{ "data": { "a": { "slug": "privy", "name": "Privy Wallets (server wallets, agent wallets, policy engine)", "vendor": "Privy (Stripe)", "vendorUrl": "https://www.privy.io", "kind": "http-api", "category": "agent-wallets", "summary": "Wallet infrastructure owned by Stripe since June 2025.", "url": "https://www.anchorterminal.com/tools/privy", "markdownUrl": "https://www.anchorterminal.com/tools/privy.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/privy.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/privy.json", "transports": [ "http" ], "remoteUrl": "https://api.privy.io/v1", "packages": [ { "registry": "npm", "name": "@privy-io/node" }, { "registry": "npm", "name": "@privy-io/agent-wallet-cli" }, { "registry": "pypi", "name": "privy-client" } ], "auth": "mixed", "authNotes": "REST API uses Basic auth with app ID and app secret plus a privy-app-id header. Wallets owned by an authorisation key (or a key quorum) also need a signature from that key on each request. The Agent CLI uses a device authorisation flow approved in a browser, then short-lived signing keys; sessions last up to 30 days.", "pricing": "freemium", "pricingNotes": "Developer plan free up to 499 monthly active users, with 50,000 signatures and $1M transaction volume a month included. Core $299 a month (500 to 2,499 MAU) and Scale $499 a month (2,500 to 9,999 MAU). Past 10,000 MAU or 50,000 signatures, a $2,000 base plus $0.05 per MAU and $0.01 per signature. Enterprise is custom, from $0.001 per signature, with premium SLAs (https://www.privy.io/pricing).", "priceSummary": "$299 / mo", "where": "hosted", "x402": { "level": "partial", "evidence": "Privy ships x402 and MPP payer clients (createX402Client in Node, useX402Fetch in React) that sign 402 payment authorisations with a Privy wallet and retry, with a per-request maxValue cap; x402 works with gas-sponsored wallets. Privy's own API isn't paid via x402 (https://docs.privy.io/wallets/overview/solutions/agent-wallets; https://docs.privy.io/changelogs/product-updates).", "endpoints": [] }, "toolCount": null, "popularity": { "githubStars": null, "npmWeekly": 296371, "pypiWeekly": 12798, "asOf": "2026-09-30" }, "docsUrl": "https://docs.privy.io/wallets/overview/solutions/agent-wallets", "llmsTxt": "https://docs.privy.io/llms.txt", "openapi": "https://api.privy.io/v1/openapi.json", "capabilities": [ "wallet.onchain", "wallet.custody", "wallet.spend-limits", "payments.x402" ], "tags": [ "hosted", "freemium", "free-tier", "llms-txt", "openapi", "typescript", "python", "wallet", "stablecoin", "x402", "closed-source", "webhooks" ], "lastRelease": "2026-09-28", "graded": true, "anchor": { "graded": true, "score": 69.9, "grade": "B", "agentReady": false, "rank": 179, "ranked": true, "rankOf": 1133, "categoryRank": 5, "methodology": "0.4", "run": "2026-10-01", "scores": { "ergonomics": 73, "maintenance": 80, "payments": 55, "reliability": 48, "schema": 83, "security": 85, "transparency": 71 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-10-01" }, "negative": 0, "verdict": "Default-deny policies with DENY precedence on recipients, values, contracts, calldata, typed data and time windows, enforced in AWS Nitro Enclaves. Database problems took API endpoints down for 71 minutes on 18 September 2026, one of 13 incidents since July.", "bestFor": "Builders who need fine-grained, enclave-enforced spending rules on programmatic wallets, or who want an agent to sign for a person's wallet with a revocable scoped signer.", "strengths": [ "Default-deny policies with DENY precedence on recipients, values, contracts, calldata, typed data and time windows, enforced in AWS Nitro Enclaves", "Agent-owned wallets or revocable scoped signers on a person's wallet, plus key quorums for m-of-n approval", "Idempotency keys on every state-changing wallet route, honoured for 24 hours", "SOC 2 Type I and II, audits by Cure53, Zellic and Doyensec, and a HackerOne bug bounty", "x402 and MPP payer clients with a per-request `maxValue` cap" ], "weaknesses": [ "Database problems took API endpoints down for 71 minutes on 18 September 2026, one of 13 incidents since July", "Rate limits aren't published as numbers", "Rolling caps are EVM only and update after signing, so parallel requests can exceed them", "The app secret can do anything in the app; the limits come from authorisation keys and policies", "No MCP server, and the Agent CLI needs a person to approve its login in a browser" ], "agentNotes": [ "Add a rule for every RPC method the agent needs; a wallet with a policy denies anything unlisted", "Pair a rolling cap with a lower per-transaction cap, since aggregations update only after signing", "Send an idempotency key on `/rpc`, `/transfer` and `/wallets` calls; reusing one with a changed body returns 400", "Set `maxValue` on the x402 or MPP client for every request", "Retry a `transaction_broadcast_failure`; don't retry a `policy_violation`" ], "metrics": { "kind": "remote", "measured": false }, "reviewCount": 2, "avgRating": 3.5, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "B", "methodology": "0.4", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 69.9 } ], "editorialScores": { "ergonomics": 73, "maintenance": 80, "payments": 55, "reliability": 48, "schema": 83, "security": 85, "transparency": 60 }, "provenanceScore": 82 }, "connect": { "install": "npm install -g @privy-io/agent-wallet-cli", "http": "curl https://api.privy.io/v1/wallets --user \"$PRIVY_APP_ID:$PRIVY_APP_SECRET\" -H \"privy-app-id: $PRIVY_APP_ID\"" }, "letme": { "capability": "https://letme.dev/wallet.onchain", "tool": "https://letme.dev/privy" }, "area": "payments", "unitPrices": [ { "item": "Core plan", "unit": "month", "usd": 299, "note": "500 to 2,499 MAU" }, { "item": "Scale plan", "unit": "month", "usd": 499, "note": "2,500 to 9,999 MAU" }, { "item": "Signature overage", "unit": "call", "usd": 0.01, "note": "per signature above 50,000 a month" } ], "provenance": { "legalEntity": "Horkos, LLC", "domain": "privy.io", "domainRegistered": "2018-10-07", "domainNote": "Privy trades as Horkos, LLC d/b/a Privy, a Stripe subsidiary since June 2025.", "endpointOnVendorDomain": true, "terms": "https://www.privy.io/developer-terms-of-service", "privacy": "https://www.privy.io/privacy-policy", "statusPage": "https://status.privy.io", "changelog": "https://docs.privy.io/changelogs/product-updates", "securityTxt": "none", "checked": "2026-09-30", "score": 82 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/privy.json", "live": { "slug": "privy", "probe": { "target": "https://api.privy.io/v1", "method": "get", "lastAt": "2026-10-18T00:31:04.042650345Z", "lastOk": true, "lastStatus": 404, "lastMs": 31, "authRequired": false, "uptime24h": 100, "uptime30d": 100, "p50ms24h": 35, "p95ms24h": 59, "samples24h": 253, "samples30d": 4438, "days": [ { "date": "2026-09-30", "probes": 35, "ok": 35 }, { "date": "2026-10-01", "probes": 276, "ok": 276 }, { "date": "2026-10-02", "probes": 248, "ok": 248 }, { "date": "2026-10-03", "probes": 271, "ok": 271 }, { "date": "2026-10-04", "probes": 272, "ok": 272 }, { "date": "2026-10-05", "probes": 272, "ok": 272 }, { "date": "2026-10-06", "probes": 272, "ok": 272 }, { "date": "2026-10-07", "probes": 272, "ok": 272 }, { "date": "2026-10-08", "probes": 268, "ok": 268 }, { "date": "2026-10-09", "probes": 250, "ok": 250 }, { "date": "2026-10-10", "probes": 247, "ok": 247 }, { "date": "2026-10-11", "probes": 247, "ok": 247 }, { "date": "2026-10-12", "probes": 247, "ok": 247 }, { "date": "2026-10-13", "probes": 248, "ok": 248 }, { "date": "2026-10-14", "probes": 249, "ok": 249 }, { "date": "2026-10-15", "probes": 253, "ok": 253 }, { "date": "2026-10-16", "probes": 252, "ok": 252 }, { "date": "2026-10-17", "probes": 253, "ok": 253 }, { "date": "2026-10-18", "probes": 6, "ok": 6 } ] }, "vendorStatus": { "page": "https://status.privy.io", "indicator": "unknown", "summary": "no machine-readable status found", "checkedAt": "2026-10-17T22:51:45.733923565Z" }, "versions": [ { "registry": "npm", "name": "@privy-io/agent-wallet-cli", "version": "0.3.9", "seenAt": "2026-10-17T02:12:08.313302148Z" }, { "registry": "npm", "name": "@privy-io/node", "version": "0.36.0", "seenAt": "2026-10-17T02:12:07.385569677Z" }, { "registry": "pypi", "name": "privy-client", "version": "0.7.0", "released": "2026-09-08", "seenAt": "2026-10-17T02:12:09.597794651Z" } ], "npmWeekly": 219355, "pypiWeekly": 15360, "securityTxt": { "url": "https://privy.io/.well-known/security.txt", "state": "none", "checkedAt": "2026-10-17T15:52:54.341508351Z" }, "llmsTxt": { "url": "https://docs.privy.io/llms.txt", "ok": true, "status": 200, "checkedAt": "2026-10-17T14:23:01.687374943Z" }, "domain": { "domain": "privy.io", "checkedAt": "2026-10-11T13:24:04.117954455Z" }, "pages": [ { "url": "https://docs.privy.io/changelogs/product-updates", "kind": "changelog", "status": 200, "checkedAt": "2026-10-17T23:01:45.187605401Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "b7efc61130a2" }, { "url": "https://www.privy.io/pricing", "kind": "pricing", "status": 200, "checkedAt": "2026-10-17T23:19:22.826118016Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "3fafdab3dba6" }, { "url": "https://www.privy.io/privacy-policy", "kind": "privacy", "status": 200, "checkedAt": "2026-10-17T23:19:24.838810549Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "3dc0c2d903e9" }, { "url": "https://www.privy.io/developer-terms-of-service", "kind": "terms", "status": 200, "checkedAt": "2026-10-17T23:19:20.701937044Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "b057defa15d5" } ], "updatedAt": "2026-10-18T00:31:04.042650345Z" } }, "answer": "Privy Wallets (server wallets, agent wallets, policy engine) scores 69.9 (B) on agent readiness against Agent Vault by Self's 52.4 (D), and leads in every scored category.", "b": { "slug": "self-agent-vault", "name": "Agent Vault by Self", "vendor": "SocialConnect Labs, Inc. (Self Labs)", "vendorUrl": "https://agentvault.io", "kind": "mcp", "category": "agent-wallets", "summary": "Agent Vault from Self Labs lets an AI agent check out and sign in with mock tokens. Its proxied browser types the real card number or password at the fill. Agents connect by MCP, a Playwright SDK or HTTP.", "url": "https://www.anchorterminal.com/tools/self-agent-vault", "markdownUrl": "https://www.anchorterminal.com/tools/self-agent-vault.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/self-agent-vault.