FilAgentKey

FilAgentKey — valet keys for AI agents on Filecoin.

Every AI agent that stores data on Filecoin needs a key that can sign transactions, and today that means your wallet key. A private key is all-or-nothing: it can spend everything you hold, it never expires, and it cannot be revoked. Once it lands in an agent's environment variable, a log line, or a container image, your only recourse is to move your funds and start over. You also can't tell which agent did what — every action on-chain looks like you.

Filecoin Onchain Cloud already ships the primitive that fixes this — the SessionKeyRegistry. What's missing is anything to drive it. FilAgentKey is that control plane.

From a dashboard, an owner mints a scoped, expiring session key: pick the permissions (add pieces only, say), pick a lifetime, one transaction. The key is revealed once and handed to an agent, which then stores to Filecoin holding nothing but that key and the owner's public address. The root wallet key never leaves the browser. Click Revoke and the agent is locked out mid-run.

Built entirely on Filecoin Onchain Cloud — deploys no contracts of its own:

SessionKeyRegistry — scoped, expiring, revocable agent authorization Filecoin Warm Storage (via the Synapse SDK) — delegated uploads land as PDP-verified pieces Filecoin Pay — USDFC deposit and operator approval fund the storage the agent consumes

Notable: agent actions are attributed cryptographically. Because the storage provider submits the transaction, the on-chain sender isn't the agent — so FilAgentKey decodes the addPieces calldata, reconstructs the EIP-712 message, and recovers the signer. Every audit row is signature-verified, from chain state alone. The dashboard has no backend and no database.

Includes: owner dashboard (React), a Claude tool-use demo agent, and a browser agent for image uploads. Calibration testnet.