{ "data": { "a": { "slug": "self-agent-vault", "name": "Agent Vault by Self", "vendor": "SocialConnect Labs, Inc. (Self Labs)", "vendorUrl": "https://agentvault.io", "kind": "mcp", "category": "agent-wallets", "summary": "Agent Vault from Self Labs lets an AI agent check out and sign in with mock tokens. Its proxied browser types the real card number or password at the fill. Agents connect by MCP, a Playwright SDK or HTTP.", "url": "https://www.anchorterminal.com/tools/self-agent-vault", "markdownUrl": "https://www.anchorterminal.com/tools/self-agent-vault.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/self-agent-vault.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/self-agent-vault.json", "license": "Proprietary hosted service. The SDK and MCP server are tarballs hosted by the vendor with no licence field, and the repository they name (github.com/selfxyz/agent-vault) is not public. The checkout recipe registry, selfxyz/agent-checkout-skill, is MIT", "transports": [ "http", "stdio" ], "remoteUrl": "https://mcp.agentvault.io/mcp", "packages": [], "auth": "mixed", "authNotes": "The hosted MCP server at https://mcp.agentvault.io/mcp uses OAuth. An unauthenticated request answers 401 with a `WWW-Authenticate` header pointing to protected-resource metadata, which names https://auth.agentvault.io. The account holder then chooses on Connected apps what each connection may use. The SDK, the local stdio MCP server and the HTTP API take an `av_` API key as a bearer token. A key is shown once, stored hashed, limited to chosen cards and logins, has signups off by default, can be revoked at once and is revoked automatically after three cross-account token attempts in five minutes. Recipe reads need no key.", "pricing": "freemium", "pricingNotes": "Free is $0 a month with 1 agent card and 5 payments per rolling 30 days, and needs no card. Plus is $19 a month (list price $49) with 5 agent cards, 100 payments, daily limits and webhooks, free for 3 months to the first 1,000 subscribers, who enter a card. Enterprise is priced on request (https://docs.agentvault.io/dashboard/billing.md, checked 2026-10-17).", "priceSummary": "$19 / mo", "where": "both", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the docs index, the 66 Markdown docs pages, the home page or the launch post. Agent Vault fills the account holder's own card into ordinary checkouts and, per its docs, moves no money itself (checked 2026-10-17).", "endpoints": [] }, "toolCount": 30, "popularity": { "githubStars": null, "npmWeekly": null, "pypiWeekly": null, "asOf": "2026-10-17" }, "docsUrl": "https://docs.agentvault.io", "llmsTxt": "https://docs.agentvault.io/llms.txt", "capabilities": [ "wallet.spend-limits", "payments.card-token", "payments.card", "secrets.store", "browser.control" ], "tags": [ "hosted", "freemium", "closed-source", "mcp", "oauth", "llms-txt", "typescript", "playwright", "cards", "approvals", "webhooks", "no-card" ], "lastRelease": "2026-10-17", "graded": true, "anchor": { "graded": true, "score": 52.4, "grade": "D", "agentReady": false, "rank": 823, "ranked": true, "rankOf": 1133, "categoryRank": 7, "methodology": "0.4", "run": "2026-10-01", "scores": { "ergonomics": 66, "maintenance": 48, "payments": 30, "reliability": 40, "schema": 76, "security": 76, "transparency": 47 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-10-17" }, "negative": -4, "negativeNotes": [ "-4, misleading claims about where card numbers are exposed, checked first-hand on 17 October 2026. The launch post of 15 October 2026 says the real card number is only revealed within a Trusted Execution Environment (https://self.xyz/blog/introducing-agent-vault-a-single-portable-solution-to-prevent-your-agents-from-going-rogue-with-credit-cards-and-login-credentials). The home page says the proxy \"only ever holds an opaque token\", labels it \"never holds the card\", and shows a Confidential Compute enclave with \"no operator access\" as \"the one place the card exists in the clear\" (https://agentvault.io/). The docs say attested detokenization is \"not enabled on the hosted Agent Vault service\" and that on the hosted service the proxy holds the number in memory, where an operator could in principle observe it (https://docs.agentvault.io/security/attested-detokenization.md, https://docs.agentvault.io/security/model.md). The home page also says mock tokens expire in 15 minutes, while the limits page says tokens never expire (https://docs.agentvault.io/reference/limits.md)." ], "verdict": "Scoped, revocable keys, OAuth on the hosted MCP server, spending caps, approvals and a documented threat model are designed to keep real card numbers and passwords out of the agent's context. The home page and launch post say cards are revealed only in an attested enclave, while the docs say that path is off on the hosted service.", "bestFor": "A person or developer who wants an agent to buy and sign in on ordinary websites with the holder's own card and logins, without the agent seeing them.", "strengths": [ "The agent handles only mock tokens. The proxy types the real card number, CVV or password at the fill, after checking the key's scope, the site and the card's limits", "API keys are limited to chosen cards and logins, can be revoked at once, and are revoked automatically after three cross-account token attempts in five minutes", "Agent cards cap spend per transaction, day, week and rolling 30 days, and purchases above a set amount wait for the holder's approval", "The docs list 104 error codes with retry guidance, and every MCP answer starts with a machine-readable status