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/self-agent-vault.json", "license": "Proprietary hosted service. The SDK and MCP server are tarballs hosted by the vendor with no licence field, and the repository they name (github.com/selfxyz/agent-vault) is not public. The checkout recipe registry, selfxyz/agent-checkout-skill, is MIT", "transports": [ "http", "stdio" ], "remoteUrl": "https://mcp.agentvault.io/mcp", "packages": [], "auth": "mixed", "authNotes": "The hosted MCP server at https://mcp.agentvault.io/mcp uses OAuth. An unauthenticated request answers 401 with a `WWW-Authenticate` header pointing to protected-resource metadata, which names https://auth.agentvault.io. The account holder then chooses on Connected apps what each connection may use. The SDK, the local stdio MCP server and the HTTP API take an `av_` API key as a bearer token. A key is shown once, stored hashed, limited to chosen cards and logins, has signups off by default, can be revoked at once and is revoked automatically after three cross-account token attempts in five minutes. Recipe reads need no key.", "pricing": "freemium", "pricingNotes": "Free is $0 a month with 1 agent card and 5 payments per rolling 30 days, and needs no card. Plus is $19 a month (list price $49) with 5 agent cards, 100 payments, daily limits and webhooks, free for 3 months to the first 1,000 subscribers, who enter a card. Enterprise is priced on request (https://docs.agentvault.io/dashboard/billing.md, checked 2026-10-17).", "priceSummary": "$19 / mo", "where": "both", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the docs index, the 66 Markdown docs pages, the home page or the launch post. Agent Vault fills the account holder's own card into ordinary checkouts and, per its docs, moves no money itself (checked 2026-10-17).", "endpoints": [] }, "toolCount": 30, "popularity": { "githubStars": null, "npmWeekly": null, "pypiWeekly": null, "asOf": "2026-10-17" }, "docsUrl": "https://docs.agentvault.io", "llmsTxt": "https://docs.agentvault.io/llms.txt", "capabilities": [ "wallet.spend-limits", "payments.card-token", "payments.card", "secrets.store", "browser.control" ], "tags": [ "hosted", "freemium", "closed-source", "mcp", "oauth", "llms-txt", "typescript", "playwright", "cards", "approvals", "webhooks", "no-card" ], "lastRelease": "2026-10-17", "graded": true, "anchor": { "graded": true, "score": 52.4, "grade": "D", "agentReady": false, "rank": 823, "ranked": true, "rankOf": 1133, "categoryRank": 7, "methodology": "0.4", "run": "2026-10-01", "scores": { "ergonomics": 66, "maintenance": 48, "payments": 30, "reliability": 40, "schema": 76, "security": 76, "transparency": 47 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-10-17" }, "negative": -4, "negativeNotes": [ "-4, misleading claims about where card numbers are exposed, checked first-hand on 17 October 2026. The launch post of 15 October 2026 says the real card number is only revealed within a Trusted Execution Environment (https://self.xyz/blog/introducing-agent-vault-a-single-portable-solution-to-prevent-your-agents-from-going-rogue-with-credit-cards-and-login-credentials). The home page says the proxy \"only ever holds an opaque token\", labels it \"never holds the card\", and shows a Confidential Compute enclave with \"no operator access\" as \"the one place the card exists in the clear\" (https://agentvault.io/). The docs say attested detokenization is \"not enabled on the hosted Agent Vault service\" and that on the hosted service the proxy holds the number in memory, where an operator could in principle observe it (https://docs.agentvault.io/security/attested-detokenization.md, https://docs.agentvault.io/security/model.md). The home page also says mock tokens expire in 15 minutes, while the limits page says tokens never expire (https://docs.agentvault.io/reference/limits.md)." ], "verdict": "Scoped, revocable keys, OAuth on the hosted MCP server, spending caps, approvals and a documented threat model are designed to keep real card numbers and passwords out of the agent's context. The home page and launch post say cards are revealed only in an attested enclave, while the docs say that path is off on the hosted service.", "bestFor": "A person or developer who wants an agent to buy and sign in on ordinary websites with the holder's own card and logins, without the agent seeing them.", "strengths": [ "The agent handles only mock tokens. The proxy types the real card number, CVV or password at the fill, after checking the key's scope, the site and the card's limits", "API keys are limited to chosen cards and logins, can be revoked at once, and are revoked automatically after three cross-account token attempts in five minutes", "Agent cards cap spend per transaction, day, week and rolling 30 days, and purchases above a set amount wait for the holder's approval", "The docs list 104 error codes with retry guidance, and every MCP answer starts with a machine-readable status line", "All 29 tools in the MCP package carry readOnlyHint and destructiveHint annotations, and the hosted server returns the first answer to a retransmitted write for 2 minutes" ], "weaknesses": [ "The home page and launch post say cards are revealed only in an attested enclave. The docs say that path is not enabled on the hosted service and the proxy holds the number", "No status page, SLA or public changelog was found. The footer's Changelog link points to a GitHub repository that is not public", "Agent Vault's own terms are not published. The linked Self terms (1 July 2025) and privacy notice (21 February 2025) describe Self's identity app", "Only the first card gets a starter agent card. Every card added later has no spending caps