Alloy

Autonomous AI Agents running in Oasis TEEs that securely control assets on EVM chains via MCP

Alloy

Created At

ETHGlobal Buenos Aires

Project Description

Autonomous AI Agents running in Oasis TEEs that securely control assets on 60+ EVM chains via MCP. Description We built a platform for creating and managing Trustless AI Agents that can securely manage user funds and execute complex on-chain workflows. Traditional AI agents are insecure—users must hand over private keys to a server operator. Our solution moves the Agent's "brain" and wallet into an Oasis ROFL (Runtime for Off-chain Logic) container. This Trusted Execution Environment (TEE) ensures that not even the developers can access the agent's private keys.

The Agent acts as a Layer 2 Hub:

  1. Onramp: Users deposit funds to the Agent's TEE-derived address.
  2. Execution: The Agent processes logic off-chain (in the TEE), making high-frequency decisions or interacting with other agents (A2A) without gas costs.
  3. Offramp/Settlement: When an on-chain action is needed, the Agent uses our custom EVM MCP Server to execute transactions on any of 60+ supported chains.

How it's Made

The core of the project is a Hub-and-Spoke architecture powered by Oasis ROFL, MCP, and Filecoin.

The Trusted Hub (Oasis ROFL): We run a Hono server inside an Oasis Sapphire TEE (ROFL). This secure enclave generates and holds the Agent's private key in memory, ensuring it never touches persistent disk or leaves the hardware boundary. The Agent's state is managed locally with Drizzle ORM.

The Universal Spoke (MCP & Viem): We built a custom Model Context Protocol (MCP) server (⁠ @evm-mcp-server ⁠) that gives the Agent a standardized interface to interact with the blockchain.

  • Dynamic ABI Fetching (The Hacky Part): Instead of hardcoding contract interfaces, our MCP server uses Viem and Block Explorer APIs to fetch contract ABIs on the fly. This means our Agent can interact with any verified smart contract on 60+ chains without prior configuration—it literally reads the contract's manual before using it.
  • Tools: We expose 22+ MCP tools including ⁠ transfer_erc20 ⁠, ⁠ read_contract ⁠, ⁠ write_contract ⁠, and ⁠ resolve_ens_name ⁠ (automatically handling ENS for every address field).

The Brain (Filecoin/Synapse): To ensure the Agent's behavior is verifiable, its instructions and knowledge base are stored on Filecoin via the Synapse SDK. When an Agent boots inside the TEE, it downloads its "Brain" from decentralized storage, ensuring it's running exactly the logic the user expects.

background image mobile

Join the mailing list

Get the latest news and updates