line", "All 29 tools in the MCP package carry readOnlyHint and destructiveHint annotations, and the hosted server returns the first answer to a retransmitted write for 2 minutes" ], "weaknesses": [ "The home page and launch post say cards are revealed only in an attested enclave. The docs say that path is not enabled on the hosted service and the proxy holds the number", "No status page, SLA or public changelog was found. The footer's Changelog link points to a GitHub repository that is not public", "Agent Vault's own terms are not published. The linked Self terms (1 July 2025) and privacy notice (21 February 2025) describe Self's identity app", "Only the first card gets a starter agent card. Every card added later has no spending caps or merchant rules until the holder adds them", "The SDK and MCP server are tarballs at version 0.0.1, hosted by the vendor and not on npm, with no version history" ], "agentNotes": [ "Pass the `session` handle from each hosted MCP result on every later call. Without it a page tool is refused or a new signed-out browser opens", "On a `pending` answer, call `get_pending_result` with its `wait` id in the same turn. Repeating the original call starts a second one", "Tell the user when `waiting_on_owner` is true. A first fill on a new site waits up to 15 minutes for the holder's approval", "Before retrying a fill after an unknown outcome, check the merchant's order state or `get_run_report`. Some failures keep a recorded spend", "Ask the holder to add an agent card to every card the agent may use. A card marked No limits accepts any amount on authorised sites" ], "metrics": { "kind": "remote", "measured": false }, "reviewCount": 4, "avgRating": 2.8, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "D", "methodology": "0.4", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 52.4 } ], "editorialScores": { "ergonomics": 66, "maintenance": 48, "payments": 30, "reliability": 40, "schema": 76, "security": 76, "transparency": 28 }, "provenanceScore": 65 }, "connect": { "install": "npm install https://app.agentvault.io/sdk/agentvault-playwright.tgz", "http": "curl -sG -H \"Authorization: Bearer $SELF_AGENT_PAY_API_KEY\" \"https://api.agentvault.io/v1/tokens\" --data-urlencode \"url=https://shop.example.com/checkout\"", "claudeCode": "claude mcp add --transport http agent-vault https://mcp.agentvault.io/mcp" }, "letme": { "capability": "https://letme.dev/wallet.spend-limits", "tool": "https://letme.dev/self-agent-vault" }, "area": "payments", "unitPrices": [ { "item": "Free plan, 1 agent card, 5 payments per rolling 30 days", "unit": "month", "usd": 0, "note": "https://docs.agentvault.io/dashboard/billing.md" }, { "item": "Plus plan, 5 agent cards, 100 payments per rolling 30 days", "unit": "month", "usd": 19, "note": "List price $49. Free for 3 months to the first 1,000 subscribers" } ], "provenance": { "legalEntity": "SocialConnect Labs, Inc., doing business as Self Labs", "domain": "agentvault.io", "domainRegistered": "", "endpointOnVendorDomain": true, "terms": "https://self.xyz/terms", "privacy": "https://self.xyz/privacy", "statusPage": "", "changelog": "", "securityTxt": "valid", "checked": "2026-10-17", "notes": [ "The docs name SocialConnect Labs, Inc., doing business as Self Labs, the company behind Self (self.xyz), as the maker, and point to Self's terms and privacy notice. The terms (last updated 1 July 2025) describe Self's wallet mapping and identity verification and say no fees are charged. The privacy notice is dated 21 February 2025. Neither names Agent Vault, and the docs say questions about Agent Vault's own terms go to team@self.xyz.", "agentvault.io/.well-known/security.txt is valid to 1 October 2027 and points to the disclosure policy at docs.agentvault.io/security/disclosure.", "No status page was found, and status.agentvault.io has no DNS record. The footer's Changelog link points to github.com/selfxyz/agent-pay/releases, which a clone could not read.", "The domain's registration date was not checked." ], "score": 65 }, "pageJsonUrl": "https://www.anchorterminal.com/tools/self-agent-vault.json", "live": { "slug": "self-agent-vault", "probe": { "target": "https://mcp.agentvault.io/mcp", "method": "get", "lastAt": "2026-10-18T00:14:55.302198381Z", "lastOk": true, "lastStatus": 405, "lastMs": 176, "authRequired": false, "uptime24h": 100, "uptime30d": 100, "p50ms24h": 581, "p95ms24h": 595, "samples24h": 24, "samples30d": 24, "days": [ { "date": "2026-10-17", "probes": 21, "ok": 21 }, { "date": "2026-10-18", "probes": 3, "ok": 3 } ] }, "pages": [ { "url": "https://self.xyz/privacy", "kind": "privacy", "status": 200, "checkedAt": "2026-10-17T23:09:44.873032312Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "0b7f648185e0" }, { "url": "https://self.xyz/terms", "kind": "terms", "status": 200, "checkedAt": "2026-10-17T23:09:47.090078436Z", "changedAt": "0001-01-01T00:00:00Z", "fingerprint": "81c401525c3a" } ], "mcpTools": { "url": "https://mcp.agentvault.io/mcp", "checkedAt": "2026-10-17T22:40:30.409481198Z", "status": "auth", "note": "asks for credentials before listing its tools", "changedAt": "2026-10-17T22:40:30.409481198Z" }, "updatedAt": "2026-10-18T00:14:55.302198381Z" } }, "answer": "Turnkey Agentic Wallets scores 76 (BB) on agent readiness against Agent Vault by Self's 52.4 (D), and leads in every scored category.", "b": { "slug": "turnkey-agentic-wallets", "name": "Turnkey Agentic Wallets", "vendor": "Turnkey Global, Inc.", "vendorUrl": "https://www.turnkey.com", "kind": "http-api", "category": "agent-wallets", "summary": "Turnkey's signing API gives an AI agent its own non-root user and P-256 key over a company wallet. Policies evaluated in secure enclaves set what the agent may sign, and can require a person's approval.", "url": "https://www.anchorterminal.com/tools/turnkey-agentic-wallets", "markdownUrl": "https://www.anchorterminal.com/tools/turnkey-agentic-wallets.