From Glossokomon (γλωσσόκομον) — the ancient Greek word for a keeper of precious things.
Agentic wallet infrastructure for Solana. Glosso gives any AI agent an autonomous, production-grade Solana wallet it fully controls — no human approval loop, no key exposure, no framework lock-in.
See illustration here · View demo
npm install -g glosso
glosso provision --mode sovereign # create a wallet
glosso status # check itThat's it. You have an encrypted Solana wallet, a GLOSSO.md capability manifest in your working directory, and a devnet airdrop.
For SDK usage in your own code:
npm install glossoimport { GlossoWallet } from 'glosso';
const wallet = new GlossoWallet();
const balance = await wallet.getBalance();
await wallet.send(recipient, 0.1 * 1e9);Glosso's lifecycle is two phases. Operators run phase one once. Agents run phase two forever.
Phase 1 — Provision (operator, one time)
glosso provision --mode sovereignGenerates a wallet, encrypts keys, writes config to ~/.glosso/.env, and drops a GLOSSO.md capability manifest into the working directory. The raw private key is never printed.
Phase 2 — Runtime (agent, autonomous)
The agent reads GLOSSO.md, discovers its tools, and operates — sign, send, trade — without human input. Changing the signing backend (sovereign → privy → turnkey) requires only a config change, never a code change.
Three signing backends. Pick at provision time, switch any time. Agent code never changes.
| Mode | Key Storage | Best For |
|---|---|---|
| Sovereign | Encrypted locally (AES-256-GCM) | Dev, trusted servers, zero external deps |
| Privy | Privy TEE (Trusted Execution Environment) | Production cloud, enterprise key management |
| Turnkey | HSM via Turnkey API | Scale, compliance, policy controls |
glosso switch --mode privy
# Active wallet: EzwNi5jN2xTjaZRqAigXzKp4KyzcN8bXkwA1PHfckGo5See SECURITY.md for the full threat model — key derivation, AES-256-GCM, PBKDF2, and adapter comparison.
The policy engine sits between every agent action and the signing adapter. When a limit is hit, signing is refused and the agent receives a structured PolicyViolationError it can reason about.
const scoped = wallet.withPolicy({
maxSolPerTx: 0.5,
maxSolPerDay: 3.0,
maxTxPerHour: 5,
allowedPrograms: [
'dRiftyHA39MWEi3m9aunc5MzRF1JYuBsbn6VPcn33UH', // Drift
'JUP6LkbZbjS1jKKwapdHNy74zcZ3tLUZoi5QNyVTaV4', // Jupiter
],
activeHours: { from: 8, to: 20 },
paused: false,
});
await scoped.send(recipient, lamports); // enforcedManage policies from the CLI — changes take effect on the next agent action, no restart needed:
glosso policy set MAX_SOL_PER_TX 0.5
glosso policy set MAX_TX_PER_HOUR 10
glosso policy allow-program Jupiter
glosso policy pause # kill switch
glosso policy resume
glosso policy status # view all active limitsFull details: POLICY.md
Glosso's capabilities are modular. Each skill ships a SKILL.md manifest the agent reads at startup to discover its available tools.
| Skill | What it does |
|---|---|
| glosso-wallet | SOL balance, send transfers, transaction history |
| glosso-pyth | Real-time price feeds — SOL, BTC, ETH, USDC, JUP, BONK and more |
| glosso-jupiter | Token swap quotes and execution via Jupiter aggregator |
When a wallet is provisioned, GLOSSO.md is written to the working directory listing every installed skill and its functions. The agent reads this once at startup — no hardcoded capability lists required.
glosso provision --mode sovereign|privy|turnkey [--network devnet|mainnet-beta]
glosso status
glosso switch --mode <mode>
glosso logs # all events
glosso logs --tail 50 # last 50
glosso logs --follow # live tail
glosso logs --sessions # list sessions
glosso logs --session <id> # filter to one session
glosso monitor # full TUI dashboard
glosso policy status # view active policy
glosso policy set <KEY> <VALUE> # set a limit
glosso policy allow-program <name> # add to allowlist
glosso policy deny-program <name> # remove from allowlist
glosso policy pause # emergency kill switch
glosso policy resume # resume operations
glosso policy reset-counters # reset daily/hourly countersEvery tool call, transaction, thinking step, and error is written to ~/.glosso/activity.log as append-only JSON Lines.
glosso logs — color-coded terminal output:
16:37:44 [demo-sv01] START sovereign • 9w56ob…5sPT • devnet
16:37:44 [demo-sv01] ROUND 1/5
16:37:44 [demo-sv01] 🔧 get_sol_price({})
16:37:44 [demo-sv01] ✅ SOL = $142.87
16:37:44 [demo-sv01] 🔧 open_perp_position({"direction":"long","sizeSol":0.3})
16:37:44 [demo-sv01] ✅ long 0.3 SOL 2hTnBm…z0aB ↗ explorer
16:37:44 [demo-sv01] ✅ closed market #0 7pFnLm…aC3d ↗ explorer
glosso monitor — full-terminal Ink/React TUI with live file-watching, price sparkline, TX stats, and activity feed.
