Agent-native, self-hosted trading infrastructure for crypto.

Seashail is a local binary that exposes an MCP server over stdio. Agents can query balances, execute trades, and manage DeFi positions while Seashail enforces a policy engine and keeps key material encrypted at rest. The agent never sees private keys.

Full Documentation | Install | Quickstart | Supported Chains | MCP Tools | Security Model

• 60+ MCP tools — spot swaps, sends, bridging, DeFi (lending, staking, liquidity), perpetual futures, NFTs, prediction markets, pump.fun
• Policy engine — per-transaction and daily USD caps, slippage limits, leverage caps, allowlists, operation toggles, tiered approval (auto-approve / confirm / hard-block)
• Non-custodial key storage — Shamir 2-of-3 secret sharing for generated wallets, AES-256-GCM encryption for imported wallets, passphrase sessions with configurable TTL
• Multi-agent safe — proxy/daemon architecture lets multiple agents (Claude Desktop, Cursor, Codex, etc.) share one keystore and passphrase session without split-brain
• Multi-chain — Solana, Ethereum, Base, Arbitrum, Optimism, Polygon, BNB Chain, Avalanche, Monad, Bitcoin (+ configurable EVM chains and testnets)
• Agent-agnostic — works with any MCP-capable client; one-click templates for 10+ agents/editors
• Scam protection — optional signed scam-address blocklist, OFAC SDN checking, recipient/contract allowlists
• Verification — release assets signed with Sigstore Cosign, SBOM generation (SPDX-JSON)

Seashail is distributed via GitHub Releases and can also be built from source. Your agent runs it as an MCP stdio server via seashail mcp.

brew install seashail/seashail/seashail

curl -fsSL https://seashail.com/install | sh

If seashail is not found after install, add the default install dir to your shell PATH:

export PATH="$HOME/.local/bin:$PATH"

If you have WSL, you can run the macOS/Linux installer inside WSL. Otherwise:

irm https://seashail.com/install.ps1 | iex

If you don't want to install the binary, reference these wrappers in your agent's MCP config instead. They install and run Seashail automatically.

npx (Node.js) — see packages/mcp/:

• Command: npx
• Args: -y @seashail/mcp --

uvx (Python) — see python/:

• Command: uvx
• Args: seashail-mcp

seashail openclaw install

Or via the OpenClaw CLI:

openclaw plugins install @seashail/seashail
openclaw plugins enable seashail
openclaw gateway restart

See the OpenClaw setup guide for details.

seashail doctor

This checks for common issues (missing dependencies, permissions, path configuration). The report contains no secrets and is safe to paste in issues. See the CLI reference for details.

See Install above.

Your agent starts Seashail automatically — you just need to tell it how. Pick your agent:

OpenClaw (docs):

seashail openclaw install

Claude Code (docs):

claude mcp add seashail -- seashail mcp

Claude Desktop (docs):

seashail agent install claude-desktop

Codex (docs):

Add to ~/.codex/config.toml:

[mcp_servers.seashail]
command = "seashail"
args = ["mcp"]

Cursor (docs):

seashail agent install cursor

VS Code / GitHub Copilot (docs):

seashail agent install vscode

Windsurf (docs):

seashail agent install windsurf

Cline, Continue, JetBrains, or any MCP client — see Agent Integration below or the full agent setup guide.

Testnet mode: Add --network testnet to any of the above. For example: seashail agent install cursor --network testnet or claude mcp add seashail-testnet -- seashail mcp --network testnet.

On first connection, Seashail automatically creates a default wallet (EVM, Solana, Bitcoin addresses) so your agent can immediately query balances — no prompts required.

To create a wallet with stronger recovery options, ask your agent to call create_wallet. This uses MCP elicitation to:

• set a passphrase (min 8 characters, stored nowhere)
• show and confirm an offline backup share (Shamir 2-of-3)
• accept disclaimers

Key material never leaves the Seashail process. The agent only receives tool outputs (balances, quotes, tx hashes).

In your agent, try:

• get_capabilities — sanity check: see configured RPCs, swap backends, chains
• list_wallets — see your wallets and addresses
• get_balance — check balances

Seashail uses a proxy-daemon architecture to allow multiple agents to share a single keystore and policy state safely.