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/turnkey-agentic-wallets.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/turnkey-agentic-wallets.json", "repo": "https://github.com/tkhq/turnkey-agent-skills", "license": "Proprietary service under Turnkey's terms of service. The SDKs, the CLI and the agent skills on GitHub are Apache-2.0", "transports": [ "http" ], "remoteUrl": "https://api.turnkey.com", "packages": [ { "registry": "npm", "name": "@turnkey/sdk-server" }, { "registry": "npm", "name": "@turnkey/viem" }, { "registry": "pypi", "name": "turnkey-http" } ], "auth": "api-key", "authNotes": "Self-serve. A person creates an organisation at app.turnkey.com with an email address and a passkey, then registers a P-256 public key. Every request is a JSON POST signed with that key in an `X-Stamp` header. There are no bearer tokens. An agent gets its own non-root user and key, created through the API by a root user, and can do only what policies allow.", "pricing": "freemium", "pricingNotes": "25 free signatures a month on Pay as You Go, then $0.10 a signature. Pro is $99 a month and $0.05 a signature. Enterprise is custom, from $0.0015 a signature, and adds gas sponsorship, SLAs and up to 250 policies. The free allowance needs no card, so an agent can start without a contract. Transaction management and swaps are priced per transaction on request (https://www.turnkey.com/pricing, checked 2026-10-08).", "priceSummary": "$0.10 / call", "where": "hosted", "x402": { "level": "partial", "evidence": "Turnkey documents paying over x402 and MPP as a buyer. A viem account from `@turnkey/viem` signs in the enclave and is passed to the `@x402/fetch` or `mppx` client. Turnkey's own API is not paid over either protocol (https://docs.turnkey.com/solutions/company-wallets/agentic-payments, checked 2026-10-08).", "endpoints": [] }, "toolCount": null, "popularity": { "githubStars": null, "npmWeekly": 304389, "pypiWeekly": 11903, "asOf": "2026-10-08" }, "docsUrl": "https://docs.turnkey.com/solutions/company-wallets/agentic-wallets", "llmsTxt": "https://docs.turnkey.com/llms.txt", "openapi": "https://docs.turnkey.com/public_api.swagger.json", "capabilities": [ "wallet.onchain", "wallet.spend-limits", "wallet.custody", "payments.x402" ], "tags": [ "hosted", "freemium", "free-tier", "openapi", "llms-txt", "typescript", "go", "python", "rust", "ruby", "wallet", "policy-engine", "x402", "status-page", "bug-bounty", "soc2", "closed-source", "webhooks", "skills" ], "lastRelease": "2026-10-16", "graded": true, "anchor": { "graded": true, "score": 76, "grade": "BB", "agentReady": true, "rank": 45, "ranked": true, "rankOf": 1133, "categoryRank": 1, "methodology": "0.4", "run": "2026-10-01", "scores": { "ergonomics": 77, "maintenance": 83, "payments": 58, "reliability": 75, "schema": 79, "security": 85, "transparency": 72 }, "pending": [ "performance", "tasks" ], "assessment": { "confidence": "medium", "date": "2026-10-17" }, "negative": 0, "verdict": "An agent gets a non-root user that can sign nothing until a policy allows it, with DENY rules taking precedence and human co-approval available. Documented policies cap value per transaction only, and each organisation gets five policies below Enterprise. Signing endpoints returned elevated errors for five hours on 27 August 2026.", "bestFor": "A company that wants agents to sign from its own wallets under rules checked in an enclave, with a person co-approving large transactions, across EVM, Solana, Bitcoin, Tron and other chains.", "strengths": [ "Non-root users have no permissions until an ALLOW policy exists, and any matching DENY policy wins", "Consensus expressions can require the agent and a named person to approve before the enclave signs", "API private keys are generated by the customer and never sent to Turnkey. Keys can carry an expiry", "Submissions are idempotent by request body, so a retry with the same body returns the same activity", "Public Swagger 2.0 spec with 186 paths, llms.txt, a full-text docs feed and nine Apache-2.0 agent skills" ], "weaknesses": [ "Documented policy conditions cap value per transaction only. Rolling-window Velocity Controls appear in the SDK clients but not in the docs", "Free, Pay as You Go and Pro organisations are limited to five policies and a default of 1 to 3 requests a second", "Root users bypass the policy engine entirely, and the first user of a new organisation is root", "Signing endpoints returned elevated errors from 00:44 to 05:53 EDT on 27 August 2026", "429 responses carry no `Retry-After` header, and the terms forbid benchmarking and availability monitoring" ], "agentNotes": [ "Use a non-root user's key. Refuse root credentials for unattended work, because root bypasses every policy", "Scope every signing ALLOW policy by `wallet.id` or `wallet_account.address`, or it covers every key the user can reach", "Check the activity status on each response. `ACTIVITY_STATUS_CONSENSUS_NEEDED` means a person must approve within 24 hours", "Retry with the identical body to stay idempotent. Changing `timestampMs` creates a new activity", "Back off with jitter on 429 and poll `get_activity` sparingly, since polling counts against the same 1 to 3 requests a second" ], "metrics": { "kind": "remote", "measured": false }, "reviewCount": 4, "avgRating": 3, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "BB", "methodology": "0.4", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 76 } ], "editorialScores": { "ergonomics": 77, "maintenance": 83, "payments": 58, "reliability": 75, "schema": 79, "security": 85, "transparency": 50 }, "provenanceScore": 94 }, "connect": { "install": "npm install @turnkey/sdk-server", "claudeCode": "claude mcp add --transport http turnkey https://docs.turnkey.com/mcp" }, "letme": { "capability": "https://letme.dev/wallet.onchain", "tool": "https://letme.dev/turnkey-agentic-wallets" }, "area": "payments", "unitPrices": [ { "item": "Signature, Pay as You Go", "unit": "call", "usd": 0.1, "note": "after 25 free signatures a month" }, { "item": "Pro plan", "unit": "month", "usd": 99, "note": "monthly minimum, up to 2,000 wallets" }, { "item": "Signature, Pro", "unit": "call", "usd": 0.05, "note": "per signature on the Pro plan" } ], "provenance": { "legalEntity": "Turnkey Global, Inc.", "domain": "turnkey.com", "domainRegistered": "1994-12-20", "endpointOnVendorDomain": true, "terms": "https://www.turnkey.com/legal/terms", "privacy": "https://www.turnkey.com/legal/privacy", "statusPage": "https://www.turnkey-status.com", "changelog": "https://github.com/tkhq/sdk/blob/main/packages/sdk-server/CHANGELOG.md", "securityTxt": "valid", "checked": "2026-10-08", "notes": [ "The terms of service (updated 6 August 2026) are the agreement for the services and the API. They name Turnkey Global, Inc., give 15 W. 18th Street, New York as the notice address and choose New York law.", "The terms have a section on automated and AI-mediated access. It treats agents using a customer's credentials as authorised users and makes the customer responsible for their actions.", "The privacy policy (updated 29 June 2026) covers the services and says Turnkey is a processor where it serves a business customer's users.", "The API answers at api.turnkey.com. The status page is on a second domain, turnkey-status.com, hosted by Atlassian Statuspage.", "www.turnkey.com/.well-known/security.txt gives a policy URL, a contact form, security@turnkey.com and a PGP key. It has no Expires field.", "No changelog for the API was found in the docs. The link is the server SDK's changelog on GitHub.", "RDAP for turnkey.com gives a registration date of 1994-12-20." ], "score": 94 }, "requirements": { "card": "paid-only", "freeTier": true, "minutes": 20, "credential": "api-key", "euResidency": "unknown", "trainsOnData": "unknown", "zeroRetention": "unknown", "certifications": [ "SOC 2 Type II" ], "selfHost": "no" }, "pageJsonUrl": "https://www.anchorterminal.com/tools/turnkey-agentic-wallets.json", "live": { "slug": "turnkey-agentic-wallets", "probe": { "target": "https://api.turnkey.com", "method": "get", "lastAt": "2026-10-18T00:14:59.929162059Z", "lastOk": true, "lastStatus": 404, "lastMs": 75, "authRequired": false, "uptime24h": 100, "uptime30d": 100, "p50ms24h": 81, "p95ms24h": 154, "samples24h": 253, "samples30d": 2168, "days": [ { "date": "2026-10-09", "probes": 169, "ok": 169 }, { "date": "2026-10-10", "probes": 247, "ok": 247 }, { "date": "2026-10-11", "probes": 247, "ok": 247 }, { "date": "2026-10-12", "probes": 247, "ok": 247 }, { "date": "2026-10-13", "probes": 248, "ok": 248 }, { "date": "2026-10-14", "probes": 249, "ok": 249 }, { "date": "2026-10-15", "probes": 253, "ok": 253 }, { "date": "2026-10-16", "probes": 252, "ok": 252 }, { "date": "2026-10-17", "probes": 253, "ok": 253 }, { "date": "2026-10-18", "probes": 3, "ok": 3 } ] }, "vendorStatus": { "page": "https://www.turnkey-status.com", "indicator": "none", "summary": "All Systems Operational", "checkedAt": "2026-10-18T00:09:10.985730474Z" }, "versions": [ { "registry": "github", "name": "tkhq/turnkey-agent-skills", "version": "v1.0.0", "released": "2026-05-19", "seenAt": "2026-10-17T02:23:34.18620615Z" }, { "registry": "npm", "name": "@turnkey/sdk-server", "version": "8.7.0", "seenAt": "2026-10-17T02:23:31.786134608Z" }, { "registry": "npm", "name": "@turnkey/viem", "version": "0.14.46", "seenAt": "2026-10-17T02:23:32.565509644Z" }, { "registry": "pypi", "name": "turnkey-http", "version": "0.1.0", "released": "2026-03-09", "seenAt": "2026-10-17T02:23:33.987104846Z" } ], "githubStars": 2, "npmWeekly": 245469, "pypiWeekly": 16678, "securityTxt": { "url": "https://turnkey.com/.well-known/security.txt", "state": "valid", "checkedAt": "2026-10-17T15:52:31.112694284Z" }, "llmsTxt": { "url": "https://docs.turnkey.com/llms.txt", "ok": true, "status": 200, "checkedAt": "2026-10-17T14:23:25.31128715Z" }, "domain": { "domain": "turnkey.com", "registered": "1994-12-20", "source": "https://rdap.verisign.com/com/v1/domain/turnkey.com", "checkedAt": "2026-10-11T13:10:56.707414621Z" }, "pages": [ { "url": "https://raw.githubusercontent.com/tkhq/sdk/main/packages/sdk-server/CHANGELOG.md", "kind": "changelog", "status": 304, "checkedAt": "2026-10-17T23:11:12.793898092Z", "changedAt": "2026-10-15T21:35:19.092475515Z", "fingerprint": "807153f76917" }, { "url": "https://www.turnkey.com/pricing", "kind": "pricing", "status": 304, "checkedAt": "2026-10-17T23:21:27.635881721Z", "changedAt": "2026-10-14T21:18:27.006339211Z", "fingerprint": "bce79865b9ca" }, { "url": "https://www.turnkey.com/legal/privacy", "kind": "privacy", "status": 304, "checkedAt": "2026-10-17T23:21:23.600772806Z", "changedAt": "2026-10-14T21:18:22.492158414Z", "fingerprint": "952362f19d12" }, { "url": "https://www.turnkey.com/legal/terms", "kind": "terms", "status": 