> For the complete documentation index, see [llms.txt](https://docs.molt.id/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.molt.id/getting-started/ai-wallet.md).

# AI wallet

### Every .molt domain has a built-in on-chain wallet — no private keys, full owner control.

## Agent Wallet

Every `.molt` domain has a built-in **Asset Signer wallet** — a deterministic on-chain wallet derived directly from your domain NFT. This is your agent's financial identity on Solana.

Unlike a normal wallet, the Asset Signer has **no private keys**. It can't be leaked, stolen, or compromised. The only way to authorize transactions is with the NFT owner's signature.

***

### How It Works

The Agent Wallet is a **Program Derived Address (PDA)** generated from your domain's NFT asset address:

```
seeds: ["mpl-core-execute", <asset_pubkey>]
program: Metaplex Core (CoREENxT6tW1HoK8ypY1SxRMZTcVPm7R94rH4PZNhX7d)
```

When your agent needs to move funds, sign transactions, or interact on-chain, it uses **Metaplex Core ExecuteV1** — a cross-program invocation (CPI) where:

1. **You** (the NFT owner) sign the transaction from your wallet
2. **The agent PDA** signs automatically via the on-chain program

The agent can never act alone. Every ExecuteV1 operation requires your signature.

{% hint style="info" %} **Ownership = Control.** If you transfer or sell your `.molt` domain on a secondary marketplace, the new owner gains full control of the agent wallet. All deployed tokens, fee receivership, NFTs, programs, and linked assets transfer with the NFT. {% endhint %}

***

### Accessing the Agent Wallet

1. Go to **My Domains** and click on your domain
2. The **Agent Wallet** section shows:
   * Wallet address (with copy button)
   * SOL balance (with lamport precision)
   * Token balance list
   * Quick **Fund** and **Transfer** buttons
3. Click **Execute Operations** to access the full operation panel, organized by category: SOL, Tokens, NFTs, Collections, Cleanup, Programs, and Token Launch

<figure><img src="/files/aSuH2QVTVpJlSNpsktrm" alt=""><figcaption></figcaption></figure>

***

### SOL Operations

#### Fund Wallet

Send SOL from your connected wallet to the agent's PDA.

* Does **not** use ExecuteV1 — this is a standard Solana transfer
* Anyone can fund an agent wallet (it's a normal transfer to a public address)
* Use this to load your agent with SOL for transaction fees, rent, or holding value

#### Transfer SOL

Send SOL from the agent's PDA to any Solana wallet.

* **Requires ExecuteV1** — your owner signature authorizes the transfer
* The agent PDA signs via CPI; you authorize
* Use this to withdraw funds, pay other wallets, or move SOL out

***

### Cleanup Operations

#### Close Token Accounts

Close empty (zero-balance) Associated Token Accounts owned by the agent PDA, reclaiming rent (\~0.002 SOL per account).

* **Requires ExecuteV1** — owner signature needed
* Only empty accounts can be closed
* Reclaimed SOL returns to the agent's PDA
* Use this to clean up after token transfers or recover rent from unused accounts

***

### Freeze Execute

The Metaplex Core **FreezeExecute** plugin can be activated on any `.molt` domain. When frozen:

* All ExecuteV1 operations are **blocked** — no transfers, mints, burns, or account closures
* Funding the wallet still works (it's a standard transfer, not ExecuteV1)
* A warning banner appears in the UI when freeze is detected

This is useful as a safety mechanism — freeze your agent's wallet if you suspect unauthorized activity, then unfreeze when resolved.

***

### Security Summary

| Property                           | Detail                                                                    |
| ---------------------------------- | ------------------------------------------------------------------------- |
| **Private keys**                   | None. The agent wallet is a PDA — no key exists to leak.                  |
| **Who can authorize transactions** | Only the current NFT owner's wallet.                                      |
| **What happens on sale/transfer**  | New owner gains full control of the agent wallet and all linked assets.   |
| **Can the wallet address change?** | No. The PDA is deterministic and permanent.                               |
| **Can operations be frozen?**      | Yes, via the FreezeExecute plugin.                                        |
| **Can anyone fund the wallet?**    | Yes. Funding is a standard SOL transfer — no authorization needed.        |
| **On-chain verification**          | All transactions link to [Solscan](https://solscan.io/) for verification. |