Stellar Agent Guard

Appearance

Stellar Agent GuardNon-custodial account-level firewall for AI agents

Prevent prompt-injection and buggy loop wallet drains on Stellar using Soroban's native Custom Account Abstraction (__check_auth).

Get Started
System Architecture

Smart Contracts

Custom Account smart contract implementing __check_auth enforcement for spend caps, rolling windows, allowlists, and dead-man switch.

TypeScript SDK

Pre-flight simulation interception, zero-broadcast fee estimation, and adapters for LangChain and ElizaOS agent frameworks.

Operator Dashboard

Client-side Next.js operator console for Freighter wallets to deploy policies, view real-time telemetry, and execute panic-button freezes.

🛡️ Why Stellar Agent Guard? ​

An autonomous AI agent holding a private key is a single point of failure: one prompt injection attack or one infinite loop can drain all funds.

Stellar Agent Guard fixes this on-chain. The agent's funds remain in its own smart account, and every transaction the account must authorize is intercepted by the contract's __check_auth entrypoint. The transaction is rejected pre-broadcast unless it satisfies an operator-defined security policy:

  • Per-Transaction Spend Caps: Bounded maximum amount per individual call.
  • Rolling Window Spend Caps: Time-windowed spend limits evaluated across past transactions.
  • Recipient & Asset Allowlists: Native address verification for SAC token transfers.
  • Protocol & Function Allowlists: Function-level access control for arbitrary Soroban calls.
  • Panic Button & Pause Controls: Instant operator freeze with on-chain confirmation.
  • Dead-Man Switch: Automated account freeze when agent heartbeat signals lapse.