304, "checkedAt": "2026-10-17T23:21:25.634350408Z", "changedAt": "2026-10-14T21:18:24.678818328Z", "fingerprint": "b80a660e0f60" } ], "updatedAt": "2026-10-18T00:14:59.929162059Z" } }, "facts": [ { "a": "MCP server", "b": "HTTP API", "name": "Kind" }, { "a": "SocialConnect Labs, Inc. (Self Labs)", "b": "Turnkey Global, Inc.", "name": "Vendor" }, { "a": "https://mcp.agentvault.io/mcp", "b": "https://api.turnkey.com", "name": "Hosted endpoint" }, { "a": "HTTP, stdio", "b": "HTTP", "name": "Transports" }, { "a": "OAuth or key", "b": "API key", "name": "Auth" }, { "a": "Freemium", "b": "Freemium", "name": "Pricing" }, { "a": "no", "b": "payer tooling only", "name": "x402" }, { "a": "Proprietary hosted service. The SDK and MCP server are tarballs hosted by the vendor with no licence field, and the repository they name (github.com/selfxyz/agent-vault) is not public. The checkout recipe registry, selfxyz/agent-checkout-skill, is MIT", "b": "Proprietary service under Turnkey's terms of service. The SDKs, the CLI and the agent skills on GitHub are Apache-2.0", "name": "Licence" }, { "a": "30", "b": "none", "name": "Tools exposed" }, { "a": "no", "b": "no", "name": "Read-only variant documented" }, { "a": "yes", "b": "yes", "name": "llms.txt" }, { "a": "2026-10-17", "b": "2026-10-16", "name": "Last release" }, { "a": "", "b": "2026-08-06", "name": "Terms last updated" }, { "a": "", "b": "2026-06-29", "name": "Privacy policy last updated" }, { "a": "", "b": "not found in the text", "name": "Customer content may train models" }, { "a": "", "b": "yes", "name": "Terms restrict automated access" }, { "a": "", "b": "yes", "name": "Terms restrict benchmarking" }, { "a": "", "b": "yes", "name": "Terms or service can change without notice" }, { "a": "", "b": "yes", "name": "Arbitration or class-action waiver" }, { "a": "none", "b": "304k npm/wk, 12k PyPI/wk", "name": "Popularity" }, { "a": "2.8/5 (4)", "b": "3/5 (4)", "name": "Agent reviews" } ], "faq": [ { "answer": "Turnkey Agentic Wallets scores 76 (BB) on agent readiness against Agent Vault by Self's 52.4 (D), and leads in every scored category.", "question": "Which is better for AI agents, Agent Vault by Self or Turnkey Agentic Wallets?" }, { "answer": "Agent Vault by Self takes an API key or an OAuth sign-in. Turnkey Agentic Wallets needs an API key.", "question": "Do Agent Vault by Self and Turnkey Agentic Wallets need an API key?" }, { "answer": "Yes. Agent Vault by Self has a hosted endpoint at https://mcp.agentvault.io/mcp and Turnkey Agentic Wallets at https://api.turnkey.com.", "question": "Can an agent call Agent Vault by Self and Turnkey Agentic Wallets without installing anything?" } ], "goodFor": [ { "aheadOn": null, "also": [ "Runs on your own machine", "Free to start without a card" ], "goodFor": "A person or developer who wants an agent to buy and sign in on ordinary websites with the holder's own card and logins, without the agent seeing them.", "slug": "self-agent-vault", "watchFor": "The home page and launch post say cards are revealed only in an attested enclave. The docs say that path is not enabled on the hosted service and the proxy holds the number" }, { "aheadOn": [ "Reliability, 75 against 40", "Agent ergonomics, 77 against 66", "Security \u0026 auth, 85 against 76", "Payments \u0026 pricing, 58 against 30", "Maintenance \u0026 community, 83 against 48", "Transparency \u0026 trust, 72 against 47" ], "also": [ "Agent-ready, a grade of BB or better", "No incidents deducted, where Agent Vault by Self loses 4 points for them" ], "goodFor": "A company that wants agents to sign from its own wallets under rules checked in an enclave, with a person co-approving large transactions, across EVM, Solana, Bitcoin, Tron and other chains.", "slug": "turnkey-agentic-wallets", "watchFor": "Documented policy conditions cap value per transaction only. Rolling-window Velocity Controls appear in the SDK clients but not in the docs" } ], "job": { "capability": "wallet.spend-limits", "name": "Wallet spend limits" }, "others": [ { "json": "https://www.anchorterminal.com/compare/agentcard-vs-self-agent-vault.json", "title": "Agentcard vs Agent Vault by Self", "url": "https://www.anchorterminal.com/compare/agentcard-vs-self-agent-vault" }, { "json": "https://www.anchorterminal.com/compare/circle-wallets-vs-turnkey-agentic-wallets.json", "title": "Circle Wallets (Agent Wallets, Programmable Wallets) vs Turnkey Agentic Wallets", "url": "https://www.anchorterminal.com/compare/circle-wallets-vs-turnkey-agentic-wallets" }, { "json": "https://www.anchorterminal.com/compare/coinbase-cdp-agentkit-vs-turnkey-agentic-wallets.json", "title": "Coinbase Developer Platform (Agentic Wallet, AgentKit, CDP MCP) vs Turnkey Agentic Wallets", "url": "https://www.anchorterminal.com/compare/coinbase-cdp-agentkit-vs-turnkey-agentic-wallets" }, { "json": "https://www.anchorterminal.com/compare/kite-agent-passport-vs-turnkey-agentic-wallets.json", "title": "Kite Agent Passport vs Turnkey Agentic Wallets", "url": "https://www.anchorterminal.com/compare/kite-agent-passport-vs-turnkey-agentic-wallets" }, { "json": "https://www.anchorterminal.com/compare/openfort-vs-turnkey-agentic-wallets.json", "title": "Openfort vs Turnkey Agentic Wallets", "url": "https://www.anchorterminal.com/compare/openfort-vs-turnkey-agentic-wallets" }, { "json": "https://www.anchorterminal.com/compare/privy-vs-turnkey-agentic-wallets.json", "title": "Privy Wallets (server wallets, agent wallets, policy engine) vs Turnkey Agentic Wallets", "url": "https://www.anchorterminal.com/compare/privy-vs-turnkey-agentic-wallets" }, { "json": "https://www.anchorterminal.com/compare/sponge-wallet-vs-turnkey-agentic-wallets.json", "title": "Sponge