DCP is one app that controls how AI agents use wallets, credentials, identity, and private data. Agents get access inside rules you set. You stay in control.

Is DCP only a wallet?

No. DCP can work as a wallet control surface for agents, but it also controls credentials, identity, private data, remote-agent access, limits, approvals, and logs.

Do agents ask me for everything?

No. You set rules once. Actions inside those rules run automatically. Only exceptions ask for approval.

Where are my keys stored?

On your machine. DCP is local-first. Wallet keys stay in your local vault, not inside the agent and not on our servers.

Can I use DCP with multiple agents?

Yes. Each agent gets its own rules, limits, approvals, and logs, all from one dashboard.

Can DCP work with remote agents?

Yes. Your agent can run on a VPS or cloud machine while your vault stays local. Approvals come through Desktop, Telegram, or the DCP mobile app.

What happens if an agent is compromised?

The agent can only act inside the access you gave it. You can revoke access anytime, and every action is logged.

The core is free and open source (Apache-2.0). Desktop app, agent runtime, CLI, and source code are all free.

Which blockchains does DCP support?

DCP supports Solana. You can generate a Solana wallet or import one. Keys are encrypted locally with XChaCha20. DCP is non-custodial . You control everything.

How do AI agent spending limits work?

DCP lets you set daily caps and per-action limits for each agent. If an agent tries to spend more than the limit, the action is blocked or sent to you for approval. You can adjust limits anytime.

Is DCP better than .env files for AI agents?

Yes. With .env files, agents read your keys directly. One prompt injection leaks everything. DCP keeps credentials local and runs access inside rules. Agents get results, not raw keys.

Can I store credentials like OpenAI and Anthropic keys in DCP?

Yes. Store any credential: OpenAI, Anthropic, Stripe, AWS, custom keys. Your AI agents request access, rules decide, and the agent gets results, never the raw key.

Does DCP work with Claude, Cursor, and OpenClaw?

Yes. Claude Desktop, Cursor, VS Code, and other stdio MCP clients can run the DCP agent locally. OpenClaw and VPS agents use the remote installer and HTTP MCP. Custom runtimes can integrate through MCP or HTTP MCP.

How do I secure my OpenClaw agent with DCP?

Use the remote invite command from DCP Desktop. It installs the DCP agent service on your VPS, pairs it with your Desktop vault, and configures OpenClaw MCP when the install shape can be detected.

Is MCP server security a problem in 2026?

Yes. MCP servers have known vulnerabilities. Over 42,000 exposed endpoints leaked credentials in early 2026, including CVE-2025-6514 (remote code execution). DCP adds a control layer: even if your MCP server is compromised, agents can't use raw keys outside your rules.

How is DCP different from Infisical or VaultAgent?

DCP is local-first (keys never leave your device) and controls how agents use them. Infisical and VaultAgent are cloud-based secret stores. DCP also handles crypto wallets, which they don't. And DCP is free & open source.

How is DCP different from Turnkey or Cobo agentic wallet?

DCP is free and handles both crypto AND credentials. Turnkey and Cobo are enterprise-only, crypto-only, and Cobo holds a key share (MPC). DCP is fully non-custodial and local-first . You control everything.

What if my laptop is off?

Requests queue until you're back online. For 24/7 bots, just leave your laptop sleeping. No need to be unlocked.

Yes. The entire stack is open source under Apache-2.0. Self-host the relay if you want full control over your infrastructure.

Export your data, uninstall. Your wallets, keys, everything stays yours. No lock-in, no data hostage.

Can an AI agent pay for APIs without my private key?

Yes. The agent requests an x402 / USDC payment, DCP checks your daily cap, auto-approves small ones and asks your phone for the rest, then signs locally. The agent gets a paid result, and never sees the private key.

How is DCP different from Coinbase Agentic Wallet, Cobo, or Turnkey?

Those give the agent its own wallet or account. DCP is non-custodial: it keeps your existing wallet's key encrypted on your machine and lets the agent request to use it inside your rules. The agent receives a signed result, never the raw key.

Is DCP an MCP permission server?

Yes. Give your agent a DCP tool over MCP instead of raw secrets. It runs sensitive actions (sign, pay, use a scoped credential, read approved data) with task-scoped access, approval for exceptions, and logs. Works with the OpenAI Agents SDK, LangGraph, CrewAI, Claude, Cursor, and OpenClaw.

What is DCP?

DCP is a permission layer for AI agents. It runs on your own computer and lets AI assistants do real things for you: pay for things, use your details, sign transactions, without ever getting your passwords or private keys. You stay in control and approve anything that matters.

New here? Head straight to Getting Started. Download the app and be set up in about 2 minutes. No crypto or coding knowledge needed.

Why it exists

AI assistants are getting good enough to actually do things for you: book a service, buy API credits, send a payment, fill in your details. But to do that, they normally need your wallet, your logins, and your personal info. Handing those straight to an AI is risky. One mistake or one bad prompt and your money or accounts are gone.

DCP sits safely in the middle. Your keys and data live in a vault on your device. When an AI wants to act, it asks DCP. DCP checks your limits, asks for your approval when needed, and hands back only the result. The AI gets the outcome, never the secret.

What you can do with it

Give your AI a spending limit. Let it pay for things up to a cap you set. It can never drain your wallet.
Let AI use your info without handing it over. It can use your email or address to sign you up or check out, but never sees your password or keys.
Approve the big stuff from your phone. "Your assistant wants to send $50" → tap approve or deny.
Cut off any assistant instantly. One click revokes its access.

See Use Cases for real, everyday examples.

You're always in control

Your keys never leave your device. DCP signs locally. Nothing is uploaded.
Limits you set. Per-transaction and daily spending caps.
Approvals you see. Sensitive actions ask you first, on your computer or your phone (Telegram).
Revoke anytime. Remove any assistant's access immediately.

Get started

DCP runs as a desktop app for macOS (Apple Silicon & Intel) and Windows. Download it, create a vault, and you're ready.

Download DCP Desktop

Get the app from dcpagent.com and set up your vault.

Getting Started

Step-by-step: install, create a vault, use it with an AI.

Are you a developer? Everything above is for people using the app. To connect an agent, use the CLI, or build on the protocol, jump to the developer docs: Architecture, Connect an Agent (MCP), and the npm packages.