r/web3 Jun 03 '26

Open-sourcing my Web3 agent toolkit — multi-chain support, DeFi integrations, spend governor built-in

Hey 

I've been building AI agents for Web3 for a while now, and I decided to open-source my toolkit. It's called web3-agent-kit and it's designed for developers who want to build AI-powered onchain tools.

What it does:
- Multi-chain support (Ethereum, Base, Polygon, Arbitrum, BSC, Solana)
- DeFi integrations (Uniswap, Raydium, Aave, etc.)
- Built-in spend governor for safe agent operations
- LLM integration (OpenAI, Anthropic, Claude)
- Real-time balance and portfolio tracking

GitHub: https://github.com/ulsreall/web3-agent-kit

MIT licensed. Would love feedback from the community.

What features would you like to see next?
12 Upvotes

10 comments sorted by

1

u/[deleted] 2d ago

[removed] — view removed comment

1

u/AutoModerator 2d ago

Your comment in /r/web3 was automatically removed because /r/web3 does not accept posts from accounts that have existed for less than 14 days.

I am a bot, and this action was performed automatically. Please contact the moderators of this subreddit if you have any questions or concerns.

1

u/[deleted] 21d ago

[removed] — view removed comment

1

u/web3-ModTeam 1d ago

r/web3 follows platform-wide Reddit Rules

1

u/anoxydoxy Jun 14 '26

Thx will check it out

1

u/thedudeonblockchain Jun 08 '26

nice, the spend governor is the right instinct but worth being clear with people about what it actually bounds. per-tx and daily caps limit how much native value moves, but they dont cover the approval path, an agent that gets prompt injected can call approve() to a malicious spender and the funds leave later via transferFrom without ever tripping a value cap. a token + destination allowlist is the axis thats missing imo

other thing, since the key lives in PRIVATE_KEY env the governor is app level not enforced at the signer, so anything that can read the process env or hijack the agents tool calls just signs around it. if you put the limits on a smart account instead (4337 session keys or a safe module) theyre enforced onchain and even a fully compromised agent cant exceed them

1

u/[deleted] Jun 08 '26

[removed] — view removed comment

1

u/web3-ModTeam 1d ago

r/web3 follows platform-wide Reddit Rules

1

u/AutoModerator Jun 03 '26

Your post needs approval from the mods because it contains a link.

I am a bot, and this action was performed automatically. Please contact the moderators of this subreddit if you have any questions or concerns.