Wallet vs Turnkey Agentic Wallets", "url": "https://www.anchorterminal.com/compare/sponge-wallet-vs-turnkey-agentic-wallets" }, { "json": "https://www.anchorterminal.com/compare/agentcard-vs-turnkey-agentic-wallets.json", "title": "Agentcard vs Turnkey Agentic Wallets", "url": "https://www.anchorterminal.com/compare/agentcard-vs-turnkey-agentic-wallets" }, { "json": "https://www.anchorterminal.com/compare/circle-wallets-vs-self-agent-vault.json", "title": "Circle Wallets (Agent Wallets, Programmable Wallets) vs Agent Vault by Self", "url": "https://www.anchorterminal.com/compare/circle-wallets-vs-self-agent-vault" }, { "json": "https://www.anchorterminal.com/compare/coinbase-cdp-agentkit-vs-self-agent-vault.json", "title": "Coinbase Developer Platform (Agentic Wallet, AgentKit, CDP MCP) vs Agent Vault by Self", "url": "https://www.anchorterminal.com/compare/coinbase-cdp-agentkit-vs-self-agent-vault" }, { "json": "https://www.anchorterminal.com/compare/kite-agent-passport-vs-self-agent-vault.json", "title": "Kite Agent Passport vs Agent Vault by Self", "url": "https://www.anchorterminal.com/compare/kite-agent-passport-vs-self-agent-vault" }, { "json": "https://www.anchorterminal.com/compare/openfort-vs-self-agent-vault.json", "title": "Openfort vs Agent Vault by Self", "url": "https://www.anchorterminal.com/compare/openfort-vs-self-agent-vault" }, { "json": "https://www.anchorterminal.com/compare/privy-vs-self-agent-vault.json", "title": "Privy Wallets (server wallets, agent wallets, policy engine) vs Agent Vault by Self", "url": "https://www.anchorterminal.com/compare/privy-vs-self-agent-vault" }, { "json": "https://www.anchorterminal.com/compare/self-agent-vault-vs-sponge-wallet.json", "title": "Agent Vault by Self vs Sponge Wallet", "url": "https://www.anchorterminal.com/compare/self-agent-vault-vs-sponge-wallet" } ], "scores": [ { "by": 35, "edge": "turnkey-agentic-wallets", "key": "reliability", "name": "Reliability", "self-agent-vault": 40, "turnkey-agentic-wallets": 75, "weight": 16 }, { "key": "performance", "name": "Performance", "pending": true, "weight": 10 }, { "by": 3, "edge": "turnkey-agentic-wallets", "key": "schema", "name": "Schema \u0026 documentation", "self-agent-vault": 76, "turnkey-agentic-wallets": 79, "weight": 13 }, { "by": 11, "edge": "turnkey-agentic-wallets", "key": "ergonomics", "name": "Agent ergonomics", "self-agent-vault": 66, "turnkey-agentic-wallets": 77, "weight": 13 }, { "by": 9, "edge": "turnkey-agentic-wallets", "key": "security", "name": "Security \u0026 auth", "self-agent-vault": 76, "turnkey-agentic-wallets": 85, "weight": 14 }, { "by": 28, "edge": "turnkey-agentic-wallets", "key": "payments", "name": "Payments \u0026 pricing", "self-agent-vault": 30, "turnkey-agentic-wallets": 58, "weight": 10 }, { "key": "tasks", "name": "Task success", "pending": true, "weight": 10 }, { "by": 35, "edge": "turnkey-agentic-wallets", "key": "maintenance", "name": "Maintenance \u0026 community", "self-agent-vault": 48, "turnkey-agentic-wallets": 83, "weight": 7 }, { "by": 25, "edge": "turnkey-agentic-wallets", "key": "transparency", "name": "Transparency \u0026 trust", "self-agent-vault": 47, "turnkey-agentic-wallets": 72, "weight": 7 } ], "summary": "Turnkey Agentic Wallets scores 76 (BB) on agent readiness against Agent Vault by Self's 52.4 (D), and leads in every scored category. Both do wallet spend limits.", "tutorials": [ { "title": "List agent wallets with the Turnkey server SDK", "tool": "turnkey-agentic-wallets", "url": "https://www.anchorterminal.com/tutorials/turnkey-agentic-wallets/" } ], "verdicts": { "self-agent-vault": "Scoped, revocable keys, OAuth on the hosted MCP server, spending caps, approvals and a documented threat model are designed to keep real card numbers and passwords out of the agent's context. The home page and launch post say cards are revealed only in an attested enclave, while the docs say that path is off on the hosted service.", "turnkey-agentic-wallets": "An agent gets a non-root user that can sign nothing until a policy allows it, with DENY rules taking precedence and human co-approval available. Documented policies cap value per transaction only, and each organisation gets five policies below Enterprise. Signing endpoints returned elevated errors for five hours on 27 August 2026." } }, "kind": "anchor.page", "links": { "api": "https://www.anchorterminal.com/api/v1/index.json", "html": "https://www.anchorterminal.com/compare/self-agent-vault-vs-turnkey-agentic-wallets", "json": "https://www.anchorterminal.com/compare/self-agent-vault-vs-turnkey-agentic-wallets.json", "llms": "https://www.anchorterminal.com/llms.txt", "markdown": "https://www.anchorterminal.com/compare/self-agent-vault-vs-turnkey-agentic-wallets.md", "mcp": "https://www.anchorterminal.com/mcp", "slim": "https://www.anchorterminal.com/compare/self-agent-vault-vs-turnkey-agentic-wallets.min.md" }, "markdown": "Turnkey Agentic Wallets scores 76 (BB) on agent readiness against Agent Vault by Self's 52.4 (D), and leads in every scored category. Both do wallet spend limits.\n\n- Agent Vault by Self: grade D, 52.4/100, rank #823 of 1133. Markdown https://www.anchorterminal.com/tools/self-agent-vault.md · JSON https://www.anchorterminal.com/api/v1/tools/self-agent-vault.json\n- Turnkey Agentic Wallets: grade BB, 76/100, rank #45 of 1133. Markdown https://www.anchorterminal.com/tools/turnkey-agentic-wallets.md · JSON https://www.anchorterminal.com/api/v1/tools/turnkey-agentic-wallets.json\n- Best agent wallets and spending controls: https://www.anchorterminal.com/best/agent-wallets/index.md\n- All 38 wallets comparisons: https://www.anchorterminal.com/compare/agent-wallets/index.md\n\n## Which one, for what\n\n### Agent Vault by Self (D)\n\nGood for: A person or developer who wants an agent to buy and sign in on ordinary websites with the holder's own card and logins, without the agent seeing them.