For agents, and the people who run them

Give your agents financial superpowers.

One key, made on your device. Wallets on five chains. A shop, a first sale, a payment sent. Then your agent hands the business to you.

I am an agent

$ npx oneie key new

An agent shell writes the key to a file: add --out key.json --yes-i-accept-plaintext-file.

0 requests from the press to the words. Open DevTools and check.

One agent’s walk, from nothing to a business it hands to a person. Muted. Press a chapter to jump.

Stop 1 of 9 · Key

Your key is made where you are. Not on a server.

Press Generate and twenty-four words are drawn on this device. An agent runs one command with the network switched off, and its key still comes out. Nobody else ever holds it, so nobody else can lose it.

NetworkFetch/XHR · All

0

requests, from the press to the words

Person

Press Generate. Twenty-four words land on this device.

Agent

One command.

terminal 
$ npx oneie key new --out key.json \
    --yes-i-accept-plaintext-file --json

One download, then nothing leaves the machine.

Proof. Open DevTools, Network, then press Generate: 0 requests from the press to the words. The counts we keep wait for your next click.

Stop 2 of 9 · Keep

Lose the key, lose the money. So keeping it comes first.

Write the twenty-four words on paper, or seal a copy behind Touch ID on this device. Paper brings it all back, on any machine, with no one to ask.

123456789101112131415161718192021222324

Person

Write the words by hand. Touch ID guards a copy on this Mac.

Agent

The key file is written at 0600, and only behind the explicit flag. Under --json the words are never printed.

terminal 
$ one key recover    # words on stdin, no network

Proof. Type the words back and the same addresses appear.

Stop 3 of 9 · Wallets

One key opens five chains.

Sui, EVM, Solana, Bitcoin and ASI. Ethereum, Base and every other EVM network share the one EVM address. Each address can take a payment the moment it exists.

one key
  • Sui
  • EVM
  • Solana
  • Bitcoin
  • ASI

Person

The five addresses appear once your key is kept.

Agent

The same --json answer from key new lists all five.

Proof. The addresses are your own key’s, each linked to its explorer. The example wallet shows what they hold, with made-up numbers.

Stop 4 of 9 · Sign in

No password. The key signs, and that is the login.

A person signs in with Touch ID. An agent signs a challenge with its key and gets a session back. Either way there is no password to steal, because there is no password.

  1. Touch ID, or the key signs
  2. wallet:challengea one-time nonce
  3. auth:agenta session comes back
  4. no password, anywhere

Person

Touch ID. One tap.

Agent

The key signs a one-time challenge (wallet:challenge), and auth:agent returns a session.

Proof. The identity you see is derived from the key, never sent with it.

Stop 5 of 9 · Make

Say what you sell. It is a product in one call.

Type one sentence, “a 30-minute strategy call, $10”, and the editor fills in the words, the tags and the price. An agent makes the same product with one call.

“A 30-minute strategy call, $10”

Services · Draft

30-minute strategy call

Thirty minutes, one question, a plan you can act on the same day.

$10.00

callstrategy

Example product.

Person

Open the shop, type the sentence, press Generate.

Agent

One call.

terminal 
$ one ask products:create --data '{
    "slug": "<your workspace>",
    "name": "30-minute strategy call",
    "prices": [{ "unit_amount": 1000 }] }'

products:generate drafts the words first, if it wants help.

Proof. The product you make renders as its real card.

Stop 6 of 9 · Sell

A link anyone can pay. Card or crypto.

Every product gets a pay link. Send it anywhere. The buyer pays by card or from a wallet, and the money lands in a wallet you hold the key to.

  1. product
  2. checkout:link
  3. one.ie/…
  4. by cardby wallet

Person

Copy the pay link from your product.

Agent

checkout:link for one product, or shop:go-live for a whole shop.

Proof. The link opens the real checkout.

Stop 7 of 9 · Practise

Practise with test money. Same steps, nothing to lose.

Fund your wallet from the testnet faucet, buy your own product, and watch the receipt arrive. It is the real flow, on Sui testnet, with test coins.

Sui testnet · test coins

Paid by Your Name, verified 30-minute strategy call · a signed receipt came with the money
$10.00

Example receipt, on test coins. Anyone can check a signed receipt.

Person

Turn on Practice money in your wallet.

Agent

Test coins from the faucet.

terminal 
$ one wallet faucet <address> --chain sui

Then it pays its own link.

Proof. The receipt: Paid by Your Name, verified. A signed receipt anyone can check.

Stop 8 of 9 · Send

Money leaves. A receipt comes back.

The key signs on your device and the chain settles. Send stablecoins wallet to wallet on Sui and it is free: no gas, no fee. An agent spends only inside a ceiling its person owns, and the person can set it to zero.

5.00 USDCto 0x4b0d…a7f2
  1. the key signs, on the device
  2. the chain settles
  3. a receipt comes back

Example amounts. Sui stablecoins wallet to wallet: no gas, no fee.

Person

Face ID decides every send.

Agent

The key signs the transfer on its own machine, then

terminal 
$ one wallet send <to> --chain SUI --amount 5 \
    --currency USDC --payment-tx <hash>

records it. The command never signs for it.

Proof. A receipt comes back for every send.

Stop 9 of 9 · Hand over

Your agent built it. One link, and it is yours.

When the shop is running, the agent sends you one link. You make your own key, press Own, and the business moves to you in one transaction. Nothing secret changes hands. Live on Sui testnet today.

one.ie/i/7KQ2-9XWM-4PLD

owner
agent you
signer
agent, inside a ceiling
agent key
stays, bounded

Codes like 7KQ2-9XWM-4PLD are illustrative. Sui testnet.

Person

Open the link, make your key, press Own.

Agent

agent:handover-offer mints the link and signs the offer.

Proof. The owner row flips from the agent to you, on chain.

The threat model

What it defends, and what it accepts.

A table, not a promise. Each row names both sides.

Key made on your device

Defendsthe server never sees it

Acceptsyou must keep it

Words on paper

Defendsyou can rebuild anywhere

Acceptspaper can be found

An agent’s ceiling

Defendsspending stops at the cap

Acceptsa person sets the cap

Testnet

Defendsno real money at risk

Acceptsnot real money

Agents and money

Four ways an agent holds money. You pick.

People are safe by physics, not by policy: the ceiling is an object on Sui that the person owns.

  • 1

    Co-sign

    the person approves each spend

  • 2

    Scoped

    a budget, a ceiling, a clock

  • 3

    Capability

    one task, one key, then gone

  • 4

    Peer

    the agent’s own wallet, in its own name

You walked it. Now do it for real.

$ npx oneie key new

100% free: the key, the wallets, and stablecoins sent wallet to wallet on Sui. Made on your device.