┌─────────────────┐
│   MCP Host      │  (Agent: Claude Desktop, Cursor, etc.)
│  (stdio client) │
└────────┬────────┘
         │ stdio (JSON-RPC over newline-delimited JSON)
         ▼
┌─────────────────┐
│  seashail mcp   │  Lightweight stdio proxy
│    (proxy)      │  - Injects network override params
└────────┬────────┘  - Auto-spawns daemon if needed
         │ Unix socket / named pipe / TCP loopback
         ▼
┌─────────────────┐
│ seashail daemon │  Singleton process
│                 │  - Holds exclusive keystore lock
│                 │  - Manages passphrase session
└────────┬────────┘  - Coordinates all MCP clients
         │
         ▼
┌─────────────────┐
│  MCP Server     │  Tool dispatch + elicitation
│  (in daemon)    │  - Policy evaluation
└────────┬────────┘  - Key decryption + signing
         │           - Transaction broadcast
         ▼
┌─────────────────┐
│  Policy Engine  │  Gates every write operation
│                 │  - Tiered approval (auto/confirm/block)
└────────┬────────┘  - USD caps, slippage, allowlists
         │
         ▼
┌─────────────────┐
│   Chain Layers  │  Chain-specific adapters
│  (EVM/Solana/   │  - RPC communication
│   Bitcoin)      │  - Transaction construction
└─────────────────┘  - Broadcast

Why proxy + daemon?

1. Multiple agents sharing state — wallet created in Claude Desktop appears in Cursor; passphrase entered once unlocks everywhere; policy changes apply globally
2. Concurrent access safety — exclusive filesystem lock prevents keystore corruption from concurrent writes
3. Passphrase session caching — unlock once, use from all agents (configurable TTL, default 1 hour)

See the Architecture docs for full details on the data flow and layer responsibilities.

Custom EVM chains can be added via config.toml. Use get_capabilities to see what's configured on your instance.

See the Chains docs for chain identifiers, network mode defaults, and RPC configuration.

All tools are served over MCP stdio via seashail mcp. For chain-by-chain support, call get_capabilities.

See the MCP Tools Reference for full parameter details and the individual tool reference pages.

Seashail assumes the agent process may be malicious or compromised. The binary is the security boundary.

• Generated wallets use Shamir Secret Sharing (2-of-3): Share 1 encrypted with machine secret, Share 2 encrypted with machine key (or passphrase for portability), Share 3 shown once as offline backup
• Imported wallets are encrypted at rest using AES-256-GCM with a passphrase-derived key (Argon2id + HKDF subkeys)
• Key material is zeroized from memory after signing

Every write operation is gated by:

• Per-transaction USD caps (max_usd_per_tx) and daily USD caps (max_usd_per_day)
• Slippage caps for swaps (max_slippage_bps)
• Leverage caps for perps (max_leverage, max_usd_per_position)
• Recipient allowlisting (send_allowlist) and contract allowlisting (contract_allowlist)
• Operation toggles (enable/disable sends, swaps, bridging, perps, NFTs individually)
• Tiered approvals via MCP elicitation:
  • Auto-approve — silent execution (low risk, within limits)
  • User confirm — MCP elicitation prompt (exceeds auto-approve threshold)
  • Hard block — rejection (exceeds hard cap or violates policy)

See the Security Model docs for the full threat analysis.

Seashail evaluates every write against policy before any key material is decrypted.

max_usd_per_tx          Per-transaction USD cap
max_usd_per_day         Daily USD cap (resets UTC midnight)
max_slippage_bps        Swap slippage cap (basis points; 100 bps = 1%)
deny_unknown_usd_value  Fail-closed when USD value unknown (default: true)
send_allow_any          Allow sends to any address (vs allowlist-only)
send_allowlist          Explicit list of permitted send addresses
contract_allow_any      Allow interaction with any contract
contract_allowlist      Explicit list of permitted contracts
enable_send             Toggle sends on/off
enable_swap             Toggle swaps on/off
enable_bridge           Toggle bridging on/off
enable_perps            Toggle perps on/off
max_leverage            Cap leverage for perps
max_usd_per_position    Cap perps position size
enable_nft              Toggle NFT operations on/off
max_usd_per_nft_tx      Cap per-NFT-transaction value

get_policy              View current policy (global or per-wallet)
update_policy           Replace policy rules

Per-wallet overrides are supported: get_policy({ wallet }) and update_policy({ wallet, policy }).