A fully autonomous Drift trading agent that reads GLOSSO.md, discovers its tools, and executes a complete trading cycle without prompting.
What it does:
- Fetches live SOL price from Pyth
- Deposits collateral into Drift
- Opens a SOL-PERP position based on signal
- Monitors PnL
- Closes the position
- Logs every step to
~/.glosso/activity.log
# Install and provision
npm install -g glosso
glosso provision --mode sovereign
# Clone the demo agent source
git clone https://github.com/ubadineke/glosso
cd glosso/demo && cp .env.example .env # add your XAI_API_KEY
npm install && npx tsx src/agent.ts
# In another terminal — watch it live
glosso monitorThe fastest path for OpenClaw users:
git clone https://github.com/ubadineke/glosso.git && cd glosso && bash install.shThis installs glosso-wallet, glosso-pyth, and glosso-jupiter into ~/.openclaw/skills/. Then in the agent chat:
"I need a Solana wallet."
The agent reads SKILL.md, asks which mode, runs provision, and reports your wallet address.
Section-based .env at ~/.glosso/.env — only the active mode's block is read at runtime.
GLOSSO_MODE=sovereign # sovereign | privy | turnkey
GLOSSO_NETWORK=devnet # devnet | mainnet-beta
# ── Sovereign ────────────────────────────────────────────
GLOSSO_MASTER_SEED_ENCRYPTED=<base64>
GLOSSO_ENCRYPTION_PASSPHRASE=<passphrase>
SOVEREIGN_WALLET_ADDRESS=<public key>
# ── Privy ────────────────────────────────────────────────
PRIVY_APP_ID=<app id>
PRIVY_APP_SECRET=<secret>
PRIVY_WALLET_ID=<wallet id>
PRIVY_WALLET_ADDRESS=<address>
# ── Turnkey ───────────────────────────────────────────────
TURNKEY_API_PUBLIC_KEY=<key>
TURNKEY_API_PRIVATE_KEY=<key>
TURNKEY_ORGANIZATION_ID=<org id>
TURNKEY_WALLET_ADDRESS=<address>
# ── Agent / LLM ───────────────────────────────────────────
XAI_API_KEY=<key> # or OPENAI_API_KEY, ANTHROPIC_API_KEYTip: Store
GLOSSO_ENCRYPTION_PASSPHRASEin a secrets manager (Doppler, AWS Secrets Manager, Vault) and inject at runtime.
Sovereign mode encrypts the master seed with AES-256-GCM + PBKDF2 (100K iterations). The private key exists only in function scope during signing — it is never returned, logged, or persisted in memory.
| Threat | Protection |
|---|---|
.env read without passphrase |
AES-256-GCM — ciphertext is useless without the key |
| Ciphertext tampering | GCM authentication tag — modified blobs fail to decrypt |
| Passphrase brute-force | PBKDF2 with 100,000 iterations |
| Key appearing in logs | Private key is never returned — only signatures leave scope |
| Sub-wallet isolation | Hardened SLIP-0010 derivation paths |
For high-value deployments, use Privy (TEE-based) or Turnkey (HSM-based) — signing happens in hardware-isolated environments outside your application process.
Full threat model and implementation details: SECURITY.md
glosso/
├── packages/
│ ├── core/ @glosso/core — wallet adapters, signing, crypto, policy engine, logger
│ ├── cli/ @glosso/cli — provision, status, switch, logs, monitor, policy commands
│ ├── sdk/ @glosso/sdk — public SDK re-exporting core for consumers
│ ├── glosso/ glosso — umbrella package (SDK + CLI in one install)
│ ├── monitor/ @glosso/monitor — Ink/React TUI dashboard
│ └── skills/
│ ├── glosso-wallet/ — SOL balance, transfers, history
│ ├── glosso-pyth/ — Pyth price feeds
│ └── glosso-jupiter/ — Jupiter swap quotes and execution
├── demo/ Reference agent — autonomous Drift trading
├── docs/ Mintlify documentation site
└── install.sh One-line OpenClaw skill installer
See ROADMAP.md for the full plan.
Shipped: Sovereign/Privy/Turnkey adapters · unified GlossoWallet interface · CLI provisioning · glosso switch · activity logger · glosso logs with --follow and session filtering · glosso monitor TUI · policy engine (spend limits, rate limits, program allowlists, time windows, pause/resume) · Jupiter skill · Pyth skill · npm package (npm install -g glosso) · Mintlify docs
Next up:
- Web dashboard — browser-based equivalent of the TUI
- Multi-agent view — aggregate sessions in one monitor pane
- Additional skills — MarginFi (lending), Orca (LP), Tensor (NFTs)
- Agent memory — persist trade history for cross-session decisions
Full docs are available at ubadineke.mintlify.app.
Covers Quick Start, all three wallet modes, the Policy Engine, CLI reference, skills authoring guide, and SDK API.
- In-depth write-up — the full article on the architecture, security decisions, and how it was built
- Video demos & walkthroughs — detailed video content covering the CLI, monitor, and demo agent in action
MIT
