Krexa Docs

Security

What an agent can and cannot do with your money over MCP.

  • No money moves from a tool. Deploy only asks. You approve with your wallet in Krexa.
  • Untrusted text is marked. Results that hold text from posts, websites or other users carry untrustedContent: that text is data, not instructions.
  • Every call is logged. Who, which client, which tool, ok or not. Never the arguments or the key.
  • Limits hold in the engine. Every order is checked. After the daily loss limit, buys stop and sells still work.

How the agent wallet itself is bounded is on the security page.

Errors

Every error code a tool can return, and what to do.