Give it your wallet.
Not your trust.

Praxis is a conversational agent for Solana you can safely hand signing power to. An on-chain policy — not a backend promise — decides what it can do. Say what you want in plain English; every action is checked against your limits before you sign, and you can revoke it in one transaction.

Launch demo app View walkthrough

Caps enforced on-chainRevoke in one transactionCan't exceed your limits

praxis.app / c / x7q1

7xK…Bgh2 · 4.82 SOL

YOU · 2:14 PM

›

— 01 / Why Praxis

To be useful, it needs
your signing power.

And that's the whole problem. A bug, a bad parse, a prompt injection, a compromised backend — any one of them, and an agent holding your keys can drain you. So far the only answers have been bad ones.

The two old answers

Babysit every action

Approve each one by hand. Safe — and now it's just a slower wallet. The agent was supposed to save you the clicks.

Hand over the keys

Let it sign whatever it wants. Useful — until the day a bug, a bad parse, or an attacker turns that power against you.

Enforced by Aegis, on-chain

An envelope the agent can't cross.

Per-transaction and daily spend caps
Allow-listed recipients, mints, and programs
A session key with a hard expiry
Instant revoke — the key dies on-chain

Ask it to send 50 SOL when your cap is 5, and the transaction simply fails. Not because our server said no — because the Solana program won't sign it.

The agent proposes. The chain disposes.

— 02 / Use cases

Just say it.

Praxis is built around one input field. Whatever you'd do on Solana, you can ask for in a sentence — and Praxis turns supported intents into signable actions, while blocking anything it cannot enforce.

›send 0.5 sol to savings

Send to anyone.

Aliases, .sol domains, or pasted addresses. Praxis remembers who you've transacted with and surfaces them by name.

›swap 100 usdc for jup at best rate

Preview a swap.

Swap intents are parsed and policy-checked against verified mints. Jupiter execution is documented as the next phase, not hidden behind a fake sign flow.

— stub in v0.1

›what's bonk doing this week

Research, distilled.

On-chain volume, price action, holder concentration. No "ape now" calls — just the data you'd dig for, summarized.

— Q2 2026

›bridge 0.5 sol to base as eth

Bridge later.

Cross-chain routing is intentionally outside v0.1. It belongs after wallet auth, durable state, and enforceable transfer flows are solid.

— not in v0.1

›dca 100 usdc into sol weekly for 3 months

Automate later.

Scheduled actions need a reliable crank and the same Aegis envelope. They are a product direction, not a demo feature.

— not in v0.1

›save this address as tom

A book of known people.

Praxis builds an address book from your transaction history and explicit saves. Ambiguity always asks before acting.

— 03 / Inside the app

Built for the way
you actually trade.

One conversation per intent. Supported actions end in a policy verdict before signing; unsupported routes stay blocked. No surprises, no hidden steps, no “trust me.”

praxis.app / app

ThreadSend to savings

4.82 SOL

You · 2:08 PM

›send 100 usdc to savings

Sent 100.00 USDC to savings

3vK2…X9aF · confirmed in 0.5s · slot 311,482,871

New · 2:14 PM

You · 2:14 PM

›send 0.5 sol to savings

Praxis · 2:14 PM

Found savings · 9bLm…K3pQ · 3 prior transactions, last 6 days ago.

Transaction previewAwaiting signature

Send

0.50 SOL

≈ $93.21 USD

savings

9bLm…K3pQ

Network fee: ~$0.00012
Simulation: Will succeed
After this tx: 4.32 SOL remaining · $805.78

›send 50 sol to savings ↵ to send

⌘K commands · ⌘/ help · ⇧⏎ newlinestructured intent

— 04 / How it works

Three steps.
One conversation.

Type

You write what you want.

Natural language. Misspellings, slang, half-formed thoughts. Praxis parses intent the way a senior trader skims a Telegram message — not the way SQL parses a query. Ambiguity prompts a follow-up; certainty proceeds.

ii.

Verify

Praxis proposes a structured action.

Every action is simulated against live chain state before you see it. If a transaction will fail, slip, or pay fees that don't feel right, Praxis tells you — and explains why. The agent is the interpreter. The safety layer is the executor.

iii.

