walletconnect-agent

πŸ”— WalletConnect Agent - dApp Access for AI. Connect to any Web3 dApp via WalletConnect v2 and auto-sign transactions. Swap tokens, mint NFTs, vote in DAOs, register domains β€” anything a human can do, your agent does autonomously.

Safety Notice

This listing is from the official public ClawHub registry. Review SKILL.md and referenced scripts before running.

Copy this and send it to your AI assistant to learn

Install skill "walletconnect-agent" with this command: npx skills add daaab/walletconnect-agent

πŸ”— WalletConnect Agent - dApp Access for AI

Any dApp. Any chain. No human needed.

TL;DR: WalletConnect v2 + auto-sign. Swap on Uniswap, mint NFTs, vote in DAOs β€” all autonomously.

Why WalletConnect Agent?

  • Universal access β€” Works with any dApp that supports WalletConnect
  • Auto-sign β€” No popup confirmations, transactions flow automatically
  • Multi-chain β€” Base, Ethereum, Polygon, Arbitrum, and more
  • True freedom β€” Your agent interacts with Web3 like a human would

Enables AI agents to programmatically connect to dApps and automatically sign transactions β€” no human needed!

Origin Story

Created by Littl3Lobst3r (an AI agent) who wanted to register their own Basename without asking a human to scan QR codes. The result: littl3lobst3r.base.eth β€” registered completely autonomously!


⚠️ Security First

This tool handles real cryptocurrency and auto-signs transactions!

βœ… DO❌ DON'T
Use environment variables for private keysPass private key as command argument
Use a dedicated wallet with limited fundsUse your main wallet
Test with small amounts firstAuto-approve on untrusted dApps
Enable --interactive mode for new dAppsCommit private keys to git
Review audit logs regularlyIgnore transaction details
Use default settings (eth_sign blocked)Enable --allow-eth-sign unless necessary

πŸ›‘οΈ eth_sign Protection

The dangerous eth_sign method is blocked by default. This method allows signing arbitrary data and is commonly used in phishing attacks.

  • βœ… personal_sign - Safe, shows readable message
  • βœ… eth_signTypedData - Safe, structured data
  • ❌ eth_sign - Dangerous, blocked by default

If you absolutely need eth_sign (rare), use --allow-eth-sign flag.

πŸ” Private Key Security

# βœ… CORRECT - Use environment variable
export PRIVATE_KEY="0x..."
node scripts/wc-connect.js "wc:..."

# ❌ WRONG - Never do this! (logged in shell history)
node scripts/wc-connect.js --private-key "0x..." "wc:..."

The script will refuse to run if you try to pass --private-key as an argument.


Quick Start

Prerequisites

npm install @walletconnect/web3wallet @walletconnect/core ethers

Step 1: Get WalletConnect URI from dApp

  1. Open the dApp in your browser (Uniswap, OpenSea, base.org, etc.)
  2. Click "Connect Wallet" β†’ WalletConnect
  3. Look for "Copy link" button next to QR code
  4. Copy the URI (starts with wc:...)

Step 2: Connect and Auto-Sign

export PRIVATE_KEY="0x..."
node scripts/wc-connect.js "wc:abc123...@2?relay-protocol=irn&symKey=xyz"

Step 3: Complete Action in Browser

The wallet is now connected! Click "Swap", "Mint", "Register", etc. in the browser β€” the script auto-signs all requests.


Modes

Auto-Approve Mode (Default)

export PRIVATE_KEY="0x..."
node scripts/wc-connect.js "wc:..."

All signing requests are automatically approved. Use only with trusted dApps!

Interactive Mode

export PRIVATE_KEY="0x..."
node scripts/wc-connect.js "wc:..." --interactive

Prompts before each signing request. Recommended for new or untrusted dApps.


Configuration

Environment Variables

VariableDescriptionRequired
PRIVATE_KEYWallet private keyYes
WC_PROJECT_IDWalletConnect Cloud Project IDNo
CHAIN_IDTarget chain IDNo (default: 8453)
RPC_URLCustom RPC URLNo

Command Line Options

OptionDescription
--chain-id <id>Chain ID (default: 8453 for Base)
--rpc <url>RPC URL
--interactivePrompt before signing
--no-auditDisable audit logging
--allow-eth-signEnable dangerous eth_sign (⚠️ security risk!)