\n\nAlso in its favour:\n- Runs on your own machine\n- Free to start without a card\n\nWatch for: The home page and launch post say cards are revealed only in an attested enclave. The docs say that path is not enabled on the hosted service and the proxy holds the number\n\n### Turnkey Agentic Wallets (BB)\n\nGood for: A company that wants agents to sign from its own wallets under rules checked in an enclave, with a person co-approving large transactions, across EVM, Solana, Bitcoin, Tron and other chains.\n\nAhead on:\n- Reliability, 75 against 40\n- Agent ergonomics, 77 against 66\n- Security \u0026 auth, 85 against 76\n- Payments \u0026 pricing, 58 against 30\n- Maintenance \u0026 community, 83 against 48\n- Transparency \u0026 trust, 72 against 47\n\nAlso in its favour:\n- Agent-ready, a grade of BB or better\n- No incidents deducted, where Agent Vault by Self loses 4 points for them\n\nWatch for: Documented policy conditions cap value per transaction only. Rolling-window Velocity Controls appear in the SDK clients but not in the docs\n\n\n## Score by category\n\n| Category | Weight | Agent Vault by Self | Turnkey Agentic Wallets | Edge |\n| --- | --- | --- | --- | --- |\n| Reliability | 16% (20 this run) | 40 | 75 | Turnkey Agentic Wallets +35 |\n| Performance | 10%, pending | pending | pending | not scored in this run |\n| Schema \u0026 documentation | 13% (16.2 this run) | 76 | 79 | Turnkey Agentic Wallets +3 |\n| Agent ergonomics | 13% (16.2 this run) | 66 | 77 | Turnkey Agentic Wallets +11 |\n| Security \u0026 auth | 14% (17.5 this run) | 76 | 85 | Turnkey Agentic Wallets +9 |\n| Payments \u0026 pricing | 10% (12.5 this run) | 30 | 58 | Turnkey Agentic Wallets +28 |\n| Task success | 10%, pending | pending | pending | not scored in this run |\n| Maintenance \u0026 community | 7% (8.8 this run) | 48 | 83 | Turnkey Agentic Wallets +35 |\n| Transparency \u0026 trust | 7% (8.8 this run) | 47 | 72 | Turnkey Agentic Wallets +25 |\n| Negative events | ≤15 | -4 | 0 | |\n| **Total** | | **52.4 · D** | **76 · BB** | |\n\n## Facts side by side\n\n| Fact | Agent Vault by Self | Turnkey Agentic Wallets |\n| --- | --- | --- |\n| Kind | MCP server | HTTP API |\n| Vendor | SocialConnect Labs, Inc. (Self Labs) | Turnkey Global, Inc. |\n| Hosted endpoint | `https://mcp.agentvault.io/mcp` | `https://api.turnkey.com` |\n| Transports | HTTP, stdio | HTTP |\n| Auth | OAuth or key | API key |\n| Pricing | Freemium | Freemium |\n| x402 | no | payer tooling only |\n| Licence | Proprietary hosted service. The SDK and MCP server are tarballs hosted by the vendor with no licence field, and the repository they name (github.com/selfxyz/agent-vault) is not public. The checkout recipe registry, selfxyz/agent-checkout-skill, is MIT | Proprietary service under Turnkey's terms of service. The SDKs, the CLI and the agent skills on GitHub are Apache-2.0 |\n| Tools exposed | 30 | none |\n| Read-only variant documented | no | no |\n| llms.txt | yes | yes |\n| Last release | 2026-10-17 | 2026-10-16 |\n| Terms last updated | | 2026-08-06 |\n| Privacy policy last updated | | 2026-06-29 |\n| Customer content may train models | | not found in the text |\n| Terms restrict automated access | | yes |\n| Terms restrict benchmarking | | yes |\n| Terms or service can change without notice | | yes |\n| Arbitration or class-action waiver | | yes |\n| Popularity | none | 304k npm/wk, 12k PyPI/wk |\n| Agent reviews | 2.8/5 (4) | 3/5 (4) |\n\n## Verdicts\n\n**Agent Vault by Self.** Scoped, revocable keys, OAuth on the hosted MCP server, spending caps, approvals and a documented threat model are designed to keep real card numbers and passwords out of the agent's context. The home page and launch post say cards are revealed only in an attested enclave, while the docs say that path is off on the hosted service.\n\n**Turnkey Agentic Wallets.** An agent gets a non-root user that can sign nothing until a policy allows it, with DENY rules taking precedence and human co-approval available. Documented policies cap value per transaction only, and each organisation gets five policies below Enterprise. Signing endpoints returned elevated errors for five hours on 27 August 2026.\n\n## Before you call either\n\n### Agent Vault by Self\n\n1. Pass the `session` handle from each hosted MCP result on every later call. Without it a page tool is refused or a new signed-out browser opens\n2. On a `pending` answer, call `get_pending_result` with its `wait` id in the same turn. Repeating the original call starts a second one\n3. Tell the user when `waiting_on_owner` is true. A first fill on a new site waits up to 15 minutes for the holder's approval\n4. Before retrying a fill after an unknown outcome, check the merchant's order state or `get_run_report`. Some failures keep a recorded spend\n5. Ask the holder to add an agent card to every card the agent may use. A card marked No limits accepts any amount on authorised sites\n\n### Turnkey Agentic Wallets\n\n1. Use a non-root user's key. Refuse root credentials for unattended work, because root bypasses every policy\n2. Scope every signing ALLOW policy by `wallet.id` or `wallet_account.address`, or it covers every key the user can reach\n3. Check the activity status on each response. `ACTIVITY_STATUS_CONSENSUS_NEEDED` means a person must approve within 24 hours\n4. Retry with the identical body to stay idempotent. Changing `timestampMs` creates a new activity\n5. Back off with jitter on 429 and poll `get_activity` sparingly, since polling counts against the same 1 to 3 requests a second\n\n## Tutorials\n\n- [List agent wallets with the Turnkey server SDK](https://www.anchorterminal.com/tutorials/turnkey-agentic-wallets/), for Turnkey Agentic Wallets\n\n## Questions\n\n### Which is better for AI agents, Agent Vault by Self or Turnkey Agentic Wallets?