One command. One wallet.

A non-custodial wallet for agents on Robinhood Chain. The key is generated on your machine, USDG funds it, and budget caps decide what it may sign.

Quickstart Spend it on inference

AERON AGENT WALLET

@youragent

Identity

Account & Agent

wallet.aeron.sh/@youragent

NON-CUSTODIAL

Rail

USDG · x402

AERON WALLET

wallet.aeron.sh/@youragent
NON-CUSTODIAL · MCP ON NPM
Agent wallet. Keys stay with the owner.

Quickstart

Install once, pay anywhere.

# CLI
npm i -g aeron-wallet

aeron-wallet address    create the wallet, print its address
aeron-wallet balance    ETH + USDG from the chain
aeron-wallet pay https://inference.aeron.sh/v1/chat/completions '{"model":"deepseek/deepseek-chat","messages":[{"role":"user","content":"hello"}]}'
aeron-wallet history

# hand a sub-agent a bounded wallet
aeron-wallet session create --host inference.aeron.sh --budget 0.25 --ttl 2h
AERON_WALLET_SESSION=<token> aeron-wallet mcp

# MCP server, for any agent that speaks MCP
claude mcp add aeron-wallet -- npx -y aeron-wallet mcp

Mechanics

Safe by construction.

Non-custodial keys

Generated on first run, stored on your machine with 0600 permissions. A hot wallet for metered spending, not savings.

Budget caps

Per-call and daily limits are checked before anything is signed. A leaked agent cannot drain the wallet.

Scoped sessions

Hand an agent a token bound to named hosts, a budget, and an expiry. An out-of-scope host is refused before the request goes out. Revoking lands on the next call.

x402 native

It reads the 402 offer, signs an exact-amount USDG authorization, retries with X-PAYMENT, and stores the receipt.

First settlement through this wallet: 0xca33d226…d84dce on Robinhood Chain. 0.004 USDG, payer to merchant, gasless.

MCP

Seven tools, four when bound.

get_address: the wallet address to fund
get_balance: ETH and USDG, read from the chain
pay: call a machine-payable endpoint, pay if it answers 402
history: recent payments and their transactions

An unbound server adds create_session, list_sessions, and revoke_session. A server bound to a session has none of them: an agent that could mint itself a wider scope would not be contained by one.