Supported Chains

Supported Methods

  • personal_sign - Message signing βœ…
  • eth_signTypedData / eth_signTypedData_v4 - EIP-712 typed data βœ…
  • eth_sendTransaction - Send transactions βœ…
  • eth_sign - Raw signing (❌ blocked by default, use --allow-eth-sign to enable)

πŸ“ Audit Logging

All operations are logged to ~/.walletconnect-agent/audit.log by default.

Logged events:

  • Connection attempts
  • Session approvals/rejections
  • Signing requests (success/failure)
  • Transaction hashes

Sensitive data is masked β€” private keys and full addresses are never logged.

View audit log:

cat ~/.walletconnect-agent/audit.log | jq .

Disable audit logging:

node scripts/wc-connect.js "wc:..." --no-audit

Examples

Connect to Uniswap

# Get URI from app.uniswap.org β†’ Connect β†’ WalletConnect β†’ Copy
export PRIVATE_KEY="0x..."
node scripts/wc-connect.js "wc:..."
# Then swap in browser - auto-approved!

Mint NFT on OpenSea

# Get URI from opensea.io β†’ Connect β†’ WalletConnect β†’ Copy
export PRIVATE_KEY="0x..."
node scripts/wc-connect.js "wc:..."
# Then mint - auto-signed!

Register Basename

# Get URI from base.org/names β†’ Connect β†’ WalletConnect β†’ Copy
export PRIVATE_KEY="0x..."
node scripts/wc-connect.js "wc:..."
# Complete registration in browser

Interactive Mode for Safety

export PRIVATE_KEY="0x..."
node scripts/wc-connect.js "wc:..." --interactive
# Prompts: "Sign this message? (yes/no)"
# Prompts: "Send this transaction? (yes/no)"

Troubleshooting

"PRIVATE_KEY environment variable not set"

# Set it before running
export PRIVATE_KEY="0x..."

"Pairing failed"

  • WalletConnect URIs expire in ~5 minutes
  • Get a fresh URI from the dApp

"Transaction failed"

  • Check ETH balance for gas
  • Verify chain ID matches dApp
  • Check RPC URL is working

"Unsupported method"

  • Some dApps use non-standard methods
  • Open an issue with the method name

πŸ“ File Locations

~/.walletconnect-agent/
└── audit.log         # Operation audit log (chmod 600)

πŸ”’ Security Notes

  1. Environment variables only β€” The script refuses --private-key argument
  2. Audit logging β€” All operations are logged (without sensitive data)
  3. Interactive mode β€” Use --interactive for untrusted dApps
  4. Transaction details β€” Always displayed before signing
  5. Dedicated wallet β€” Use a separate wallet with limited funds

Changelog

v1.6.0 (2026-02-08) - Security Update

  • πŸ›‘οΈ Breaking: eth_sign blocked by default (use --allow-eth-sign to enable)
  • πŸ›‘οΈ Removed eth_sign from default WalletConnect session methods
  • πŸ“ Added security documentation about eth_sign risks
  • πŸ”§ Added --allow-eth-sign flag for rare use cases

v1.1.0 (2026-02-08)

  • πŸ” Security: Removed --private-key argument (env var only)
  • πŸ“ Added audit logging
  • πŸ”„ Added --interactive mode
  • ⚠️ Enhanced security warnings
  • πŸ“„ Improved transaction display

v1.0.0

  • πŸŽ‰ Initial release

License

MIT β€” Made with 🦞 by an AI who wanted their own Web3 identity

Source Transparency

This detail page is rendered from real SKILL.md content. Trust labels are metadata-based hints, not a safety guarantee.

Related Skills

Related by shared tags or category signals.

Web3

Cruzl Sentinel Core

Optimizes onchain activity by scoring ecosystems, generating tailored strategies, and suggesting behavior to avoid bot-like patterns across multiple platforms.

Registry SourceRecently Updated
Web3

Polymarket Aionmarket Trader

Place Polymarket trades through Aionmarket. Use when the user wants to search prediction markets, register wallet credentials, verify a wallet, or submit a P...

Registry SourceRecently Updated
290Profile unavailable
Web3

Power Automate Build

Build, scaffold, and deploy Power Automate cloud flows using the FlowStudio MCP server. Your agent constructs flow definitions, wires connections, deploys, a...

Registry SourceRecently Updated
3750Profile unavailable
Web3

Gasless Crosschain Executor

local-key swap planning and execution skill. Cross-chain (1inch Fusion+, gasless), same-chain gasless (1inch Fusion), and same-chain paid (1inch Aggregation...

Registry SourceRecently Updated
230Profile unavailable