Skip to main content
Interactive setup that creates your wallet and authorizes an agent session on-chain. Run this once per project.

​
Options

​
What it does

1

Opens browser for wallet creation

Registers a passkey. Your Tempo account address is derived deterministically from the passkey public key. The private key never leaves your device’s secure enclave.
2

Fund your wallet

Displays your wallet address. Send stablecoins to the address and the CLI continues once funds arrive.
3

Configures the session

Prompts for spending limit (USD) and expiry (days).
4

Opens browser for passkey approval

The on-chain authorization of the access key requires a passkey signature from your root account. This is the only time your passkey is required after setup.
5

Writes .env

Credentials are written to .env in the current directory. Existing AGENT_* variables are replaced, other content is preserved.

​
Output

​
Security model

  • Your root wallet private key is never stored anywhere
  • It is derived from your passkey on each use, inside your device’s secure enclave
  • AGENT_PRIVATE_KEY is an access key — a separate derived key with a hard spending limit enforced on-chain by Tempo’s Account Keychain precompile
  • If the access key is compromised, an attacker can only spend up to the remaining limit. They cannot access your root wallet or create new sessions.