DCP is one app that controls how AI agents use wallets, credentials, identity, and private data. Agents get access inside rules you set. You stay in control.

Is DCP only a wallet?

No. DCP can work as a wallet control surface for agents, but it also controls credentials, identity, private data, remote-agent access, limits, approvals, and logs.

Do agents ask me for everything?

No. You set rules once. Actions inside those rules run automatically. Only exceptions ask for approval.

Where are my keys stored?

On your machine. DCP is local-first. Wallet keys stay in your local vault, not inside the agent and not on our servers.

Can I use DCP with multiple agents?

Yes. Each agent gets its own rules, limits, approvals, and logs, all from one dashboard.

Can DCP work with remote agents?

Yes. Your agent can run on a VPS or cloud machine while your vault stays local. Approvals come through Desktop, Telegram, or the DCP mobile app.

What happens if an agent is compromised?

The agent can only act inside the access you gave it. You can revoke access anytime, and every action is logged.

The core is free and open source (Apache-2.0). Desktop app, agent runtime, CLI, and source code are all free.

Which blockchains does DCP support?

DCP supports Solana. You can generate a Solana wallet or import one. Keys are encrypted locally with XChaCha20. DCP is non-custodial . You control everything.

How do AI agent spending limits work?

DCP lets you set daily caps and per-action limits for each agent. If an agent tries to spend more than the limit, the action is blocked or sent to you for approval. You can adjust limits anytime.

Is DCP better than .env files for AI agents?

Yes. With .env files, agents read your keys directly. One prompt injection leaks everything. DCP keeps credentials local and runs access inside rules. Agents get results, not raw keys.

Can I store credentials like OpenAI and Anthropic keys in DCP?

Yes. Store any credential: OpenAI, Anthropic, Stripe, AWS, custom keys. Your AI agents request access, rules decide, and the agent gets results, never the raw key.

Does DCP work with Claude, Cursor, and OpenClaw?

Yes. Claude Desktop, Cursor, VS Code, and other stdio MCP clients can run the DCP agent locally. OpenClaw and VPS agents use the remote installer and HTTP MCP. Custom runtimes can integrate through MCP or HTTP MCP.

How do I secure my OpenClaw agent with DCP?

Use the remote invite command from DCP Desktop. It installs the DCP agent service on your VPS, pairs it with your Desktop vault, and configures OpenClaw MCP when the install shape can be detected.

Is MCP server security a problem in 2026?

Yes. MCP servers have known vulnerabilities. Over 42,000 exposed endpoints leaked credentials in early 2026, including CVE-2025-6514 (remote code execution). DCP adds a control layer: even if your MCP server is compromised, agents can't use raw keys outside your rules.

How is DCP different from Infisical or VaultAgent?

DCP is local-first (keys never leave your device) and controls how agents use them. Infisical and VaultAgent are cloud-based secret stores. DCP also handles crypto wallets, which they don't. And DCP is free & open source.

How is DCP different from Turnkey or Cobo agentic wallet?

DCP is free and handles both crypto AND credentials. Turnkey and Cobo are enterprise-only, crypto-only, and Cobo holds a key share (MPC). DCP is fully non-custodial and local-first . You control everything.

What if my laptop is off?

Requests queue until you're back online. For 24/7 bots, just leave your laptop sleeping. No need to be unlocked.

Yes. The entire stack is open source under Apache-2.0. Self-host the relay if you want full control over your infrastructure.

Export your data, uninstall. Your wallets, keys, everything stays yours. No lock-in, no data hostage.

Can an AI agent pay for APIs without my private key?

Yes. The agent requests an x402 / USDC payment, DCP checks your daily cap, auto-approves small ones and asks your phone for the rest, then signs locally. The agent gets a paid result, and never sees the private key.

How is DCP different from Coinbase Agentic Wallet, Cobo, or Turnkey?

Those give the agent its own wallet or account. DCP is non-custodial: it keeps your existing wallet's key encrypted on your machine and lets the agent request to use it inside your rules. The agent receives a signed result, never the raw key.

Is DCP an MCP permission server?

Yes. Give your agent a DCP tool over MCP instead of raw secrets. It runs sensitive actions (sign, pay, use a scoped credential, read approved data) with task-scoped access, approval for exceptions, and logs. Works with the OpenAI Agents SDK, LangGraph, CrewAI, Claude, Cursor, and OpenClaw.

DCP Blog

AI agent security, without the raw keys.

Practical guides for builders using agents, MCP, wallets, credentials, x402 payments, approvals, budgets, and vault-based permissions.

agentic walletsolanaai agentsx402swapsnon-custodialai agent walletcoinbase agentkit

FeaturedSolana Agents•Jul 23, 2026•9 min read

DCP: The Agentic Wallet for Solana AI Agents

What an agentic wallet is and how DCP implements one on Solana: balances, transfers, swaps, and x402 payments for AI agents, with budgets, approvals, and keys that never leave your machine.

agentic walletsolanaai agentsx402

Read article →

Comparisons•Jul 23, 2026

Agentic Wallets Compared (2026): Coinbase, Crossmint, Privy, Turnkey, and DCP

An honest comparison of agentic wallet options for AI agents in 2026: Coinbase Agentic Wallets, Crossmint, Privy, Turnkey, Solana Agent Kit, and DCP. Who holds the keys, what limits exist, and which one fits your use case.

agentic walletai agent wallet

Read →

Architecture•Jul 23, 2026

How DCP Works: The Permission Layer Between AI Agents and Your Secrets

How DCP works, explained from the code: the permission layer between AI agents and your keys, credentials, and money. What tools agents get over MCP, how budgets and approvals are enforced, and how remote agents pair with your desktop.

how dcp worksai agent security

Read →

MCP Security•May 14, 2026

How to Secure Claude and Cursor MCP Agents

Claude Desktop, Cursor, OpenClaw, and custom MCP clients can call powerful tools. DCP gives those tools a vault-backed permission layer.

claude desktopcursor

Read →

Credential Security•May 12, 2026

DCP vs .env Files for AI Agents

Environment variables are fine for simple apps. AI agents need a safer permission boundary for wallets, credentials, budgets, and approvals.

env filesapi keys

Read →

Agent Security•May 10, 2026

Stop Giving AI Agents Private Keys

AI agents need wallets, payments, signatures, APIs, and data. They should get permissions, not raw private keys in .env files.

ai agentsprivate keys

Read →

Agent Infrastructure•May 8, 2026

The Next Big Agent Primitive Is Permission

Everyone is building more capable AI agents. But there is one primitive missing from most agent stacks: permission. Real permission that answers what agents can access, spend, and do.

ai agentspermission

Read →

Solana Agents•May 6, 2026

How to Give Solana AI Agents Wallet Access Without Exposing Private Keys

AI agents on Solana need to sign transactions and pay APIs. But giving agents raw private keys is dangerous. Here's how to give agents wallet permissions instead.

solanaai agents

Read →