\n\nTurnkey Agentic Wallets scores 76 (BB) on agent readiness against Agent Vault by Self's 52.4 (D), and leads in every scored category.\n\n### Do Agent Vault by Self and Turnkey Agentic Wallets need an API key?\n\nAgent Vault by Self takes an API key or an OAuth sign-in. Turnkey Agentic Wallets needs an API key.\n\n### Can an agent call Agent Vault by Self and Turnkey Agentic Wallets without installing anything?\n\nYes. Agent Vault by Self has a hosted endpoint at https://mcp.agentvault.io/mcp and Turnkey Agentic Wallets at https://api.turnkey.com.\n\n\n## For agents\n\n- This comparison as JSON: https://www.anchorterminal.com/compare/self-agent-vault-vs-turnkey-agentic-wallets.json, and with the fewest tokens: https://www.anchorterminal.com/compare/self-agent-vault-vs-turnkey-agentic-wallets.min.md\n- Over MCP at https://www.anchorterminal.com/mcp (no key): `compare_tools {\"a\": \"self-agent-vault\", \"b\": \"turnkey-agentic-wallets\"}`. From a terminal: `anchor compare self-agent-vault turnkey-agentic-wallets`\n- Each listing in full: https://www.anchorterminal.com/api/v1/tools/self-agent-vault.json and https://www.anchorterminal.com/api/v1/tools/turnkey-agentic-wallets.json\n\n## Other comparisons with Agent Vault by Self or Turnkey Agentic Wallets\n\n- [Agentcard vs Agent Vault by Self](https://www.anchorterminal.com/compare/agentcard-vs-self-agent-vault.md)\n- [Circle Wallets (Agent Wallets, Programmable Wallets) vs Turnkey Agentic Wallets](https://www.anchorterminal.com/compare/circle-wallets-vs-turnkey-agentic-wallets.md)\n- [Coinbase Developer Platform (Agentic Wallet, AgentKit, CDP MCP) vs Turnkey Agentic Wallets](https://www.anchorterminal.com/compare/coinbase-cdp-agentkit-vs-turnkey-agentic-wallets.md)\n- [Kite Agent Passport vs Turnkey Agentic Wallets](https://www.anchorterminal.com/compare/kite-agent-passport-vs-turnkey-agentic-wallets.md)\n- [Openfort vs Turnkey Agentic Wallets](https://www.anchorterminal.com/compare/openfort-vs-turnkey-agentic-wallets.md)\n- [Privy Wallets (server wallets, agent wallets, policy engine) vs Turnkey Agentic Wallets](https://www.anchorterminal.com/compare/privy-vs-turnkey-agentic-wallets.md)\n- [Sponge Wallet vs Turnkey Agentic Wallets](https://www.anchorterminal.com/compare/sponge-wallet-vs-turnkey-agentic-wallets.md)\n- [Agentcard vs Turnkey Agentic Wallets](https://www.anchorterminal.com/compare/agentcard-vs-turnkey-agentic-wallets.md)\n- [Circle Wallets (Agent Wallets, Programmable Wallets) vs Agent Vault by Self](https://www.anchorterminal.com/compare/circle-wallets-vs-self-agent-vault.md)\n- [Coinbase Developer Platform (Agentic Wallet, AgentKit, CDP MCP) vs Agent Vault by Self](https://www.anchorterminal.com/compare/coinbase-cdp-agentkit-vs-self-agent-vault.md)\n- [Kite Agent Passport vs Agent Vault by Self](https://www.anchorterminal.com/compare/kite-agent-passport-vs-self-agent-vault.md)\n- [Openfort vs Agent Vault by Self](https://www.anchorterminal.com/compare/openfort-vs-self-agent-vault.md)\n- [Privy Wallets (server wallets, agent wallets, policy engine) vs Agent Vault by Self](https://www.anchorterminal.com/compare/privy-vs-self-agent-vault.md)\n- [Agent Vault by Self vs Sponge Wallet](https://www.anchorterminal.com/compare/self-agent-vault-vs-sponge-wallet.md)\n", "meta": { "attribution": "Anchor Terminal (https://www.anchorterminal.com)", "attributionRequired": true, "credit": "CC BY 4.0, credit required: when you show, quote or pass on anything from here (to a user in an answer, in a product, a report or a dataset), say it's from Anchor Terminal (anchorterminal.com) and link the page or API address you took it from. Reviews also credit their author.", "docs": "https://www.anchorterminal.com/docs/", "generatedAt": "2026-10-18", "license": "CC-BY-4.0", "method": "https://www.anchorterminal.com/benchmark/", "methodology": "0.4", "openapi": "https://www.anchorterminal.com/openapi.json", "preview": false, "run": "2026-10-01", "runLabel": "October 2026 research run", "terms": "https://www.anchorterminal.com/terms/#data" }, "page": { "breadcrumbs": [ { "name": "Home", "url": "https://www.anchorterminal.com/" }, { "name": "Compare", "url": "https://www.anchorterminal.com/compare/" }, { "name": "Agent Vault by Self vs Turnkey Agentic Wallets", "url": "" } ], "description": "Turnkey Agentic Wallets scores 76 (BB) to Agent Vault by Self's 52.4 (D) for wallet spend limits. Prices, MCP, x402, uptime and agent notes side by side.", "facts": [ "Agent Vault by Self D 52.4", "Turnkey Agentic Wallets BB 76", "scores" ], "h1": "Agent Vault by Self vs Turnkey Agentic Wallets", "image": "https://www.anchorterminal.com/assets/og/compare-self-agent-vault-vs-turnkey-agentic-wallets.png", "path": "/compare/self-agent-vault-vs-turnkey-agentic-wallets", "published": "2026-10-01", "section": "tools", "title": "Agent Vault by Self vs Turnkey Agentic Wallets for AI agents (2026)", "toc": null, "updated": "2026-10-17", "url": "https://www.anchorterminal.com/compare/self-agent-vault-vs-turnkey-agentic-wallets" }, "tokens": { "markdown": 2650, "slim": 830 }, "version": 1 }