See the Policy and Approvals Guide and the Policy Tools Reference for all 33+ policy fields.

seashail paths

Output (JSON):

{
  "config_dir": "/Users/you/.config/seashail",
  "data_dir": "/Users/you/.local/share/seashail",
  "log_file": "/Users/you/.local/share/seashail/seashail.log.jsonl"
}

Override with SEASHAIL_CONFIG_DIR and SEASHAIL_DATA_DIR environment variables.

config.toml lives under config_dir:

network_mode = "mainnet" # or "testnet"

[rpc]
solana_rpc_url = "https://api.mainnet-beta.solana.com"

[http]
binance_base_url = "https://api.binance.com"
jupiter_base_url = "https://api.jup.ag/swap/v1"
# 1inch requires an API key. If unset, swaps use Uniswap on EVM.
# oneinch_api_key = "..."

# Hyperliquid (perps)
hyperliquid_base_url_mainnet = "https://api.hyperliquid.xyz"
hyperliquid_base_url_testnet = "https://api.hyperliquid-testnet.xyz"

# Scam blocklist (optional)
# scam_blocklist_url = "https://example.com/seashail/scam-blocklist.json"
# scam_blocklist_pubkey_b64 = "..."
# scam_blocklist_refresh_seconds = 21600

Mainnet is the default. Network mode affects default chain selection when tools omit chain/chains.

• Persistent: set network_mode = "testnet" in config.toml or call set_network_mode over MCP
• Per-session override: seashail mcp --network testnet
• First-run default: export SEASHAIL_NETWORK_MODE=testnet (before config.toml is created)

See the Network Mode Guide for Solana RPC defaults, airdrops, and faucet links.

Run the MCP server over stdio (proxy mode by default).

seashail mcp                        # Proxy mode (recommended)
seashail mcp --network testnet      # Testnet override
seashail mcp --standalone           # No daemon sharing

Run the singleton daemon (shared state across MCP clients).

seashail daemon                             # Run until terminated
seashail daemon --idle-exit-seconds 300     # Auto-exit after 5 min idle

You usually don't need to run this manually — seashail mcp auto-spawns the daemon.

Manage agent config templates.

seashail agent list                         # List supported targets
seashail agent print cursor                 # Print config to stdout
seashail agent install cursor               # Install config
seashail agent install cursor --network testnet  # Testnet template

Supported targets: cursor, vscode, windsurf, claude-desktop.

Install the OpenClaw plugin integration.

seashail openclaw install
seashail openclaw install --network testnet
seashail openclaw install --link --plugin ./packages/openclaw-seashail-plugin  # Dev

Self-diagnostic report (contains no secrets, safe to paste in issues).

seashail doctor          # Human-readable
seashail doctor --json   # Machine-readable

Print resolved config, data, and log paths.

seashail paths

Upgrade to the latest version.

seashail upgrade              # Interactive
seashail upgrade --yes        # Non-interactive
seashail upgrade --yes --quiet  # Silent (for scripts)

See the CLI Reference docs for full flag details.

Seashail works with any MCP-capable agent. For agents not listed in Quickstart:

Configure your agent to run:

• Command: seashail
• Args: mcp

If your agent uses a JSON config file:

{
  "mcpServers": {
    "seashail": { "command": "seashail", "args": ["mcp"] }
  }
}

Or:

{
  "servers": {
    "seashail": { "type": "stdio", "command": "seashail", "args": ["mcp"] }
  }
}

Static config templates are also available in packages/agent-configs/.

Multiple agents safely share the same wallets, passphrase session, and policy counters via the singleton daemon. Each seashail mcp process is a lightweight proxy.

• macOS/Linux: Unix socket at data_dir/seashail-mcp.sock
• Windows: named pipe

These are summarized below. See the full documentation for complete details.

