Skip to main content
Agentic wallets give AI agents the ability to hold funds, sign transactions, and interact with smart contracts autonomously — without exposing private keys to the agent or the LLM. This page covers the two leading solutions that work on Sei today: Coinbase AgentKit and Privy server wallets.
Both platforms support Sei as an EVM-compatible chain. No special integration is required — you point the wallet provider at Sei’s RPC and chain ID and everything works out of the box.

How It Works

An agentic wallet sits between your AI agent and the blockchain:
  1. Agent decides — The LLM reasons about what onchain action to take (e.g. “send 5 USDC to 0x…”).
  2. SDK prepares — The wallet SDK constructs and validates the transaction.
  3. Policy check — The policy engine evaluates the transaction against spending limits, allowlists, and other guardrails.
  4. TEE signs — The private key, isolated in a Trusted Execution Environment, signs the transaction. The key is never exposed to the agent.
  5. Broadcast — The signed transaction is submitted to Sei’s EVM RPC.

Quick Comparison

Use both together: AgentKit ships with a built-in PrivyWalletProvider, so you can combine Privy’s policy engine with AgentKit’s 40+ action providers.

Coinbase AgentKit on Sei

AgentKit is Coinbase’s open-source toolkit for giving AI agents crypto wallets and onchain capabilities. It is framework-agnostic (LangChain, Vercel AI SDK, OpenAI Agents SDK, MCP) and wallet-agnostic (CDP wallets, Privy, Viem, and more).

Architecture

AgentKit is organized around three concepts:
  • Wallet Providers — Abstraction over different wallet implementations. For Sei, use ViemWalletProvider (TypeScript) or EthAccountWalletProvider (Python).
  • Action Providers — Units of onchain functionality (ERC-20 transfers, ERC-721 ops, Pyth price feeds, etc.). Generic EVM providers work on Sei; providers with hard-coded chain allowlists (e.g. x402ActionProvider, wethActionProvider, CDP-managed ones) do not — see the support matrix below.
  • Framework Extensions — Adapters that turn AgentKit actions into tools for your AI framework of choice.

Prerequisites

  • Node.js v22+ (TypeScript) or Python 3.10+
  • A CDP Secret API Key (for CDP wallet providers; not required for Viem)
  • A funded wallet on Sei

Setup

1

Install packages

2

Create the wallet provider and AgentKit

Viem ships with sei (id 1329) and seiTestnet (id 1328) out of the box, so you can import them directly from viem/chains.
3

Wire into LangChain

Available Action Providers on Sei

Not every AgentKit action provider works on Sei — some are chain-specific. Here’s what you can use:
For Sei-native DeFi actions (swaps on Symphony/DragonSwap, staking via Silo, lending via Takara), use the Cambrian Agent Kit alongside AgentKit, or write custom action providers.

Known Quirks on Sei

Verified by running AgentKit 0.10.4 against Sei testnet (chain 1328). These quirks sit in AgentKit’s network and action-provider layer and apply to both ViemWalletProvider and PrivyWalletProvider:
  • Balances are labeled “ETH” in action output. walletActionProvider hard-codes the native-currency symbol, so get_wallet_details returns strings like Native Balance: 512993.50 ETH and native_transfer responses say Transferred 0.05 ETH to 0x... even on Sei. Signing and arithmetic are unaffected — it’s a display-only quirk. If the LLM will quote balances or transfer confirmations to users, add a post-processing step or a system-prompt instruction to rewrite ETHSEI when chain_id == 1329 || 1328.
  • networkId is undefined. Coinbase’s internal CHAIN_ID_TO_NETWORK_ID map only includes Ethereum, Polygon, Base, Arbitrum, and Optimism (mainnet + testnet). Sei’s chain IDs aren’t in it, so walletProvider.getNetwork() returns { protocolFamily: 'evm', chainId: '1328', networkId: undefined }. This is harmless for signing/sending, but any action provider that branches on networkId will refuse to run on Sei. In practice, AgentKit.from({...}) prints a warning like The following action providers are not supported on the current network and will be unavailable: weth, x402 and silently drops them — if you expect an action and it’s missing from agentKit.getActions(), check this warning first.

CDP-Managed Wallets and Sei

AgentKit’s CdpEvmWalletProvider (CDP-managed server wallets with built-in policies) is currently scoped to base, base-sepolia, ethereum, ethereum-sepolia, polygon, arbitrum, and optimismSei is not a supported network. For managed cloud custody with a policy engine on Sei, use one of:
  • Privy server wallets (below) — TEE-isolated keys with a policy engine that works on any EVM chain, including Sei.
  • AgentKit + Privy combined — use PrivyWalletProvider inside AgentKit to keep the 40+ action providers while delegating custody and policy enforcement to Privy. See Using AgentKit with Privy (Combined) below.
If you only need self-custodial keys (no TEE, you hold the private key), use ViemWalletProvider as shown above and enforce limits in your own application logic.