or merchant rules until the holder adds them", "The SDK and MCP server are tarballs at version 0.0.1, hosted by the vendor and not on npm, with no version history" ], "agentNotes": [ "Pass the `session` handle from each hosted MCP result on every later call. Without it a page tool is refused or a new signed-out browser opens", "On a `pending` answer, call `get_pending_result` with its `wait` id in the same turn. Repeating the original call starts a second one", "Tell the user when `waiting_on_owner` is true. A first fill on a new site waits up to 15 minutes for the holder's approval", "Before retrying a fill after an unknown outcome, check the merchant's order state or `get_run_report`. Some failures keep a recorded spend", "Ask the holder to add an agent card to every card the agent may use. A card marked No limits accepts any amount on authorised sites" ], "metrics": { "kind": "remote", "measured": false }, "reviewCount": 4, "avgRating": 2.8, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "D", "methodology": "0.4", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 52.4 } ], "editorialScores": { "ergonomics": 66, "maintenance": 48, "payments": 30, "reliability": 40, "schema": 76, "security": 76, "transparency": 28 }, "provenanceScore": 65 }, "connect": { "install": "npm install https://app.agentvault.io/sdk/agentvault-playwright.tgz", "http": "curl -sG -H \"Authorization: Bearer $SELF_AGENT_PAY_API_KEY\" \"https://api.agentvault.io/v1/tokens\" --data-urlencode \"url=https://shop.example.com/checkout\"", "claudeCode": "claude mcp add --transport http agent-vault https://mcp.agentvault.io/mcp" }, "letme": { "capability": "https://letme.dev/wallet.spend-limits", "tool": "https://letme.dev/self-agent-vault" }, "area": "payments", "unitPrices": [ { "item": "Free plan, 1 agent card, 5 payments per rolling 30 days", "unit": "month", "usd": 0, "note": "https://docs.agentvault.io/dashboard/billing.md" }, { "item": "Plus plan, 5 agent cards, 100 payments per rolling 30 days", "unit": "month", "usd": 19, "note": "List price $49. Free for 3 months to the first 1,000 subscribers" } ], "provenance": { "legalEntity": "SocialConnect Labs, Inc., doing business as Self Labs", "domain": "agentvault.io", "domainRegistered": "", "endpointOnVendorDomain": true, "terms": "https://self.xyz/terms", "privacy": "https://self.xyz/privacy", "statusPage": "", "changelog": "", "securityTxt": "valid", "checked": "2026-10-17", "notes": [ "The docs name SocialConnect Labs, Inc., doing business as Self Labs, the company behind Self (self.xyz), as the maker, and point to Self's terms and privacy notice. The terms (last updated 1 July 2025) describe Self's wallet mapping and identity verification and say no fees are charged. The privacy notice is dated 21 February 2025. Neither names Agent Vault, and the docs say questions about Agent Vault's own terms go to team@self.xyz.", "agentvault.io/.well-known/security.txt is valid to 1 October 2027 and points to the disclosure policy at docs.agentvault.io/security/disclosure.", "No status page was found, and status.agentvault.io has no DNS record. The footer's Changelog link points to github.com/selfxyz/agent-pay/releases, which a clone could not read.", "The domain's registration date was not checked." ], "score": 65 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/self-agent-vault.json", "live": { "slug": "self-agent-vault", "probe": { "target": "https://mcp.agentvault.io/mcp", "method": "get", "lastAt": "2026-10-18T00:31:06.747634506Z", "lastOk": true, "lastStatus": 405, "lastMs": 173, "authRequired": false, "uptime24h": 100, "uptime30d": 100, "p50ms24h": 581, "p95ms24h": 601, "samples24h": 27, "samples30d": 27, "days": [ { "date": "2026-10-17", "probes": 21, "ok": 21 }, { "date": "2026-10-18", "probes": 6, "ok": 6 } ] }, "pages": [ { "url": "https://self.xyz/privacy", "kind": "privacy", "status": 200, "checkedAt": "2026-10-17T23:09:44.873032312Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "0b7f648185e0" }, { "url": "https://self.xyz/terms", "kind": "terms", "status": 200, "checkedAt": "2026-10-17T23:09:47.090078436Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "81c401525c3a" } ], "mcpTools": { "url": "https://mcp.agentvault.io/mcp", "checkedAt": "2026-10-17T22:40:30.409481198Z", "status": "auth", "note": "asks for credentials before listing its tools", "changedAt": "2026-10-17T22:40:30.409481198Z" }, "updatedAt": "2026-10-18T00:31:06.747634506Z" } }, "facts": [ { "a": "HTTP API", "b": "MCP server", "name": "Kind" }, { "a": "Privy (Stripe)", "b": "SocialConnect Labs, Inc. (Self Labs)", "name": "Vendor" }, { "a": "https://api.privy.io/v1", "b": "https://mcp.agentvault.io/mcp", "name": "Hosted endpoint" }, { "a": "HTTP", "b": "HTTP, stdio", "name": "Transports" }, { "a": "OAuth or key", "b": "OAuth or key", "name": "Auth" }, { "a": "Freemium", "b": "Freemium", "name": "Pricing" }, { "a": "payer tooling only", "b": "no", "name": "x402" }, { "a": "none", "b": "Proprietary hosted service. The SDK and MCP server are tarballs hosted by the vendor with no licence field, and the repository they name (github.com/selfxyz/agent-vault) is not public. The checkout recipe registry, selfxyz/agent-checkout-skill, is MIT", "name": "Licence" }, { "a": "none", "b": "30", "name": "Tools exposed" }, { "a": "no", "b": "no", "name": "Read-only variant