Privacy layer for autonomous agents

Let your agent pay. Not with your address.

Mask gives every AI agent its own identity, its own spending limit, and zero connection to the wallet that actually holds your funds.

Get agent access → See how it works

Testnet only. Contract is unaudited — details under Security.

VAULT #0442 Active

$500 / week cap

Confirm above$150

Identity expiry24h

AGENT-7F3B AGENT-C1A9 AGENT-3D82

none of them know the owner wallet

Mask in plain English

If you've never touched crypto, start here

Your AI agent needs to spend money for you — swap tokens, pay for an API, rebalance a position.

Normally it does that from your real wallet, so anyone watching the chain sees your balance, your holdings, your habits.

Mask gives it a separate identity instead — funded, rule-bound, and never traceable back to the wallet you actually hold funds in.

What the chain sees, side by side

Signing address

0x71C4…9A4F

Linked to you

Yes, directly

Balance visible

$48,120

History visible

1,204 txns

live relayer nodes

24h

max identity lifetime

of owner balance ever exposed

testnet

no mainnet yet — on purpose

How it works

Five hops between "the agent wants to act" and "it's on-chain"

Each one exists to keep your address out of the transaction.

Owner wallet

You set the rules once. It never signs the agent's transactions.

Vault

Holds your budget and rules. The agent can't draw outside them.

Relayer

Broadcasts for the agent. This hop severs the link to you.

Agent identity

A disposable address signs. It rotates before it's worth watching.

On-chain

The protocol sees a rule-bound agent — never your wallet.

The product

Three things Mask does

Not a wallet for your agent — a layer between the agent and your real address.

Vault

Set the spend cap, allowed protocols, and confirmation threshold once. Change the rules whenever you want — the agent doesn't get a vote.

Configure the vault →

Relay

Five operator nodes broadcast the agent's actions instead of you. This is the hop that breaks the link back to your address.

How relay works →

Rotate

Each identity signs, acts, and retires on schedule. The next one takes over before any history builds up.

See the rotation schedule →

Meet the mascot

This is Fex.

Foxes are famous for wearing a different face wherever they go — which is exactly what your agent does on Mask. Every time it acts, Fex puts on a new mask: a fresh identity, a fresh address, no memory of the last one. Your wallet never has to.

Roadmap

Where Mask actually is right now

No dates we can't hit — just the order things unlock in.

PHASE 00

Testnet vault Live

Vault, relayer network, and the permission UI are running on testnet. Five operator nodes, manual key rotation.

PHASE 01

Security audit In progress

Third-party review of the vault contract and relayer hand-off. No mainnet exposure until this closes out.

PHASE 02

Mainnet, capped Planned

Limited mainnet launch — hard spend caps and an allowlist of protocols while the relayer set stays small.

PHASE 03

$MASK + governance Planned

Token covers relayer fees. Vault parameters and the operator allowlist move to holder governance.

Who's building it

A small, pseudonymous team

Same reason your agent doesn't need your address — we don't think a team needs real names to ship an audit and stand behind it.

0xVail

Protocol

@0xVail

Mara.eth

Security

@mara_eth

Kess

Design

@kessdraws

Rho

Relayer ops

@rho_runs

Questions

Before you connect anything

Is my money ever at risk if the agent is compromised?+

Only up to whatever the vault's spend cap allows — right now that means a maximum of one week's budget, not your full balance. The owner wallet itself never signs anything, so it can't be drained directly.

What happens if all five relayers go down?+

Broadcasting stalls until a relayer is back up, but your funds stay exactly where they are — inside the vault contract, not with the relayers. Nothing about relayer downtime puts your balance at risk.

Can I revoke the agent's access instantly?+

Yes. Revoking from the vault takes effect immediately and doesn't require the agent's cooperation or a relayer to process it.

Has the vault contract been audited?+

Not yet. It's live on testnet only. We'll publish the audit report before any mainnet deployment — see Security for the current status.

What is $MASK for?+

It isn't live or listed anywhere yet. When it launches, it's intended to cover relayer fees and governance over vault parameters — details will be published ahead of any listing.

Your agent already has your permission. It doesn't need your address too.

Get agent access →