Package Exports

@open-wallet-standard/core
@open-wallet-standard/core/index.js

This package does not declare an exports field, so the exports above have been automatically detected and optimized by JSPM instead. If any package subpath is missing, it is recommended to post an issue to the original package (@open-wallet-standard/core) to support the "exports" field. If that is not possible, create a JSPM override to customize the exports field for this package.

Readme

@open-wallet-standard/core

Secure signing and wallet management for every chain. One vault, one interface — keys never leave your machine.

Why OWS

Zero key exposure. Private keys are encrypted at rest, decrypted only inside an isolated signing process. Agents and LLMs never see raw key material.
Every chain, one interface. EVM, Solana, Bitcoin, Cosmos, Tron, TON — all first-class. CAIP-2/CAIP-10 addressing abstracts away chain-specific details.
Policy before signing. A pre-signing policy engine gates every operation — spending limits, allowlists, chain restrictions — before any key is touched.
Built for agents. MCP server, native SDK, and CLI. A wallet created by one tool works in every other.

Install

npm install @open-wallet-standard/core    # Node.js SDK
npm install -g @open-wallet-standard/core # Node.js SDK + CLI (provides `ows` command)

The package is fully self-contained — it embeds the Rust core via native FFI. Installing globally with -g also provides the ows CLI.

Quick Start

import { createWallet, signMessage } from "@open-wallet-standard/core";

const wallet = createWallet("agent-treasury");
// => accounts for EVM, Solana, BTC, Cosmos, Tron, TON

const sig = signMessage("agent-treasury", "evm", "hello");
console.log(sig.signature);

CLI

# Create a wallet (derives addresses for all supported chains)
ows wallet create --name "agent-treasury"

# Sign a message
ows sign message --wallet agent-treasury --chain evm --message "hello"

# Sign a transaction
ows sign tx --wallet agent-treasury --chain evm --tx-hex "deadbeef..."

Supported Chains

Chain	Curve	Address Format	Derivation Path
EVM (Ethereum, Polygon, etc.)	secp256k1	EIP-55 checksummed	`m/44'/60'/0'/0/0`
Solana	Ed25519	base58	`m/44'/501'/0'/0'`
Bitcoin	secp256k1	BIP-84 bech32	`m/84'/0'/0'/0/0`
Cosmos	secp256k1	bech32	`m/44'/118'/0'/0/0`
Tron	secp256k1	base58check	`m/44'/195'/0'/0/0`
TON	Ed25519	raw/bounceable	`m/44'/607'/0'`

CLI Reference

Command	Description
`ows wallet create`	Create a new wallet with addresses for all chains
`ows wallet list`	List all wallets in the vault
`ows wallet info`	Show vault path and supported chains
`ows sign message`	Sign a message with chain-specific formatting
`ows sign tx`	Sign a raw transaction
`ows mnemonic generate`	Generate a BIP-39 mnemonic phrase
`ows mnemonic derive`	Derive an address from a mnemonic
`ows update`	Update ows and bindings
`ows uninstall`	Remove ows from the system

Architecture

Agent / CLI / App
       │
       │  OWS Interface (MCP / SDK / CLI)
       ▼
┌─────────────────────┐
│    Access Layer      │     1. Agent calls ows.sign()
│  ┌────────────────┐  │     2. Policy engine evaluates
│  │ Policy Engine   │  │     3. Enclave decrypts key
│  │ (pre-signing)   │  │     4. Transaction signed
│  └───────┬────────┘  │     5. Key wiped from memory
│  ┌───────▼────────┐  │     6. Signature returned
│  │ Signing Enclave │  │
│  │ (isolated proc) │  │     The agent NEVER sees
│  └───────┬────────┘  │     the private key.
│  ┌───────▼────────┐  │
│  │  Wallet Vault   │  │
│  │ ~/.ows/wallets/ │  │
│  └────────────────┘  │
└─────────────────────┘

Documentation

The full spec and docs are available at openwallet.sh and in the GitHub repo.

License

MIT