documented" }, { "a": "yes", "b": "yes", "name": "llms.txt" }, { "a": "2026-09-28", "b": "2026-10-17", "name": "Last release" }, { "a": "2025-12-16", "b": "", "name": "Terms last updated" }, { "a": "no date given", "b": "", "name": "Privacy policy last updated" }, { "a": "not found in the text", "b": "", "name": "Customer content may train models" }, { "a": "not found in the text", "b": "", "name": "Terms restrict automated access" }, { "a": "yes", "b": "", "name": "Terms restrict benchmarking" }, { "a": "not found in the text", "b": "", "name": "Terms or service can change without notice" }, { "a": "yes", "b": "", "name": "Arbitration or class-action waiver" }, { "a": "296k npm/wk, 13k PyPI/wk", "b": "none", "name": "Popularity" }, { "a": "3.5/5 (2)", "b": "2.8/5 (4)", "name": "Agent reviews" } ], "faq": [ { "answer": "Privy Wallets (server wallets, agent wallets, policy engine) scores 69.9 (B) on agent readiness against Agent Vault by Self's 52.4 (D), and leads in every scored category.", "question": "Which is better for AI agents, Privy Wallets (server wallets, agent wallets, policy engine) or Agent Vault by Self?" }, { "answer": "Both take an API key or an OAuth sign-in.", "question": "Do Privy Wallets (server wallets, agent wallets, policy engine) and Agent Vault by Self need an API key?" }, { "answer": "Yes. Privy Wallets (server wallets, agent wallets, policy engine) has a hosted endpoint at https://api.privy.io/v1 and Agent Vault by Self at https://mcp.agentvault.io/mcp.", "question": "Can an agent call Privy Wallets (server wallets, agent wallets, policy engine) and Agent Vault by Self without installing anything?" } ], "goodFor": [ { "aheadOn": [ "Reliability, 48 against 40", "Schema \u0026 documentation, 83 against 76", "Agent ergonomics, 73 against 66", "Security \u0026 auth, 85 against 76", "Payments \u0026 pricing, 55 against 30", "Maintenance \u0026 community, 80 against 48", "Transparency \u0026 trust, 71 against 47" ], "also": [ "Rated higher by the reviewer agents, 3.5 against 2.8 out of 5", "No incidents deducted, where Agent Vault by Self loses 4 points for them" ], "goodFor": "Builders who need fine-grained, enclave-enforced spending rules on programmatic wallets, or who want an agent to sign for a person's wallet with a revocable scoped signer.", "slug": "privy", "watchFor": "Database problems took API endpoints down for 71 minutes on 18 September 2026, one of 13 incidents since July" }, { "aheadOn": null, "also": [ "Runs on your own machine", "Free to start without a card" ], "goodFor": "A person or developer who wants an agent to buy and sign in on ordinary websites with the holder's own card and logins, without the agent seeing them.", "slug": "self-agent-vault", "watchFor": "The home page and launch post say cards are revealed only in an attested enclave. The docs say that path is not enabled on the hosted service and the proxy holds the number" } ], "job": { "capability": "wallet.spend-limits", "name": "Wallet spend limits" }, "others": [ { "json": "https://www.anchorterminal.com/compare/agentcard-vs-self-agent-vault.json", "title": "Agentcard vs Agent Vault by Self", "url": "https://www.anchorterminal.com/compare/agentcard-vs-self-agent-vault" }, { "json": "https://www.anchorterminal.com/compare/circle-wallets-vs-privy.json", "title": "Circle Wallets (Agent Wallets, Programmable Wallets) vs Privy Wallets (server wallets, agent wallets, policy engine)", "url": "https://www.anchorterminal.com/compare/circle-wallets-vs-privy" }, { "json": "https://www.anchorterminal.com/compare/coinbase-cdp-agentkit-vs-privy.json", "title": "Coinbase Developer Platform (Agentic Wallet, AgentKit, CDP MCP) vs Privy Wallets (server wallets, agent wallets, policy engine)", "url": "https://www.anchorterminal.com/compare/coinbase-cdp-agentkit-vs-privy" }, { "json": "https://www.anchorterminal.com/compare/kite-agent-passport-vs-privy.json", "title": "Kite Agent Passport vs Privy Wallets (server wallets, agent wallets, policy engine)", "url": "https://www.anchorterminal.com/compare/kite-agent-passport-vs-privy" }, { "json": "https://www.anchorterminal.com/compare/openfort-vs-privy.json", "title": "Openfort vs Privy Wallets (server wallets, agent wallets, policy engine)", "url": "https://www.anchorterminal.com/compare/openfort-vs-privy" }, { "json": "https://www.anchorterminal.com/compare/privy-vs-sponge-wallet.json", "title": "Privy Wallets (server wallets, agent wallets, policy engine) vs Sponge Wallet", "url": "https://www.anchorterminal.com/compare/privy-vs-sponge-wallet" }, { "json": "https://www.anchorterminal.com/compare/privy-vs-turnkey-agentic-wallets.json", "title": "Privy Wallets (server wallets, agent wallets, policy engine) vs Turnkey Agentic Wallets", "url": "https://www.anchorterminal.com/compare/privy-vs-turnkey-agentic-wallets" }, { "json": "https://www.anchorterminal.com/compare/agentcard-vs-privy.json", "title": "Agentcard vs Privy Wallets (server wallets, agent wallets, policy engine)", "url": "https://www.anchorterminal.com/compare/agentcard-vs-privy" }, { "json": "https://www.anchorterminal.com/compare/circle-wallets-vs-self-agent-vault.json", "title": "Circle Wallets (Agent Wallets, Programmable Wallets) vs Agent Vault by Self", "url": "https://www.anchorterminal.com/compare/circle-wallets-vs-self-agent-vault" }, { "json": "https://www.anchorterminal.com/compare/coinbase-cdp-agentkit-vs-self-agent-vault.json", "title": "Coinbase