DocsReference

Security

How museli protects your wallet, and the risks that remain.

Four independent layers sit between a request and your funds.

What museli does

Guardrails on the server. Checked when an action is planned and again right before signing, with fresh prices and balances.
No outside transfers. museli never builds a transaction that sends funds to an address outside your wallet and the allowed protocols.
Keys stored as hashes. Your museli key is shown once. Only a SHA-256 hash is stored, and you can revoke it any time.
Revocable signing. The session signer is added through Privy and can be removed in one tap.
Verified results. Each transaction is checked on Base before an action counts as confirmed.
Rate limits. The MCP server allows 40 requests per minute per key.

Smart contract risk in Aave, Aerodrome and the swap routes.
Market risk: prices move, and liquidity positions can lose value against holding.
Slippage up to the stated limits: 0.5% on swaps, 1% on liquidity.
An agent can misunderstand a request. Keep caps low and approvals on until you trust the setup.

Start small

museli is in early access and has not had an external audit yet. Only use funds you are comfortable putting at risk.