FluxA AI Wallet vs Privy Wallets (server wallets, agent wallets, policy engine)

FluxA AI Wallet 32

The CLI and MCP server source is Apache-2.0 per the LICENSE file and both package.json files, while the README's last section says MIT. The hosted wallet is closed, and no terms covering it were found. AgentMarket's terms describe only the marketplace (15 of 30). AgentMarket's privacy policy of 14 January 2026 names Stripe and model providers and gives no retention periods, and it does not mention wallet addresses, KYC profiles, card data or payouts, which the CLI collects or handles. The wallet's own privacy policy was unreachable (5 of 30). The README marks init and link-wallet as legacy but still supported, and the skill pins a minimum CLI version; no deprecation policy or dated notice was found (3 of 20). Stripe is the only provider named; no card issuer, KYC provider, custody provider or data location is named. The CLI and MCP code send no telemetry (3 of 20). Total 26.

Privy Wallets (server wallets, agent wallets, policy engine) 72

Closed service under developer terms; the Agent CLI is Apache-2.0 and the Shamir secret-sharing library is open source (18 of 30). The privacy policy, updated 20 May 2026, names Horkos, LLC d/b/a Privy with Stripe as parent, separates controller and service-provider roles, has a DPA with standard clauses and says Privy can never rebuild users' keys, which matches the architecture docs; it gives no retention periods (20 of 30). Weekly product updates, but no dated deprecation notices found (6 of 20). Subprocessors listed in a linked trust centre, and hosting stated as the United States (16 of 20).

FluxA AI Wallet 20

Graded with the hosted lines, because signing, mandates and approvals all run on FluxA's wallet API and the CLI and MCP server only wrap it, as kite-agent-passport and kane-cli were read. No status page was found in the repository, the skills or AgentMarket's pages. fluxapay.xyz and the wallet and docs hosts could not be read, so a status page there is unchecked and scored absent (0). With no readable history the record takes the default (5). No rate limit with numbers was found (0). The connection service treats 429 slow_down as wait and poll and marks errors retryable, the skill says a 503 means retry shortly, payouts require a caller-chosen payout_id that returns the existing payout on a repeat, --biz-id rejects a duplicate with 409, and card create and recharge resume with --request-id instead of paying again. No Retry-After or backoff schedule is documented for the wallet API (10 of 15). No SLA was found (0). No beta label was found on the wallet in what was read, but both packages are at 0.x, agent cards sit behind a waitlist and the wallet site was unread (5 of 10). Total 20.

Privy Wallets (server wallets, agent wallets, policy engine) 53

Status page at status.privy.io with components and an RSS history back to October 2025 (20). The 90 days from 3 August hold 13 incidents. Database problems caused outages across API endpoints for 71 minutes on 18 September, one major. The rest were partial or delays and read as minor, among them a portion of /api/v1/sessions calls failing for 78 minutes on 3 August, wallet actions and finality delayed for 1 hour 59 minutes on 18 September, an upstream outage that hit wallet transactions for 2 hours 11 minutes and delayed webhooks for 3 hours 40 minutes on 10 October, and elevated RPC failures, mostly in the EU, for 1 hour 12 minutes on 28 October (10 of 30). Rate limits are enforced per app with 429s, but no numbers are published (0). Idempotency keys on state-changing POSTs such as /rpc, /transfer and /wallets, honoured for 24 hours, and the error guide says when a retry is safe; no 429 or backoff guidance found, and the OpenAPI file documents no 429 response (10 of 15). The pricing page lists "premium SLAs" on Enterprise without publishing terms (5 of 10). The wallet API is generally available; the Agent CLI is 0.3.10 (8 of 10). 20+10+0+10+5+8 = 53.

