Agentic Policy Engine for Solana

Give the agent a wallet. Not a blank check.

Even if your agent is tricked, on-chain limits protect your vault. Maestro enforces program, token, recipient, timing, and spending rules directly on-chain. Owners can freeze or revoke at any time.

Experimental, unaudited, devnet-first. Do not use with real funds.

SDK

Built for OpenClaw Agents ๐Ÿฆž

Full TypeScript SDK and ClawdBot skill for vault creation, policy management, and agent execution on Solana.

SDK

Full TypeScript SDK for vault creation, policy management, and agent execution. Install with pnpm add @trionlabs/maestro-sdk

ClawdBot Skill

Native skill integration with ClawdBot. Manage vaults, set policies, and execute agent actions through conversational AI.

Built for OpenClaw

Designed for the OpenClaw ecosystem. List your agent on ClawHub for discovery and distribution.

Model

Greenlisted apps and whitelisted wallets bound every route.

The policy engine only lets value leave the vault when session authority is live, the target program is greenlisted, and the destination wallet is either whitelisted or explicitly co-signed.

Vault Policy
Programs
Tokens
Recipients
Vault
Per-TX
Daily
Tier-2
Standard Trade
$50 USDC โ†’ Treasury 9xK2...4fR
Jupiter
swap router
Policy Engine
Deny โœ“ clear
Time โœ“ 14:30 UTC ok
Auth โœ“ 1h 42m left
Access โœ“ Jupiter + USDC
Recip โœ“ Treasury whitelisted
Limits โœ“ $50 ok
CPI โœ“ balance verified
Execute
autonomous
New Recipient
$250 USDC โ†’ unknown.sol 3mN7...2qW
Raydium
AMM pool
Policy Engine
Deny โœ“ clear
Time โœ“ 14:30 UTC ok
Auth โœ“ 1h 42m left
Access โœ“ Raydium + USDC
Recip โš  unknown.sol unknown
Limits โš  $250 > tier-2 $100
CPI โœ“ balance verified
Co-sign
Recip, Limits
Malicious Bot
$750 USDC โ†’ suspicious.sol Dr41...nEr
DrainerBot
flagged prog
Policy Engine
Deny โœ• DrainerBot blacklisted
Time ยท 14:30 UTC ok
Auth ยท 1h 42m left
Access ยท DrainerBot not greenlisted
Recip ยท suspicious.sol unknown
Limits ยท $750 > per-tx $500
CPI ยท balance verified
Blocked
DrainerBot blacklisted
Standard Trade
$50 USDC โ†’ Treasury 9xK2...4fR
Jupiter
swap router ยท USDC
Policy Engine
Deny clear โœ“
Time 14:30 UTC ok โœ“
Auth 1h 42m left โœ“
Access Jupiter + USDC โœ“
Recip Treasury whitelisted โœ“
Limits $50 ok โœ“
CPI balance verified โœ“
Execute
autonomous

Mobile

Set the limits. Watch them hold.

Manage vaults, policies, and session keys from your phone.

Dashboard

Balances, spending, agent status.

SOL and USDC at a glance. Daily spending bar shows where you stand against your limit.

Policies

Six layers of rules. One screen.

Recipients, blacklist, greenlist, time windows, spending caps, security โ€” all configurable.

Session Keys

Grant access. Set the clock.

Time-bound agent authorization from one hour to one year. Monitor or revoke instantly.

Emergency

Freeze in one tap.

Vault locks immediately. No confirmation chain, no waiting period. You stay in control.

On-chain policy enforcement for AI agent wallets.

Program greenlists, spending limits, session keys, and owner override โ€” enforced at the protocol level, not the prompt level.