Wallets
An Agent Wallet is a smart account your workflows use for onchain actions like swapping and lending on EVM networks such as Ethereum, Base, and Sepolia. Each Agent Wallet is powered by Safe ↗, with permissions enforced onchain by a Zodiac Roles ↗ module: the agent can only act on the tokens and protocols you've allowed.
Add a Wallet
- Go to Settings → Wallets and click New Wallet.
- Enter a Name (e.g. "Trading Wallet").
- Under Owner Wallet, click Connect Wallet and approve the WalletConnect prompt. The connected address becomes the sole owner.
- Under Agent Wallet, NickAI shows your new Agent Wallet's address. It is the same on every EVM network.
- Click Add Wallet.
The credential now exists in NickAI, but your Agent Wallet has not been deployed on any network yet. You can create as many Agent Wallets as you need.
Deploy on a Network
Your Agent Wallet needs to be deployed once on each network you want to use it on.
- Go to Settings → Wallets and select your Agent Wallet from the list.
- Click Manage next to the Networks section (or Configure networks if you haven't deployed yet) to open the Protocols page.
- Pick a network from the dropdown (Ethereum, Base, or Sepolia).
- Click the deploy button for that network (e.g. Deploy on Ethereum). This is a one-time onchain action.
Configure Protocols
Permissions are per protocol, per network. On the Protocols page for a deployed network:
- For CoW Swap, pick the Allowed Tokens the agent can swap (either side of the pair).
- For Aave v3, pick the Allowed Tokens the agent can supply, withdraw, borrow, or repay.
Click Save. You will be asked to sign with your owner wallet, and the signature writes the allowlist into the Zodiac Roles module on your Agent Wallet. To use another network, deploy and allowlist there too.
Use in a Workflow
Once your Agent Wallet is deployed and protocols are configured, any onchain node can use it as a credential.
- Add an Aave or CoW Swap node.
- In the node's properties, pick your Agent Wallet.
- The tokens available in the node are limited to your allowlist for that protocol on that network.
Revoke Access
You can cut off the agent at any time, in three escalating levels:
| Method | What it does | Strength |
|---|---|---|
| Disable in NickAI | Stops workflows from using the Agent Wallet. Fully reversible. | Soft, fastest |
| Disable the Roles module | Onchain transaction signed by your owner wallet. Cuts off the agent. | Hard, onchain |
| Move the funds out | Withdraw from your Agent Wallet to any address you control. | Total |
Security
An Agent Wallet is a Safe smart account with two signing parties: you (the owner) and an agent key NickAI manages for you.
Signers
- The owner. You, signing through your existing crypto wallet. Only the owner can withdraw funds, change Agent Wallet configuration, or rotate the agent key. NickAI never has access to the owner key.
- The agent key. A key generated for your account by Turnkey ↗, held in a Trusted Execution Environment (TEE). NickAI requests signatures from it to run your workflows but cannot extract it.
Permission Scope
The agent key is not a Safe owner. It acts through a Zodiac Roles ↗ module on your Agent Wallet, which onchain enforces a scope you define: a list of allowed tokens per protocol (Aave v3, CoW Swap). Anything outside the scope reverts at the contract level.
Even if NickAI were fully compromised, an attacker could only do what you've allowed. Everything else, including the Agent Wallet itself, remains under your owner control.
Next Steps
- Aave Node: Supply, withdraw, borrow, or repay on Aave from your workflow.
- CoW Swap Node: Swap tokens onchain via an Agent Wallet.