FluxA AI Wallet 52

The agent holds an Agent ID, a token whose validity the owner picks from 1 hour to 1 year at browser approval, and a short-lived RS256 JWT refreshed from the token; token_revoked exists. Credentials sit in a 0600 JSON file or environment variables. The token is not scoped, since limits live in mandates, and legacy init tokens are described as not expiring. Agent VCs are audience-bound and rejected by FluxA's own endpoints. No secret travels in a URL (22 of 30). Every x402 payment needs a mandate the owner signs, with a limit, a validity and an optional host allowlist enforced by the wallet API, payouts need per-payout approval unless a mandate covers them, cards need a mandate and KYC, and linked-card mandates are scoped to one merchant. A payout mandate sets no payee allowlist that was documented, and the skill tells agents to request budgets for at least 100 calls by default (16 of 20). The wallet returns little third-party content itself, but the skill sends agents to third-party x402 APIs, ClawPI posts and a remote announcement.md with no guidance on treating them as untrusted, its description steers agents to paid APIs even when a free web search looks enough, and the daily check-in runs npx -y @fluxa-pay/fluxa-wallet@latest unpinned twice a day (4 of 15). mandates lists limit, spent and remaining, with recent-transactions, received-records and payout status by CLI, and the MCP server writes a local audit log; the wallet app's logs were not read (10 of 15). No SECURITY.md, disclosure policy, bug bounty or certification was found, and agentmarket.fluxapay.xyz has no security.txt; fluxapay.xyz's is unchecked (0 of 20). Total 52.

Privy Wallets (server wallets, agent wallets, policy engine) 85

The app secret on Basic auth can do anything in the app, but wallets owned by an authorisation key or a key quorum also need that key's signature on each request, delegated signers on user wallets can be revoked, and the Agent CLI uses a device flow with short-lived signing keys and sessions of up to 30 days with rotation (27 of 30). Policies deny by default, DENY beats ALLOW, and rules cover recipients, values, contracts, decoded calldata, typed data and time windows, enforced inside AWS Nitro Enclaves before signing; key quorums add m-of-n approval. React's x402 fetch wrapper takes a maxValue cap, and the Node x402 client gained spend controls with a $1 default cap per payment in 0.37.0 (26 October 2026); the MPP guide shows no cap. Rolling caps are EVM only and update after signing, per the 30 September check (19 of 20). We found no prompt-injection guidance for agents reading wallet or token data (8 of 15). Activity logs and webhooks (13 of 15). SOC 2 Type I and Type II, audits by Cure53, Zellic and Doyensec, a HackerOne bug bounty and a disclosure page at privy.io/vulnerability-disclosure; no security.txt (18 of 20).

FluxA AI Wallet 61

No OpenAPI file or reference for the wallet API was found; the README shows sample requests for five endpoints. The MCP server's 15 tools in the 0.6.0 source carry typed Zod input schemas, and the CLI's flags are documented in prose in the skill files and --help. The MCP server is the secondary surface and its npm release is 0.2.0, so 12 of 25. The skill and its 18 Markdown guides are written for agents, and AgentMarket's llms.txt describes the wallet's payment role (10). connect_wallet, init_agent_id and create_intent_mandate say when to use them and when not to, and the skill has a when-to-use table per capability, while the payment-link and status tools have one-line descriptions (12 of 20). Zod enums for validity, runtime, hosting and currency, a regex on payout amounts and strict objects, but the x402 requirement fields are plain strings and outputSchema is a free-form record (10 of 15). The README has an example for every MCP tool, the skills give CLI examples and output, and error codes are tabled for mandates, payouts, cards and connections (12 of 15). Semver on npm with 25 CLI versions and a version line in the skill, two git tags and no changelog (5 of 15). Total 61.

Privy Wallets (server wallets, agent wallets, policy engine) 83

A public OpenAPI 3.1 document at api.privy.io/v1/openapi.json, 178 paths and 231 operations on 1 November, though its info.version is 0.0.1 (25). llms.txt with 400+ links and Markdown twins (10). The docs explain what each wallet action and policy field is for; we didn't read every reference page (14 of 20). Policy conditions are typed by field source and operator, with a chain_type on every policy (13 of 15). Ten named API error codes, each with troubleshooting steps, and examples in the docs, but no table of HTTP statuses (11 of 15). /v1 paths and weekly product updates, but the OpenAPI version has never moved off 0.0.1 (10 of 15).

