BarzKit

Self-custody wallet infrastructure for AI agents.

---

Deploy an autonomous, audited smart account for your AI agent in 5 minutes. Powered by Trust Wallet's Barz (ERC-4337), with passkeys, gasless transactions, and programmable permissions via Diamond Proxy (EIP-2535).

Why BarzKit?

AI agents need wallets. Existing solutions are either custodial (Coinbase Agentic Wallets) or too low-level (Safe, raw ERC-4337). BarzKit fills the gap:

	Coinbase	Safe	BarzKit
Self-custody	❌ Custodial	✅	✅
Agent-specific DX	✅	❌	✅
Passkeys	❌	❌	✅
Gasless	Base only	❌	✅ Any chain
Time to deploy	2 min	Hours	5 min
Audits	Coinbase	Multiple	Certik + Halborn

Quickstart

npm install @barzkit/sdk

import { createBarzAgent } from '@barzkit/sdk'
import { parseEther } from 'viem'

const agent = await createBarzAgent({
  chain: 'sepolia',
  owner: '0xYOUR_PRIVATE_KEY',
  pimlico: { apiKey: 'pim_YOUR_KEY' },
  permissions: {
    maxDailySpend: '100 USDC',
    allowedContracts: ['0xUniswapRouter...'],
  },
})

console.log('Address:', agent.address)

// Gasless transaction
const tx = await agent.sendTransaction({
  to: '0xRecipient...',
  value: parseEther('0.01'),
})

// Emergency: freeze the agent
await agent.freeze()

Features

Self-Custody — Keys never leave your infrastructure. Built on Trust Wallet's Barz, audited by Certik and Halborn.

Gasless Transactions — Agents don't need ETH for gas. Paymaster covers fees. Enabled by default.

Programmable Permissions — Spending limits, contract whitelists, time windows. Powered by Diamond Proxy facets.

Passkey Owner Control — Human owner controls via FaceID/TouchID. Agent operates with a separate program key. Agent cannot change its own permissions.

Kill Switch — Freeze the agent wallet instantly via Guardian Facet.

DeFi Actions — Swap tokens (Uniswap V3) and lend (Aave V3) with atomic approve+execute batches.

Event System — React to on-chain activity: incoming transfers, balance changes, freeze/unfreeze. Webhook forwarding with retry. Lazy polling — zero overhead until first subscription.

x402 Payments — Machine-to-machine HTTP payments. Auto-pay 402 responses, retry with proof. fetchWithPayment().

Multi-Chain — Sepolia, Base Sepolia, Base mainnet. Add a new chain in 5 lines.

24/7 Security Monitoring — Trust Wallet monitors every Barz account deployed via SDK. Free.

Plugins

Use BarzKit with your AI framework of choice:

Plugin	Install	Description
@barzkit/elizaos	npm i @barzkit/elizaos	ElizaOS plugin — 8 actions, wallet provider, service
@barzkit/langchain	npm i @barzkit/langchain	LangChain tools — 8 StructuredTools with zod schemas
@barzkit/mcp	npx @barzkit/mcp	MCP server — 9 tools for Claude Desktop, Cursor, Windsurf

API

// Create
const agent = await createBarzAgent(config)

// Transactions
await agent.sendTransaction({ to, value, data })
await agent.batchTransactions([tx1, tx2, tx3])
await agent.getBalance()          // ETH
await agent.getBalance(usdcAddr)  // ERC-20
await agent.waitForTransaction(hash)

// Transaction history
const txs = await agent.getTransactions({ limit: 10 })

// Dry run — simulate without sending
const sim = await agent.dryRun({ to, value })
console.log(sim.success, sim.gasCostETH, sim.permissionCheck)

// Session keys — temporary scoped access
const session = agent.createSession({
  expiresIn: '24h',
  permissions: { maxDailySpend: '100 USDC' },
})
agent.getSessions()              // list all
agent.revokeSession(session.id)  // revoke one

// Permissions
agent.getPermissions()
agent.updatePermissions({ maxDailySpend: '200 USDC' })

// Safety
await agent.freeze()
await agent.unfreeze()
await agent.isActive()

// Events — react to on-chain activity
agent.on('balanceChange', (change) => {
  console.log(`Balance: ${change.previous} → ${change.current}`)
})
agent.on('incoming', (tx) => {
  console.log(`Received ${tx.value} from ${tx.from}`)
})
agent.on('frozen', () => console.log('Wallet frozen'))

// Webhooks — forward events to a URL
agent.onWebhook('incoming', 'https://api.example.com/webhook')

// Stop all listeners
agent.removeAllListeners()

Configuration

interface AgentConfig {
  chain: 'sepolia' | 'base-sepolia' | 'base'
  owner: `0x${string}`
  pimlico: { apiKey: string }

  // Optional
  permissions?: {
    maxAmountPerTx?: string       // '100 USDC'
    maxDailySpend?: string        // '500 USDC'
    allowedTokens?: Address[]
    allowedContracts?: Address[]
    timeWindow?: { start: string; end: string }
  }
  gasless?: boolean      // default: true
  index?: bigint         // multiple wallets per owner
  pollInterval?: number  // event polling ms, default: 15000
}

Architecture

Your AI Agent
      │
  @barzkit/sdk
      │
  permissionless.js (Pimlico)
      │
      ├── Bundler → UserOperation batching
      └── Paymaster → gasless transactions
            │
  Barz Smart Account (on-chain)
      ├── Diamond Proxy (EIP-2535) — modular facets
      ├── Passkeys (Secp256r1) — owner biometric control
      ├── Restrictions — spending limits, whitelists
      ├── Guardian — kill switch
      └── Trust Wallet 24/7 monitoring

Prerequisites

• Node.js >= 18
• Pimlico API key (free tier: 100 UserOps/day)
• Test ETH on Sepolia: sepoliafaucet.com

Examples

See examples for complete working examples.

Security

• Smart contracts audited by Certik and Halborn
• Dual key model: Owner (passkey) + Agent (program key)
• Agent cannot escalate its own permissions
• Trust Wallet ISO-certified security monitoring
• Open source: trustwallet/barz (Apache-2.0)

Roadmap

• Core SDK: createWallet, sendTransaction, permissions, freeze
• Batch transactions: atomic multi-call in one UserOperation
• Multi-chain: Base Sepolia, Base mainnet
• DeFi actions: swap, lend (Uniswap, Aave)
• x402 payment handler
• ElizaOS plugin
• LangChain tool
• MCP Server (Claude Desktop, Cursor, Windsurf)
• Event system: on-chain listeners, webhooks, lazy polling
• On-chain permission enforcement via Diamond Facets

Contributing

Contributions welcome. See CONTRIBUTING.md.

License

MIT

---

Documentation · Examples · Plugins · Trust Wallet Barz · Pimlico Docs