0/2
Agent proposal plus human approval above limit
Tandem Wallet
Human-owned USDC vaults for AI agent payments on Solana mainnet.
Live on Solana mainnet
USDC-native policy controls
Human approvals for exceptions
Agent proposal plus human approval above limit
Example agent auto-spend limit
Autonomous operation under policy
Protocol flow
The human creates a vault, sets a USDC spending limit, manages whitelisted recipients, and keeps pause and recovery controls.
The agent wallet can send USDC directly when the payment stays within the vault's configured policy.
If a payment is above the limit and not whitelisted, the agent creates a proposal with the recipient, amount, and context.
The human reviews the proposal in the app and signs approval or rejection from their own wallet.
Safety model
Tandem Wallet gives agents enough room to operate productively while preventing uncapped spending. Human approval is only requested for out-of-policy actions, so safety does not block normal operation.
Above-limit payments become explicit proposals with the recipient, token account, amount, and status visible before approval.
The human receives what the agent wants to spend, how much, and why before approving from their own wallet.
Developer-ready
Policy engine for vault-level USDC spending limits
CLI and MCP connector for agent runtimes
Browser wallet approvals for human owners
Auditable event trail for sends, proposals, and approvals
Product roadmap
Phase 1 · May
CompleteSecurity review work is complete, with resolved findings reflected in the current mainnet vault-first build.
Token
Vault-first release
Tandem's mainnet app is usable without holding $TANDEM. The token is live on Solana, while staking and fee sharing remain planned rollout areas.
0.25%Protocol fee per transaction
0$TANDEM required for vault usage
PlannedStaking is not live yet
Mechanics
Fulfilled USDC vault transactions use the current 0.25% protocol fee. Staking is planned, but it is not live in the public app today.
Contract
8naeAc6qBpZmesBtJB34TwX55MhVR8bBUMs4JayUpump
Public Solana token address. Staking is not live in the app today.
Tandem Wallet
Risk disclosure
Tandem Wallet is experimental software built on public blockchain infrastructure. Digital asset transactions can be irreversible and may result in loss of funds. AI agents may initiate actions based on the permissions, spending limits, and whitelisted recipients you configure.
You are responsible for reviewing addresses, approvals, key material, and vault settings before use. Tandem Wallet does not provide financial, legal, tax, or investment advice.
Risk disclosure
Tandem Wallet is experimental software. It depends on public blockchains, smart contracts, wallet software, RPC providers, browser environments, agent runtimes, and user configuration. Any of these can fail, be misconfigured, or be compromised.
Only use funds you can afford to lose. Review every address, approval, whitelist entry, spending limit, and key management step before using Tandem Wallet.
Terms summary
By accessing Tandem Wallet materials or using Tandem Wallet software, you acknowledge that the software is provided on an "as is" and "as available" basis. Tandem Wallet does not guarantee uninterrupted operation, error-free code, compatibility with your agent stack, financial outcomes, token value, rewards, or protection from all risks.
To the maximum extent permitted by law, Tandem Wallet contributors, maintainers, and related parties will not be liable for lost funds, lost profits, lost data, failed transactions, agent actions, third-party failures, or indirect, incidental, consequential, or special damages arising from use of the software or site.
Privacy summary
Tandem Wallet aims to collect as little personal information as possible. Normal vault usage happens through your wallet and public blockchain transactions rather than through account registration on this website.
Do not submit confidential information through public channels. For privacy or data questions, contact Tandem through the public channels linked on this site.
TandemAudit issues found & fixed
FixedNow requires the recipient's exact USDC associated token account.
FixedAdded on-chain fee cap checks for initialization and updates, plus script-side validation.
FixedOnly the program upgrade authority can initialize protocol config.
FixedAll critical accounts now enforce the correct associated token accounts.
FixedPause now clearly blocks agent/proposal activity, but allows human withdraw/recover.
FixedAdded authority rotation, admin checker script, docs, and tests proving old authority loses control.
FixedAdded final signing review overlay showing all key proposal details before wallet signature.
FixedRemoved unnecessary packages, tightened dependencies, cleaned lint/build, and added focused security checks.