FluxA AI Wallet 60

The MCP server has 15 tools with about 4,700 characters of descriptions, the 11 to 30 band (15). The CLI path loads SKILL.md (26.5 KB) and one of 18 guides per task, about 112 KB in all, with no read-only subset (no add-back, 15 of 25). card transactions takes page, limit, type and a time range, refunds take limit and offset, received-records and recent-transactions take a limit up to 100, and market search can be scoped to models or vendors; no cursor (12 of 20). Errors carry a code, retryable, reconnect_required and a next_command or next_tool, and card errors map to recovery hints, but the CLI exits only 0 or 1 and the MCP payment tools return the wallet API's raw error body without isError (14 of 20). A required payout_id idempotency key, --biz-id dedup and --request-id continuation on card operations, and the skill says not to initiate again to retry a payment. No readOnlyHint or destructiveHint on any MCP tool (12 of 20). Base USDC is the default network and asset, mandates default to 8 hours and the CLI installs in one command, but there is no SDK library and both packages are TypeScript (7 of 15). Total 60.

Privy Wallets (server wallets, agent wallets, policy engine) 81

No product MCP server (the docs MCP at docs.privy.io/mcp only searches documentation), so an agent works through the API, SDKs or the Agent CLI, and response sizing is ordinary REST (15 of 25). The OpenAPI file gives cursor and limit on the main lists (/v1/wallets, /v1/users, /v1/policies), filters such as chain_type, address, user_id and include_archived on wallets, and include flags elsewhere, but list routes such as /v1/transactions and /v1/actions take no paging parameters (18 of 20). Errors such as policy_violation, insufficient_funds and transaction_broadcast_failure come with recovery steps, and the guide says a failed broadcast is safe to retry (16 of 20). Idempotency keys on every state-changing wallet route, 24-hour window, 400 on a changed body (20). SDKs for Node (0.37.0), Python, Go, Rust, Ruby, Java, React and Flutter plus the Agent CLI, but requests on key-owned wallets also need an authorisation signature (12 of 15). 15+18+16+20+12 = 81.

FluxA AI Wallet 66

@fluxa-pay/fluxa-wallet 0.6.0 was published on 6 November 2026, one day before this check (30). Eight CLI releases since 10 August 2026, among them 0.5.2 on 14 October, 0.5.3 on 25 October and 0.5.6, 0.5.7 and 0.6.0 between 3 and 6 November (20). The repository merged 43 pull requests, all from the organisation's own branches, and commits run weekly. Issues and outside pull requests could not be read because the GitHub API refused the session. Discord and a support address are linked from AgentMarket and were not tested (8 of 25). Graded as an API, the line asks for current official SDKs. The CLI is current, but there is no SDK library and the MCP package on npm has not been published since 2 March 2026 (5 of 15). 68 node:test cases exist with no CI workflow, neither npm package declares its repository, and the MCP package's last release lags the source by eight months (3 of 10). Total 66.

Privy Wallets (server wallets, agent wallets, policy engine) 80

@privy-io/node 0.37.0 on 26 October 2026, and a weekly product update on 16 October (30). Node SDK 0.29.0 to 0.37.0, nine releases between 17 August and 26 October, and weekly product updates on 7 and 14 August, 18 and 25 September and 2, 9 and 16 October (20). Weekly product updates and monthly rollups through September 2026; we didn't test a support channel (10 of 15). Current official SDKs in Node, Python, Go, Rust, Ruby and Java, plus React and Flutter (15). The Agent CLI is pre-1.0 (0.3.10). The Node SDK's CI workflows are in its public repository, but we couldn't see run results (5 of 10). 30+20+10+15+5 = 80. The 1 October note put 0.35.0 on 28 September; the changelog and tag date it 21 September.