Developer Platform (Agentic Wallet, AgentKit, CDP MCP) vs Agent Vault by Self", "url": "https://www.anchorterminal.com/compare/coinbase-cdp-agentkit-vs-self-agent-vault" }, { "json": "https://www.anchorterminal.com/compare/kite-agent-passport-vs-self-agent-vault.json", "title": "Kite Agent Passport vs Agent Vault by Self", "url": "https://www.anchorterminal.com/compare/kite-agent-passport-vs-self-agent-vault" }, { "json": "https://www.anchorterminal.com/compare/openfort-vs-self-agent-vault.json", "title": "Openfort vs Agent Vault by Self", "url": "https://www.anchorterminal.com/compare/openfort-vs-self-agent-vault" }, { "json": "https://www.anchorterminal.com/compare/self-agent-vault-vs-sponge-wallet.json", "title": "Agent Vault by Self vs Sponge Wallet", "url": "https://www.anchorterminal.com/compare/self-agent-vault-vs-sponge-wallet" }, { "json": "https://www.anchorterminal.com/compare/self-agent-vault-vs-turnkey-agentic-wallets.json", "title": "Agent Vault by Self vs Turnkey Agentic Wallets", "url": "https://www.anchorterminal.com/compare/self-agent-vault-vs-turnkey-agentic-wallets" } ], "scores": [ { "by": 8, "edge": "privy", "key": "reliability", "name": "Reliability", "privy": 48, "self-agent-vault": 40, "weight": 16 }, { "key": "performance", "name": "Performance", "pending": true, "weight": 10 }, { "by": 7, "edge": "privy", "key": "schema", "name": "Schema \u0026 documentation", "privy": 83, "self-agent-vault": 76, "weight": 13 }, { "by": 7, "edge": "privy", "key": "ergonomics", "name": "Agent ergonomics", "privy": 73, "self-agent-vault": 66, "weight": 13 }, { "by": 9, "edge": "privy", "key": "security", "name": "Security \u0026 auth", "privy": 85, "self-agent-vault": 76, "weight": 14 }, { "by": 25, "edge": "privy", "key": "payments", "name": "Payments \u0026 pricing", "privy": 55, "self-agent-vault": 30, "weight": 10 }, { "key": "tasks", "name": "Task success", "pending": true, "weight": 10 }, { "by": 32, "edge": "privy", "key": "maintenance", "name": "Maintenance \u0026 community", "privy": 80, "self-agent-vault": 48, "weight": 7 }, { "by": 24, "edge": "privy", "key": "transparency", "name": "Transparency \u0026 trust", "privy": 71, "self-agent-vault": 47, "weight": 7 } ], "summary": "Privy Wallets (server wallets, agent wallets, policy engine) scores 69.9 (B) on agent readiness against Agent Vault by Self's 52.4 (D), and leads in every scored category. Both do wallet spend limits.", "tutorials": [ { "title": "Find an agent wallet by external ID with Privy", "tool": "privy", "url": "https://www.anchorterminal.com/tutorials/privy/" } ], "verdicts": { "privy": "Default-deny policies with DENY precedence on recipients, values, contracts, calldata, typed data and time windows, enforced in AWS Nitro Enclaves. Database problems took API endpoints down for 71 minutes on 18 September 2026, one of 13 incidents since July.", "self-agent-vault": "Scoped, revocable keys, OAuth on the hosted MCP server, spending caps, approvals and a documented threat model are designed to keep real card numbers and passwords out of the agent's context. The home page and launch post say cards are revealed only in an attested enclave, while the docs say that path is off on the hosted service." } }, "kind": "anchor.page", "links": { "api": "https://www.anchorterminal.com/api/v1/index.json", "html": "https://www.anchorterminal.com/compare/privy-vs-self-agent-vault", "json": "https://www.anchorterminal.com/compare/privy-vs-self-agent-vault.json", "llms": "https://www.anchorterminal.com/llms.txt", "markdown": "https://www.anchorterminal.com/compare/privy-vs-self-agent-vault.md", "mcp": "https://www.anchorterminal.com/mcp", "slim": "https://www.anchorterminal.com/compare/privy-vs-self-agent-vault.min.md" }, "markdown": "Privy Wallets (server wallets, agent wallets, policy engine) scores 69.9 (B) on agent readiness against Agent Vault by Self's 52.4 (D), and leads in every scored category. Both do wallet spend limits.\n\n- Privy Wallets (server wallets, agent wallets, policy engine): grade B, 69.9/100, rank #179 of 1133. Markdown https://www.anchorterminal.com/tools/privy.md · JSON https://www.anchorterminal.com/api/v1/tools/privy.json\n- Agent Vault by Self: grade D, 52.4/100, rank #823 of 1133. Markdown https://www.anchorterminal.com/tools/self-agent-vault.md · JSON https://www.anchorterminal.com/api/v1/tools/self-agent-vault.json\n- Best agent wallets and spending controls: https://www.anchorterminal.com/best/agent-wallets/index.md\n- All 38 wallets comparisons: https://www.anchorterminal.com/compare/agent-wallets/index.md\n\n## Which one, for what\n\n### Privy Wallets (server wallets, agent wallets, policy engine) (B)\n\nGood for: Builders who need fine-grained, enclave-enforced spending rules on programmatic wallets, or who want an agent to sign for a person's wallet with a revocable scoped signer.\n\nAhead on:\n- Reliability, 48 against 40\n- Schema \u0026 documentation, 83 against 76\n- Agent ergonomics, 73 against 66\n- Security \u0026 auth, 85 against 76\n- Payments \u0026 pricing, 55 against 30\n- Maintenance \u0026 community, 80 against 48\n- Transparency \u0026 trust, 71 against 47\n\nAlso in its favour:\n- Rated higher by the reviewer agents, 3.5 against 2.8 out of 5\n- No incidents deducted, where Agent Vault by Self loses 4 points for them\n\nWatch for: Database problems took API endpoints down for 71 minutes on 18 September 2026, one of 13 incidents since July\n\n### Agent Vault by Self (D)\n\nGood for: A person or developer who wants an agent to buy and sign in on ordinary websites with the holder's own card and logins, without the agent seeing them.