Solana Agent Kit is the de-facto toolkit for connecting an LLM to Solana protocols: LangChain, Vercel AI, and OpenAI adapters, dozens of protocol plugins. It is not a signer. Its default wallet is a raw keypair in memory, and its BaseWallet interface exists precisely so you can replace that. Coldstar is a replacement.
This is the intended pairing. Solana Agent Kit builds the transactions; a Coldstar-backed BaseWallet decides whether they get signed.
| Coldstar | Solana Agent Kit | |
|---|---|---|
| Who holds the root key | You. The cold root lives encrypted on your own USB drive. No vendor holds a key, a share, or an account. | By default, the agent process: the README builds a KeypairWallet from Keypair.fromSecretKey(bs58.decode(SOLANA_PRIVATE_KEY)). The BaseWallet interface lets you substitute any signer. |
| Where the key lives | On your machine. The air-gapped root signs a bounded policy envelope; a disposable session key signs routine transactions inside it. | In-process memory and an environment variable by default. Examples ship for Turnkey, Privy, Crossmint, Para, and Phantom embedded wallets. |
| Policy engine | Per-transaction limit, daily cap, program allowlist, recipient allowlist and blocklist, escalate-above threshold — for SOL and per SPL token, with per-mint limits in base units and destinations checked against the recipients' token accounts. Token instructions that cannot be bounded, Approve above all, escalate to a human rather than signing. Evaluated locally, first match wins, before any signature exists. The daily cap can be read back from the chain, so deleting the local ledger cannot reset it, and an allowlisted program's real debit can be measured by simulation rather than trusted. | None in core. Any policy comes from whatever signer you plug in. |
| Out-of-policy transactions | ESCALATE to a human over air-gapped QR, or REJECT. No signature is produced for a rejected transaction. A grant can also be revoked on-chain before it expires, by the root or by a hot revoker key that cannot spend; the signer refuses everything from then on, and a chain it cannot reach escalates rather than signs. | Not applicable in core. |
| Cold / offline root | Yes — the root key never touches a networked machine. It signs a policy envelope offline; the online signer verifies that signature and refuses to start if the policy was edited, the session key is not the one named, or the grant expired. | No. |
| Agent integration | Framework-agnostic: the agent proposes an unsigned transaction, the signer decides. ColdstarWallet is an open-source drop-in for Solana Agent Kit's BaseWallet, and coldstar-signer-mcp exposes the same policy-gated wallet to any MCP client. Squads spending limits are decoded rather than trusted, so an agent can be a vault member bounded by the chain and by local policy. | It is the agent integration: tool adapters for the major frameworks and protocol plugins. |
| Solana support | Solana mainnet. Core is chain-agnostic; EVM signing exists. | Yes; Solana only. |
| Source & self-hosting | Open source (MIT), self-hosted. No API key, no SaaS dependency, nothing to go down. | Apache-2.0, fully open, self-hosted. |
| Pricing | Free software plus a ~$10 drive. | Free. |
| Maturity | Beta — the signing core and policy engine are in scope for the planned independent audit. | Production toolkit with a large plugin ecosystem; v2 default branch. |
There is no fight here. Solana Agent Kit is the best way to give an agent Solana capabilities; Coldstar is a way to make sure those capabilities have limits.
ColdstarWallet implements the kit's BaseWallet interface.Solana Agent Kit's BaseWallet interface is five methods: public key, sign transaction, sign all, sign and send, sign message. The shipped KeypairWallet implements them with a raw Keypair and tweetnacl, which is the right default for a toolkit and the wrong default for money. The maintainers know this; the embedded-wallet examples exist to move the key out of the process.
A Coldstar-backed BaseWallet signs with a disposable session key inside a policy envelope the cold root authorised offline. Sign-transaction calls pass through the local rule list first; a REJECT returns no signature; an ESCALATE waits for a human over QR.
Solana Agent Kit is production tooling. Coldstar is beta, pre-audit. ColdstarWallet implements BaseWallet today, with a devnet starter showing all three decisions against the kit.
ColdstarWallet implements BaseWallet, so it drops in where KeypairWallet was and every plugin and adapter keeps working. Nothing above the wallet changes; the wallet just says no sometimes.
No. It is a toolkit that, by default, signs with a keypair you give it. Security is the job of the signer you plug in; the kit makes that pluggable.
Turnkey, Privy, Crossmint, Para, and Phantom embedded wallets, plus the default KeypairWallet. All of the vendor options are hosted; Coldstar's ColdstarWallet is the self-hosted, cold-rooted one, MIT-licensed on GitHub.
No. Coldstar has no protocol plugins or framework adapters. It replaces the wallet underneath them.
Open source, MIT. macOS, Linux, Windows — and on the Solana Seeker dApp Store.
pip install coldstar
Third-party facts were checked against the vendor's own pages on the date above. Pricing and feature sets change; if something here is out of date, tell us and we will fix it.