Monolith — Crypto Wallet Skill

Secure crypto wallet for OpenClaw agents. Monolith combines hardware-isolated keys (Apple Secure Enclave), on-chain spending controls, and policy-gated approvals so agents can transact safely without exposing private keys.

Commands

Command	What it does	Requires daemon?
send [token] [chainId]	Send ETH or USDC	Yes
swap [tokenOut] [chainId]	Swap ETH for tokens via Uniswap (Routing API with on-chain fallback)	Yes
balance [chainId]	Check ETH and stablecoin balances	No (read-only)
capabilities	Show current limits, budgets, gas status	Yes
decode	Decode a tx intent into human-readable summary	Yes
panic	Emergency freeze — instant, no Touch ID	Yes
status	Check daemon health and wallet info	Yes
identity [query\	register]	ERC-8004 identity operations	Partially
setup	Run setup wizard, show wallet status and config	Yes
policy	Show current spending policy	Yes
policy update ''	Update spending policy (Touch ID required)	Yes
allowlist	remove> [label]	Add or remove address from allowlist (Touch ID required)	Yes
audit-log	Show the daemon audit log	Yes

Security Model

• The skill is untrusted. It only builds intents: {target, calldata, value}.
• The skill NEVER sets nonce, gas, chainId, fees, or signatures.
• The signing daemon (local macOS process) enforces all policy.
• Transactions within policy limits execute automatically (autopilot).
• Transactions that exceed limits or use unknown calldata require human approval via 8-digit code.
• Token approvals (approve, permit, etc.) ALWAYS require explicit approval.

What requires approval?

• Transfers over per-tx or daily spending caps
• Transfers to non-allowlisted addresses
• Token approvals (approve, permit, setApprovalForAll)
• Unknown calldata (default-deny policy)
• Swaps above slippage limits

What works on autopilot?

• ETH and USDC transfers within limits to allowlisted addresses
• Swaps on allowlisted DEXes (Uniswap) within slippage limits
• DeFi deposits/withdrawals on allowlisted protocols (Aave)
• Balance checks, status queries, decode requests

Setup

• Install Monolith from ClawHub: clawhub install monolith
• Start a new OpenClaw session so the skill is loaded.
• Install local macOS components from the install entries:
• MonolithDaemon-v0.1.5.pkg (admin/root install)
• MonolithCompanion.app.zip (extract app to /Applications and open once)
• Start daemon first, then companion. If companion was opened before daemon, restart companion after daemon is running.
• Run monolith setup to verify daemon/companion connectivity and wallet status.
• Fund the wallet address with ETH on your chosen chain.
• Start transacting.

First-Install Notes (OpenClaw bot/operator)

• Approval flows (Touch ID + notifications) require an active logged-in macOS GUI session.
• Headless-only SSH sessions cannot complete biometric/notification approval steps.
• monolith setup is the canonical health check before attempting send, swap, policy, or allowlist commands.

Error Handling

• If the daemon is not running, all signing commands will fail with a clear error
• If gas is low, the daemon will refuse transactions — fund the wallet with more ETH
• If the wallet is frozen, no outbound transactions are possible until unfrozen (requires Touch ID + 10min delay)
• Rate-limited by Pimlico? The daemon uses exponential backoff automatically

Approval Flow

When a transaction exceeds policy limits or uses unknown calldata, the daemon returns HTTP 202 with a reason, summary, and expiration. The agent should:

• Present the approval reason and summary to the user.
• Ask the user for the 8-digit approval code (displayed by the daemon's native macOS dialog).
• Re-call /sign with the same intent plus the approvalCode field to confirm.

No separate approval script is needed -- the same send or swap command is re-invoked with the approval code passed through the daemon.

Swap Routing

Uses Uniswap Routing API when available; falls back to on-chain V3 fee-tier probing (tries 3000, 500, 10000 bps tiers, picks best quote). The fallback ensures swap intents can still be built when the API is down or returns unexpected results.

Chains

• Ethereum Mainnet (chainId 1)
• Base (chainId 8453)