Skip to main content

​
Non-custodial by construction

  • OKX Agentic Wallet TEE — the key is generated in and never leaves the enclave. Gecko builds an unsigned transaction; the TEE signs and broadcasts. Under the per-tx policy limit, it broadcasts directly.
  • Scoped embedded wallet (optional) — a Privy server-wallet with a scoped policy (per-tx cap, allowed venues) for one-click onboarding. Still no raw key in Gecko’s hands.

​
The one execution pattern

Every venue follows the same shape: 
build unsigned tx  →  safety gate  →  OKX TEE signs + broadcasts  →  txHash
Kamino (sidecar), Jupiter swaps (sidecar), and based.bid (their API) all conform to it. Validated on mainnet with a real round-trip deposit + withdraw.

​
Pay-as-you-go

Verdicts are billed per call over x402. Self-hosting the agent is free; you pay only for oracle calls. X402_MODE=stub during testing costs nothing and exercises the full code path.