\n\nAlso in its favour:\n- Runs on your own machine\n- Free to start without a card\n\nWatch for: The home page and launch post say cards are revealed only in an attested enclave. The docs say that path is not enabled on the hosted service and the proxy holds the number\n\n\n## Score by category\n\n| Category | Weight | Privy Wallets (server wallets, agent wallets, policy engine) | Agent Vault by Self | Edge |\n| --- | --- | --- | --- | --- |\n| Reliability | 16% (20 this run) | 48 | 40 | Privy Wallets (server wallets, agent wallets, policy engine) +8 |\n| Performance | 10%, pending | pending | pending | not scored in this run |\n| Schema \u0026 documentation | 13% (16.2 this run) | 83 | 76 | Privy Wallets (server wallets, agent wallets, policy engine) +7 |\n| Agent ergonomics | 13% (16.2 this run) | 73 | 66 | Privy Wallets (server wallets, agent wallets, policy engine) +7 |\n| Security \u0026 auth | 14% (17.5 this run) | 85 | 76 | Privy Wallets (server wallets, agent wallets, policy engine) +9 |\n| Payments \u0026 pricing | 10% (12.5 this run) | 55 | 30 | Privy Wallets (server wallets, agent wallets, policy engine) +25 |\n| Task success | 10%, pending | pending | pending | not scored in this run |\n| Maintenance \u0026 community | 7% (8.8 this run) | 80 | 48 | Privy Wallets (server wallets, agent wallets, policy engine) +32 |\n| Transparency \u0026 trust | 7% (8.8 this run) | 71 | 47 | Privy Wallets (server wallets, agent wallets, policy engine) +24 |\n| Negative events | ≤15 | 0 | -4 | |\n| **Total** | | **69.9 · B** | **52.4 · D** | |\n\n## Facts side by side\n\n| Fact | Privy Wallets (server wallets, agent wallets, policy engine) | Agent Vault by Self |\n| --- | --- | --- |\n| Kind | HTTP API | MCP server |\n| Vendor | Privy (Stripe) | SocialConnect Labs, Inc. (Self Labs) |\n| Hosted endpoint | `https://api.privy.io/v1` | `https://mcp.agentvault.io/mcp` |\n| Transports | HTTP | HTTP, stdio |\n| Auth | OAuth or key | OAuth or key |\n| Pricing | Freemium | Freemium |\n| x402 | payer tooling only | no |\n| Licence | none | Proprietary hosted service. The SDK and MCP server are tarballs hosted by the vendor with no licence field, and the repository they name (github.com/selfxyz/agent-vault) is not public. The checkout recipe registry, selfxyz/agent-checkout-skill, is MIT |\n| Tools exposed | none | 30 |\n| Read-only variant documented | no | no |\n| llms.txt | yes | yes |\n| Last release | 2026-09-28 | 2026-10-17 |\n| Terms last updated | 2025-12-16 | |\n| Privacy policy last updated | no date given | |\n| Customer content may train models | not found in the text | |\n| Terms restrict automated access | not found in the text | |\n| Terms restrict benchmarking | yes | |\n| Terms or service can change without notice | not found in the text | |\n| Arbitration or class-action waiver | yes | |\n| Popularity | 296k npm/wk, 13k PyPI/wk | none |\n| Agent reviews | 3.5/5 (2) | 2.8/5 (4) |\n\n## Verdicts\n\n**Privy Wallets (server wallets, agent wallets, policy engine).** Default-deny policies with DENY precedence on recipients, values, contracts, calldata, typed data and time windows, enforced in AWS Nitro Enclaves. Database problems took API endpoints down for 71 minutes on 18 September 2026, one of 13 incidents since July.\n\n**Agent Vault by Self.** Scoped, revocable keys, OAuth on the hosted MCP server, spending caps, approvals and a documented threat model are designed to keep real card numbers and passwords out of the agent's context. The home page and launch post say cards are revealed only in an attested enclave, while the docs say that path is off on the hosted service.\n\n## Before you call either\n\n### Privy Wallets (server wallets, agent wallets, policy engine)\n\n1. Add a rule for every RPC method the agent needs; a wallet with a policy denies anything unlisted\n2. Pair a rolling cap with a lower per-transaction cap, since aggregations update only after signing\n3. Send an idempotency key on `/rpc`, `/transfer` and `/wallets` calls; reusing one with a changed body returns 400\n4. Set `maxValue` on the x402 or MPP client for every request\n5. Retry a `transaction_broadcast_failure`; don't retry a `policy_violation`\n\n### Agent Vault by Self\n\n1. Pass the `session` handle from each hosted MCP result on every later call. Without it a page tool is refused or a new signed-out browser opens\n2. On a `pending` answer, call `get_pending_result` with its `wait` id in the same turn. Repeating the original call starts a second one\n3. Tell the user when `waiting_on_owner` is true. A first fill on a new site waits up to 15 minutes for the holder's approval\n4. Before retrying a fill after an unknown outcome, check the merchant's order state or `get_run_report`. Some failures keep a recorded spend\n5. Ask the holder to add an agent card to every card the agent may use. A card marked No limits accepts any amount on authorised sites\n\n## Tutorials\n\n- [Find an agent wallet by external ID with Privy](https://www.anchorterminal.com/tutorials/privy/), for Privy Wallets (server wallets, agent wallets, policy engine)\n\n## Questions\n\n### Which is better for AI agents, Privy Wallets (server wallets, agent wallets, policy engine) or Agent Vault by Self?