access, ever.
Key material decrypted only during signing, then immediately zeroed. No key data persists in memory.
How it works
One binary. No servers. No HTTP. No external dependencies. Everything runs locally on your machine.
Full DeFi surface area
One binary, every major protocol. No API keys. No exchange accounts. No KYC.
Spot Trading
Swap any token via DEX aggregators.
Perpetuals
Leveraged longs and shorts on crypto.
NFTs
Buy, sell, bid, and manage collections.
Predictions
Trade on real-world event outcomes.
Lending
Supply, borrow, and manage collateral.
Yield
Farm and manage yield positions.
Works with your agent
Seashail exposes an MCP server over stdio. Any agent that speaks MCP can trade.
Security model
Seashail allows rules to protect and what is shared. Read the code. Verify it.
AES-256-GCM via libsodium. Keys/shares encrypted before touching disk.
No single storage location holds a complete key. Machine, backup, and recovery shares.
Key material erased from memory immediately after signing. Uses the zeroize crate.
Per-transaction limits, daily caps, address allowlists. Configurable per wallet.
Auto-approve low-risk transactions. Human confirmation above thresholds.
Passphrase sessions expire automatically. Configurable timeout.
Private keys, shares, and passphrases never appear in logs. Verified by E2E tests.
No dependencies, no sidecars, no runtime extensions. One auditable binary.
Open source. Verifiable.
- //Full source code on GitHub
- //Reproducible builds from source
- //Signed release binaries with SHA256
- //Open cryptography: no proprietary algorithms
- //Community contributions welcome
Start trading in 5 minutes
Install the binary, fund a wallet, connect your agent. That is all it takes.
curl -fsSL https://seashail.dev/install | sh