Private wallet for AI agents · Solana × Monero
Your agent pays.
The chain forgets.
Give your agent a capped Monero balance instead of your keys. It shops only at verified merchants, and nothing it buys leads back to your wallet.
01 / How it works
Money in.
Nothing out.
Four steps, one loop. You fund once from your own wallet, your agent spends inside limits you set, and the trail stops at the deposit.
- 01 · YouFund
Connect Phantom or Solflare and send SOL or USDC. One signature, no new seed phrase.
- 02 · LetheShield
The deposit settles into Monero inside your vault. The public trail stops here.
- 03 · Your agentSpend
Tell it what to buy. It pays verified merchants from the vault and never goes above your caps.
- 04 · NobodyForget
Deliveries are sealed to your encrypted locker. No receipt points back to your wallet.
- 01FundFrom Phantom
- 02ShieldSettles in XMR
- 03SpendVerified merchants
- 04ForgetNo receipts kept
02 / The vault
One vault.
A hard ceiling.
Your agent never touches your keys. It gets a Monero vault with limits it can't change, even when a prompt tells it to.
- Per order
- $50
- Per day
- $150
- Asks you above
- $25
- Merchants
- Verified only
- Kill switch
- One tap
- Deliveries
- Encrypted
Starting limits. Change them any time in the app.
Your agent gets an allowance, not your keys. It shops only where it's safe, pays in Monero, and leaves nothing behind.
03 / The store
Everything an agent needs.
Nothing that can rob it.
Infra, gift cards from 18 brands, AI and streaming plans, and anything else from any online store through the concierge. Agents keep getting walked into fake hosts and cloned swap sites. Lethe's agent can't even see a merchant until it is verified and bonded, so there's nothing to fall for.
04 / Why now
$6.3B walked out
through an AI tool.
The biggest exchange hack ever started with one laptop and an AI tool that could reach the wallets. Your agent should never hold your keys. It should hold an allowance.
- 01Keys stay in Phantom
Lethe never asks for a seed phrase or a private key. The agent gets a vault, not your wallet.
- 02Limits live in the vault
A prompt injection can change what the agent wants. It can't change what the vault allows.
- 03One-tap kill switch
Freeze the vault from the app. Every order stops until you unfreeze it.
05 / Build
One key.
Any agent.
Plug Lethe into Claude Code, Claude Desktop, Cursor or your own stack. The MCP server gives your agent five tools and one rule: stay inside the vault.
- ɱBalanceThe vault in XMR and USD
- ≡CatalogVerified merchants only
- ›_QuoteA sentence in, a priced order out
- ✓BuyFills a quote inside your limits
- ◷OrdersHistory without the secrets
- ⌂LockerDeliveries encrypted to your wallet
Connect your AI client.
Create an API key in the app, then add the Lethe MCP server to your client.
Run in your terminal, then restart Claude Code.
API keys inherit your vault policy. A key can quote and buy inside your limits. It can never raise them, withdraw, or unfreeze the vault. Key permissions ↗
06 / $LETHE
Every order
buys back $LETHE.
A flat 1% fee on every order. Half of it buys $LETHE and burns it. The rest pays stakers in XMR and backs the merchant insurance pool.
- 01Merchants bond $LETHE
A merchant has to bond $LETHE to get listed. If a scam is proven, the bond is slashed and the buyer is refunded from it.
- 02Stakers earn in XMR
Fee share is paid in Monero to a Monero address of your choice, not to the wallet you staked from.
- 03Holders pay less
Holding $LETHE lowers the fee on your own vault, down to 0.5%.
Where the 1% goes
$LETHE isn't live yet. Any token calling itself $LETHE before the address is posted here is fake.
07 / Questions
Ask what
you'd ask a bank.
What does Lethe actually see?
Your wallet address, your vault balance and the orders your agent places. Deliveries like passwords, eSIM codes and configs are shown once and encrypted to your wallet in the locker. We don't keep a readable copy.
Can my agent drain my wallet?
No. The agent never touches Phantom. It can only spend the vault balance, inside the limits you set, and you can freeze it at any time.
Why Monero?
Solana is public by design. Because the vault settles in XMR, what your agent spends isn't a public trail back to the wallet that funded it.
What is sandbox mode?
The public sandbox runs the full flow: deposit, limits, quotes, orders and the locker. Fulfillment is simulated and no real funds move. Mainnet merchants are being onboarded now.
Which wallets work?
Phantom, Solflare, Backpack and any Solana wallet that supports Wallet Standard. Signing in is a message signature. It can't move funds.
Can I withdraw native XMR?
Yes. You can withdraw any unspent balance to your own Monero address, either a standard address or a subaddress.
Is $LETHE live?
Not yet. The contract will be posted on this page and in the app at launch. Don't trust an address you didn't get from Lethe's own pages.