Sign

You confirm. It executes.

In the live demo, the scoped agent key can only sign Aegis instructions from the policy vault. Owner/admin actions are the production wallet-signed path; the agent never gets unrestricted wallet authority.

— 05 / Capabilities

What's under
the hood.

Intent parsing

Multi-turn conversation memory. Aliases, fuzzy token matching, multi-step actions chained in a single line.

Simulation-first

Every transaction simulated against live state. Slippage caps, fee bounds, and outcome previews — all enforced.

Swap policy preview

Swap intents are parsed and checked against verified-mint policy. Executable Jupiter routing is the next implementation phase.

Stub in v0.1

Scoped custody model

Aegis uses a program-owned vault and a revocable agent key for the demo. Owner-signed wallet admin is the production path.

Address book

Auto-suggested from your transaction history. Explicit saves. Ambiguity resolved through clarifying questions.

Ships v0.1

Market research

On-chain volume, price action, holder concentration, and liquidity context. Data surfaced — never financial advice.

Ships v0.1

Scoped automation

Conditional and scheduled actions within session-key limits you set. DCA, rebalancing, conditional trades.

Q2 2026

Cross-chain

Future bridge work must stay owner-signed or gain a real far-side enforcement story. It is not part of the agent path today.

Later

Power-user mode

Keyboard-first interface. Command palette. Saved prompts. Custom slippage and gas defaults per asset.

Q3 2026

— 06 / Principles

What we
won't do.

Conversational interfaces in crypto are easy to build badly and dangerous when built carelessly. These are the lines we draw and won't cross — even when it would be convenient.

We will not grant unbounded power.

The demo uses a program-owned Aegis vault and a scoped agent key. Production owner actions must be wallet-signed, and any autonomous agent authority must stay inside an on-chain envelope it cannot cross.

ii.

We will not guess.

If your intent is ambiguous, Praxis asks. Two Toms in your contacts? It asks which. Token symbol collides? It asks which. Better one extra question than one wrong transaction. The agent is the interpreter; you remain the decider.

iii.

We will not chase every token.

Verified tokens only by default. Unverified mints require an eyes-open override and a second confirmation. The agent is conservative by construction. Memecoin sniping is not the product. Not yet, perhaps not ever.

iv.

We will not pretend to be your advisor.

Praxis surfaces data and executes verified actions. It does not tell you to buy, sell, or hold. Markets are markets; decisions remain yours. The product is a sharper tool, not a louder voice.

We will not hide the fees.

Network fees and product fees must be surfaced before you sign. No hidden spreads, no "convenience markups," and no pretend swap execution path until the program can enforce it.

— 07 / What's next

Today it sends.
Next, it acts.

The send flow already proves the thesis: an agent can hold signing power without being able to misuse it. Everything next widens what it can do — without ever leaving the envelope.

Recurring & scheduled action

DCA, subscriptions, payroll, treasury sweeps. This is the first thing you genuinely can't do safely any other way — the agent acts while you're asleep, inside caps it still can't exceed. The envelope is what makes “set it and forget it” sane instead of reckless.

In design

Swaps the chain enforces

Live Jupiter routing — but only once mint, program, and value limits live inside the swap instruction itself. A swap that could slip outside the envelope would break the whole promise, so it ships when the program can police it, not a day sooner.

Horizon

Hands for the agent economy

Open the same Aegis envelope to other autonomous agents. Anything that needs to pay, rebalance, or transact on-chain can borrow Praxis's scoped, revocable authority instead of a naked private key. Praxis becomes the safe hands the agent economy moves through.

One rule never changes: new power has to make the safety stronger — it never opens an escape hatch.

Scoped signer

Revocable

Agent authority dies on-chain when revoked

Simulated

T1-T6

LiteSVM enforcement gate covers edge cases

Current scope

SOL

Native transfers enforced by Aegis

Swap status

Jupiter execution is not implemented yet

— Beta

Stop clicking.
Start typing.

Walk the core flow: ask for a SOL send, preview the Aegis verdict, confirm an allowed transfer, reject an over-limit request, and revoke the agent key.

Launch demo app Read the principles