Approval pageVault setup
This page never asks for a private key: every transaction is signed in your own wallet. The agent's key is made on the agent's machine and never comes here.
How will you use Erebus?
Pick the one that fits. You can open the other any time.
Step 2 of 2. Nothing has been sent yet. Review, then confirm.
Set up your agent, one step at a time
What is done is read from the chain, so you can close this page and come back to the same place.
Create your vault
This makes a vault that you own, on Base, with USDC as its money. It costs a little gas, paid in ETH. The vault holds the money; your agent can only spend what your limits allow.
Name your agent
On the machine where your agent runs, run scripts/agent_setup.sh. It makes the agent's key there and prints the agent's address. The key never comes to this page, and this page never asks for it. Paste only the address.
Set the limits
Say in plain words what your agent may spend without asking you.
Phone alerts
When your agent needs your signature, an alert can reach you on Telegram. Open the alerts page in this wallet's browser and connect Telegram, then come back and check.
Connect the agent
Sign one short message so the relay will pass this agent's requests to you. It is a message, not a transaction. The relay answers with a token for the agent. The token is shown once.
You are set up
Agent can now pay your allowed vendors within your limits.
- Ask your agent: "Pay the invoice for 0.5 USDC to your vendor." It should go through.
- To see an exception, ask for more than your per-payment limit, for example 5 USDC. The vault will not pay it, and you will get an alert to sign that exact payment.
To change limits, add a vendor or pause the vault later, open the full controls.
Your agent's settings. Store them now.
The token inside is shown once. Copy this into your agent's settings before you continue. If you lose it, connect the agent again: that makes a new token and the old one stops working. Replace the three paths marked REPLACE with the ones scripts/agent_setup.sh printed.
1. Wallet
Connect the wallet that will own the vault. Use a different address for the agent.
Open in MetaMask- Account
- not connected
- Chain
- -
2. Vault
Choose a different vault, or create one
Is your money protected?
The vault protects only the USDC inside it. USDC left in the agent's wallet, or in any wallet the agent controls, is covered by no rule: the agent can send it anywhere. Move your funds into the vault and leave the agent's address with ETH for gas and no USDC.
Vault
- Address
- Owner
- Code
- Policy version
- Agent
- Per-payment limit
- Daily limit
- (most the agent can pay in a day without a signature)
- Policy valid until
- State
- Vault balance
- Your balance
- Agent address USDC
- Agent address ETH (gas)
transfer, which the vault accepts: use "Move into vault" in section 5, or your wallet's token send for USDC.The connected account is not this vault's owner, so every change below is disabled.
3. Limits
Vault: agents and approvers
- Address
- Owner
- Code
- State
- Vault daily cap
- Spent today, all agents
- Vault balance
- Your balance
The connected account is not this vault's owner, so every change below is disabled.
Ready to pay?
A. Vault daily cap
B. Agents
Add an agent
C. Approvers
4. Vendors
Only needed for the config file, which is the way to approve on a copy of the approval page that is not connected to a relay. On the hosted pages, section 7 sets approvals up without a file. The approval page sends your signature only to the relay named in your config, so a crafted link cannot redirect it. Leave this empty to carry signature files by hand.
5. Move money into the vault
Funds go in through the USDC token's transfer, the only way this vault can receive them. Send the agent's address ETH for gas, and no USDC.
transfer, which this section and your wallet's token send both call.This vault's code does not match the build this page deploys, so funding is switched off. A link or a mistyped address can lead to someone else's contract. Only unlock it if someone you trust has reviewed this vault's code.
6. Pause and withdraw
Pausing stops the agent's payments at once. Money stays in the vault.
7. Approve exceptions from alerts
- Your agent asks for an exception, and you get an alert with a link.
- Open the link where your wallet is. In this browser it goes straight to review. On a phone the approval page asks you to connect your wallet first, and checks that it is the owner's.
- Check the recipient and the amount, then sign with the owner's wallet. No file is needed.
Only this vault's owner wallet can sign. Changing limits or vendors cancels approvals that are waiting, so the agent has to ask again.