An XRP account that only does what you allow.
The key is generated inside a secure enclave and never leaves. It can only ever sign what your on-chain rules permit — so steal the key, hijack the app, poison the address, and it still can’t be drained.
No extension. No seed phrase. Built on Flare + the XRP Ledger.
One account, many jobs
Pick the rule your account obeys.
Every account is an XRP wallet whose key can only sign what its rule permits. Choose one when you create it — change it anytime, or lock it forever.
Exchange & allowlist
Pay only addresses you approve — with optional exchange destination tags and a per-payment cap.
Protects against: A stolen key can't send anywhere new, or to your exchange under a different tag.
Spending limit
Cap spending — per rolling window, per calendar period, or as a one-time budget until a date — to an allowlist or anyone, with an optional per-payment cap.
Protects against: A hijacked agent, a stolen key, a runaway subscription — none can exceed the cap or drain the account.
FXRP mint
SoonConvert XRP to FXRP on Flare — the account can only ever mint to your Flare address, nowhere else.
Protects against: A stolen key can't move your XRP out — it can only turn it into FXRP in your own Flare wallet.
Conditional (FDC)
SoonPay a supplier only once Flare's Data Connector proves the condition.
Protects against: Funds stay locked until the world proves delivery — no early release, no wrong payee.
How it works
Live in three steps.
Create an account
One click. The XRP key is generated inside a secure enclave — no seed phrase, no extension, and no human ever sees it.
Pick a rule
Exchange-only, an agent allowance, a subscription, a conditional payout. The rule is the account's entire security surface.
It can't be drained
The key can only ever sign what the rule allows. Lock the rule and not even your own control key can change it.
Don’t take our word for it.
Try to make a live rule pay a thief. The verdict comes straight from the real contract on Coston2 — no wallet, no signup.
Why it can't be drained
The security isn't a promise. It's the architecture.
The key never leaves the enclave
It's generated inside a TEE on Flare and can't be exported — so there's nothing to phish, leak, or steal. You receive to it like any XRP account; you spend only through the rule.
The rules live on-chain
Every payment runs the rule first, enforced by a contract, not a server. If the rule says no, the enclave is never even asked to sign.
Lock it and it's final
Freeze an account's rule forever. After that, not even your own control key can repoint it or widen it — a thief who steals everything still can't move your funds.
Three things XRP couldn't do yesterday.
Payments that react to the world
XRPL escrow does time-locks and hash-locks — nothing else. A rule on Flare can gate a payment on an FTSO price or an FDC-attested real-world event: pay the supplier when delivery is proven, release when a price is hit.
Wallets for AI agents
Give an autonomous agent an XRP account it can spend from but can never drain — an allowlist and a cap it cannot exceed, even prompt-injected or hijacked. The wallet the coming agent economy needs, on the ledger the assets already live on.
DAO-controlled XRP
A DAO on Flare votes; native XRP moves on XRPL. No wrapped asset, no bridge, no custodian — the treasury stays real XRP, and a contract decides what it can pay.
Why it stays this cheap to extend
The enclave is a keyring: it signs whatever payment a wallet’s rule authorizes, and nothing else. So a new product isn’t a new TEE workload — it’s one Solidity contract a wallet can point at. The hard part (a key that can only ever obey a contract, on a chain with no contracts) is already built and running.
The account is fixed
One key per wallet, born in the enclave, bound to Flare’s TEE. It never leaves and never changes.
The rules are open
Anyone can write a rule module. It governs only its own wallet, so a bad rule is self-harm — never someone else’s funds.
Composition is the moat
Conditions come from Flare — FTSO, FDC — and settle as native XRP on XRPL. Nobody else can do that without moving the asset off its ledger.
Stated plainly: the three above are roadmap, not shipped. What is shipped — the account, the keyring, the rule engine, a real payment that refused to be redirected — is live on Coston2 and checkable above.
An XRP account that can’t be drained.
The rules aren’t for you. They’re for whoever gets in.