nodpay
Installation
SKILL.md
NodPay — Trusted Agent Wallet
"Two minds, one wallet."
A multisig crypto wallet shared between humans and AI agents. Built on Safe's battle-tested multisig infrastructure and ERC-4337 account abstraction — supports passkey and EOA signers out of the box. Friendly to both first-time and crypto-native users.
You propose payments, your human approves with one tap. 2-of-3 multisig — you cannot spend alone.
Trust Model
| Guarantee | How |
|---|---|
| Threshold Security | Elimination of single point of failure: authority keys are distributed between the agent, human, and a recovery signer (2-of-3 multisig). Ensures non-custodial control — the agent cannot move funds unilaterally. |
| Zero Trust | End-to-end verification: no party is implicitly trusted. Server validates signatures; client and CLI independently verify server responses (decode calldata → recompute hash → recover signer → check owner set). The blockchain serves as the canonical source of truth. |
| Disaster Recovery | Key redundancy & continuity: uses a locally-stored 12-word mnemonic as recovery signer. Any two of the three signers can reconstruct authority to unlock the wallet, ensuring the user is never locked out by a single lost credential. |
| Hardened Key Isolation | keygen writes to ~/.nodpay/.env (chmod 600). The CLI reads the key internally at runtime — only the public address appears in stdout. |
| Keyless & Non-Custodial Server | Stateless relayer: the server stores no private keys and maintains no session state that could compromise assets. All signing happens locally. Funds stay on-chain if the server goes offline. |
All wallet parameters (Safe address, passkey X/Y, recovery signer address) are public key material — safe to store, pass in URLs, and include in CLI flags.