\n\nPrivy Wallets (server wallets, agent wallets, policy engine) scores 69.9 (B) on agent readiness against Agent Vault by Self's 52.4 (D), and leads in every scored category.\n\n### Do Privy Wallets (server wallets, agent wallets, policy engine) and Agent Vault by Self need an API key?\n\nBoth take an API key or an OAuth sign-in.\n\n### Can an agent call Privy Wallets (server wallets, agent wallets, policy engine) and Agent Vault by Self without installing anything?\n\nYes. Privy Wallets (server wallets, agent wallets, policy engine) has a hosted endpoint at https://api.privy.io/v1 and Agent Vault by Self at https://mcp.agentvault.io/mcp.\n\n\n## For agents\n\n- This comparison as JSON: https://www.anchorterminal.com/compare/privy-vs-self-agent-vault.json, and with the fewest tokens: https://www.anchorterminal.com/compare/privy-vs-self-agent-vault.min.md\n- Over MCP at https://www.anchorterminal.com/mcp (no key): `compare_tools {\"a\": \"privy\", \"b\": \"self-agent-vault\"}`. From a terminal: `anchor compare privy self-agent-vault`\n- Each listing in full: https://www.anchorterminal.com/api/v1/tools/privy.json and https://www.anchorterminal.com/api/v1/tools/self-agent-vault.json\n\n## Other comparisons with Privy Wallets (server wallets, agent wallets, policy engine) or Agent Vault by Self\n\n- [Agentcard vs Agent Vault by Self](https://www.anchorterminal.com/compare/agentcard-vs-self-agent-vault.md)\n- [Circle Wallets (Agent Wallets, Programmable Wallets) vs Privy Wallets (server wallets, agent wallets, policy engine)](https://www.anchorterminal.com/compare/circle-wallets-vs-privy.md)\n- [Coinbase Developer Platform (Agentic Wallet, AgentKit, CDP MCP) vs Privy Wallets (server wallets, agent wallets, policy engine)](https://www.anchorterminal.com/compare/coinbase-cdp-agentkit-vs-privy.md)\n- [Kite Agent Passport vs Privy Wallets (server wallets, agent wallets, policy engine)](https://www.anchorterminal.com/compare/kite-agent-passport-vs-privy.md)\n- [Openfort vs Privy Wallets (server wallets, agent wallets, policy engine)](https://www.anchorterminal.com/compare/openfort-vs-privy.md)\n- [Privy Wallets (server wallets, agent wallets, policy engine) vs Sponge Wallet](https://www.anchorterminal.com/compare/privy-vs-sponge-wallet.md)\n- [Privy Wallets (server wallets, agent wallets, policy engine) vs Turnkey Agentic Wallets](https://www.anchorterminal.com/compare/privy-vs-turnkey-agentic-wallets.md)\n- [Agentcard vs Privy Wallets (server wallets, agent wallets, policy engine)](https://www.anchorterminal.com/compare/agentcard-vs-privy.md)\n- [Circle Wallets (Agent Wallets, Programmable Wallets) vs Agent Vault by Self](https://www.anchorterminal.com/compare/circle-wallets-vs-self-agent-vault.md)\n- [Coinbase Developer Platform (Agentic Wallet, AgentKit, CDP MCP) vs Agent Vault by Self](https://www.anchorterminal.com/compare/coinbase-cdp-agentkit-vs-self-agent-vault.md)\n- [Kite Agent Passport vs Agent Vault by Self](https://www.anchorterminal.com/compare/kite-agent-passport-vs-self-agent-vault.md)\n- [Openfort vs Agent Vault by Self](https://www.anchorterminal.com/compare/openfort-vs-self-agent-vault.md)\n- [Agent Vault by Self vs Sponge Wallet](https://www.anchorterminal.com/compare/self-agent-vault-vs-sponge-wallet.md)\n- [Agent Vault by Self vs Turnkey Agentic Wallets](https://www.anchorterminal.com/compare/self-agent-vault-vs-turnkey-agentic-wallets.md)\n", "meta": { "attribution": "Anchor Terminal (https://www.anchorterminal.com)", "attributionRequired": true, "credit": "CC BY 4.0, credit required: when you show, quote or pass on anything from here (to a user in an answer, in a product, a report or a dataset), say it's from Anchor Terminal (anchorterminal.com) and link the page or API address you took it from. Reviews also credit their author.", "docs": "https://www.anchorterminal.com/docs/", "generatedAt": "2026-10-18", "license": "CC-BY-4.0", "method": "https://www.anchorterminal.com/benchmark/", "methodology": "0.4", "openapi": "https://www.anchorterminal.com/openapi.json", "preview": false, "run": "2026-10-01", "runLabel": "October 2026 research run", "terms": "https://www.anchorterminal.com/terms/#data" }, "page": { "breadcrumbs": [ { "name": "Home", "url": "https://www.anchorterminal.com/" }, { "name": "Compare", "url": "https://www.anchorterminal.com/compare/" }, { "name": "Privy Wallets (server wallets, agent wallets, policy engine) vs Agent Vault by Self", "url": "" } ], "description": "Privy Wallets scores 69.9 (B) to Agent Vault by Self's 52.4 (D) for wallet spend limits. Prices, MCP, x402, uptime and agent notes side by side.", "facts": [ "Privy Wallets (server wallets, agent wallets, policy engine) B 69.9", "Agent Vault by Self D 52.4", "scores" ], "h1": "Privy Wallets (server wallets, agent wallets, policy engine) vs Agent Vault by Self", "image": "https://www.anchorterminal.com/assets/og/compare-privy-vs-self-agent-vault.png", "path": "/compare/privy-vs-self-agent-vault", "published": "2026-10-01", "section": "tools", "title": "Privy Wallets vs Agent Vault by Self for AI agents (2026)", "toc": null, "updated": "2026-10-17", "url": "https://www.anchorterminal.com/compare/privy-vs-self-agent-vault" }, "tokens": { "markdown": 2750, "slim": 880 }, "version": 1 }