Privy Server Wallets on Sei

Privy provides wallet-as-a-service infrastructure for AI agents. Server wallets are programmatically managed wallets designed for backend use — no user interaction required. Keys are isolated in TEEs with Shamir secret sharing and never leave secure enclaves.

Prerequisites

  • A Privy account with an App ID and App Secret
  • An authorization keypair (generated in the Privy dashboard)

Setup

1

Create a wallet

Response:
2

Send a transaction on Sei

Use eip155:1329 (CAIP-2 format) to target Sei mainnet:
3

Sign a message

Known Quirks on Sei (Privy)

Verified by running @privy-io/server-auth 1.32.5 against Sei testnet (eip155:1328):
  • value must be a hex string, not a BigInt. Privy’s request signer uses RFC 8785 JSON canonicalization (canonicalize), which throws TypeError: Do not know how to serialize a BigInt if you pass a BigInt in any field of the transaction object. Convert viem’s parseEther(...) output with '0x' + parseEther('0.01').toString(16) before sending.
  • authorizationKeyIds on createWallet expects the public-key registration ID, not the dashboard key ID. Passing the ID shown next to a key in the Privy dashboard can fail with 400 Invalid authorization key IDs. If you only need an app-owned wallet (app credentials + authorizationPrivateKey for request signing), omit authorizationKeyIds — the wallet is still fully operable.

Privy with LangChain

Privy publishes a LangChain integration (langchain-privy) that exposes wallet operations as a single LangChain tool. The tool reads PRIVY_APP_ID and PRIVY_APP_SECRET from the environment and is bound directly to the LLM:
As of langchain-privy@0.1.0, the library’s Chain enum does not include Sei — the built-in tool only targets Ethereum, Base, Optimism, Arbitrum, Polygon, Zora, Avalanche, BSC, Celo, Linea, Solana, and Bitcoin. For Sei, either:
  • Call Privy’s REST API / server-auth SDK directly with caip2: eip155:1329 (shown above), or
  • Use AgentKit’s PrivyWalletProvider with a LangChain adapter (@coinbase/agentkit-langchain) — see the Combined section below.

Privy Policy Engine

Privy’s policy engine evaluates policies server-side before signing. Each rule pairs an ALLOW/DENY action with an RPC method and a list of conditions on transaction fields. Attach one or more policies to a wallet via updateWallet.
Privy’s engine is default-deny. A request is allowed only when at least one ALLOW rule matches and no DENY rule matches. A policy built from DENY-only rules blocks every transaction — including ones you expect to pass. Always start from an explicit ALLOW rule that describes the happy path, then layer DENY rules on top.
Conditions support the eq, gt, gte, lt, lte, and in operators against ethereum_transaction fields (to, value) or ethereum_calldata fields. Operand order is tx_field <operator> rule_value — e.g. operator: 'lte' with value: '10000000000000000000' means “transaction value ≤ 10 SEI”. method must be eth_sendTransaction or eth_signTransaction. Chain restriction is not a policy condition — enforce caip2: 'eip155:1329' at the call site to keep an agent on Sei.
Privy also offers features beyond the policy engine:
  • Key quorums — require multiple authorization keys to approve high-value transactions
  • Webhook notifications — get notified of all wallet activity (works chain-agnostically)

Using AgentKit with Privy (Combined)

AgentKit includes a built-in PrivyWalletProvider, so you can use Privy’s wallet infrastructure and policy engine as the backend while using AgentKit’s 40+ action providers for onchain operations. Because of the authorizationKeyIds quirk noted above, the simplest working pattern is to create the wallet once via the Privy SDK (or the dashboard) and then hand the resulting walletId to AgentKit:
This gives you the best of both worlds: Privy’s fine-grained policies and key quorums with AgentKit’s rich action library.
If you call PrivyWalletProvider.configureWithWallet without a walletId, AgentKit will attempt to create a new wallet for you and pass authorizationKeyId through to Privy — which hits the same 400 Invalid authorization key IDs failure described in Privy’s Known Quirks. Always pre-create the wallet and pass walletId.

Feature Matrix

Wallet Creation & Key Management

Policy Engine & Guardrails

Gas & Transaction Management

Agentic DeFi Actions

For Sei-native DeFi actions, use the Cambrian Agent Kit which includes built-in integrations for Symphony, DragonSwap, Silo, Takara, and Citrex.

x402 & Machine-to-Machine Payments

Developer Experience


Other Agentic Wallet Solutions

While Coinbase AgentKit and Privy are the most mature options for Sei, several other platforms support agentic wallet use cases:

Sei Network Configuration Reference

Use these values when configuring any agentic wallet provider for Sei:
Security Reminders:
  • Never expose private keys or authorization secrets to the LLM/agent process.
  • Always use dedicated wallets for agent operations — never your main wallet.
  • Start with testnet (eip155:1328) before deploying to mainnet.
  • Set spending limits and contract allowlists via the policy engine before going live.
  • Monitor agent wallet activity via block explorers or webhook notifications.