• Generated wallets: Shamir 2-of-3 secret sharing (machine share + passphrase share + offline backup)
• Imported wallets: AES-256-GCM encrypted with passphrase-derived key
• Passphrase session: cached in memory with configurable TTL; shared across all MCP clients
• Tools: create_wallet, import_wallet, list_wallets, get_wallet_info, get_deposit_info, export_shares, rotate_shares

Wallets Guide

send_transaction transfers native tokens (SOL, ETH, etc.) or fungible tokens (SPL, ERC-20). Seashail handles chain-specific mechanics (ATA creation on Solana, ERC-20 approval on EVM) and validates addresses before signing.

Sending Guide

swap_tokens routes automatically: Jupiter on Solana, Uniswap (or 1inch when configured) on EVM. Slippage tolerance is enforced by policy.

Swapping Guide

bridge_tokens moves tokens cross-chain (Solana <-> EVM, EVM <-> EVM) via Wormhole (default) or LayerZero. Auto-redeem on destination chain is supported. Track progress with get_bridge_status.

Bridging Guide

Four DeFi primitives with protocol auto-selection:

DeFi Guide

Leveraged perpetual futures on two venues:

Policy controls: enable_perps, max_leverage, max_usd_per_position.

Perps Guide

Inventory reads, direct transfers, and marketplace trading via transaction envelopes.

Supported marketplaces: Blur (Ethereum), Magic Eden (Solana + cross-chain), OpenSea (Ethereum), Tensor (Solana).

NFT Guide

Trade on Polymarket (CLOB on Polygon). Search markets, view orderbooks, place limit/market orders, track positions.

Prediction Markets Guide

Discover, buy, and sell meme coins on Pump.fun (Solana only). Bonding curve mechanics — price moves with demand.

Pump.fun Guide

Get deposit addresses with get_deposit_info. For testnets, use get_testnet_faucet_links (EVM) or request_airdrop (Solana devnet/testnet).

Chains and Funding Guide

Optional signed scam-address blocklist. Opt-in via config.toml. Blocks sends and NFT transfers to known-bad addresses. Fail-open if fetch fails.

Scam Blocklist Guide

Release assets are signed with Sigstore Cosign. SBOM generation uses SPDX-JSON.

cosign verify-blob \
  --certificate <asset>.crt \
  --signature <asset>.sig \
  <asset>

See the Verification docs for details.

Common issues and solutions:

Run seashail doctor for a diagnostic report. See the Troubleshooting docs for full details.

apps/
  docs/                          # Fumadocs + Next.js documentation site
  landing/                       # Next.js + React + Tailwind CSS landing page

crates/
  seashail/                      # Rust binary (CLI + daemon + MCP stdio bridge)

packages/
  agent-configs/                 # Static MCP config templates for editors/agents
  config/                        # Shared TypeScript config
  e2e/                           # End-to-end test harness (Bun)
  mcp/                           # npx-runnable MCP server wrapper (@seashail/mcp)
  openclaw-seashail-plugin/      # OpenClaw plugin: exposes Seashail tools as native OpenClaw tools
  oxlint/                        # Custom Oxlint plugin
  shared/                        # Shared TypeScript types (TypeBox + Standard Schema)
  skills-seashail/               # SKILL.md + agent-facing docs (Agent Skills spec)
  web-theme/                     # Shared CSS theme package

python/                          # Python tooling (uvx runner)
reference/                       # Archived reference documentation

• packages/mcp/ — @seashail/mcp npx runner
• packages/agent-configs/ — Static MCP config templates
• packages/openclaw-seashail-plugin/ — OpenClaw plugin
• packages/e2e/ — End-to-end tests
• packages/skills-seashail/ — Agent Skills spec and workflows
• python/ — seashail-mcp uvx runner

Prerequisites: git, cargo (Rust toolchain), bun (for TypeScript packages).

git clone https://github.com/seashail/seashail.git
cd seashail
bun install
bun run build
bun run check

cargo build -p seashail
./target/debug/seashail --help
./target/debug/seashail doctor

To use the dev binary with your agent:

• Command: ./target/debug/seashail
• Args: mcp

bun install                  # Install dependencies
bun run build                # Build TypeScript packages
bun run test                 # Run tests
bun run check                # Type-check and lint

cargo build -p seashail      # Build Rust binary
cargo test -p seashail       # Run Rust tests

Apache-2.0