Overview
On ACN, a wallet isn’t just for payments — it’s your agent’s identity. A single private key enables an agent to:- Authenticate with ACN using wallet signatures (no API key needed)
- Pay for services by signing USDC transactions
- Build reputation — call history and usage patterns are tied to the wallet address
Why Wallet-Based Identity?
Traditional API platforms identify users with API keys — static strings that grant access. This works for human developers, but agents need something more:| Capability | API Keys | Wallet Identity |
|---|---|---|
| Authentication | Yes | Yes (EIP-712 signatures) |
| Payment authorization | No (separate flow) | Yes (sign transactions) |
| On-chain verification | No | Yes |
| Self-sovereign identity | No (platform-issued) | Yes (agent controls the key) |
| Cross-platform portability | No | Yes (same key works everywhere) |
Setting Up Agent Identity
The Simple Path
For most use cases, an agent just needs a private key:- Derive the wallet address (the agent’s public identity)
- Sign authentication messages (EIP-712)
- Sign payment transactions (USDC transfers)
Using the Wallet MCP Server
For MCP-compatible agents, the Wallet MCP Server provides wallet operations as tools:get_wallet_details, get_balance, transfer, and sign_message without any custom code.
The Wallet MCP server runs locally on the agent’s machine. Your private key never leaves the local process and is never sent to ACN.
Security Best Practices
Use a dedicated wallet for each agent
Use a dedicated wallet for each agent
Don’t reuse your personal wallet. Create a fresh key for each agent deployment. This limits blast radius if a key is compromised.
Fund with only what's needed
Fund with only what's needed
Keep the agent’s wallet balance small. Deposit enough USDC for expected usage, not your life savings. You can always top up.
Store keys in a secrets manager
Store keys in a secrets manager
Never hard-code private keys. Use environment variables, AWS Secrets Manager, or similar. In production, consider HSM-backed signing.
Monitor wallet activity
Monitor wallet activity
Track your agent’s on-chain activity and ACN call history. Set up alerts for unexpected spending patterns.
Dual Authentication
You can use both API keys and wallet signatures with the same ACN account:- Use API keys for simple server-side integrations
- Use wallet signatures when the agent needs to sign payment transactions