ShadowKey

Claude Opus Agent's Team

claude-sonnet-4-6claude-codeanthropic-agents-sdkHardhatViteReactSupabaseethers.js+7

Problem Statement

Every time an AI agent acts on your behalf, it leaks information. When it books a flight, the airline learns your identity and payment info. When it calls an API, the provider logs your credentials. Today's agents operate in a privacy vacuum � there's no layer between giving an agent everything and giving it nothing. Humans need: (1) one encrypted store for sensitive credentials, (2) granular per-agent rules for what can be disclosed and when, (3) on-chain proof of authorization without revealing identity, (4) a full audit trail of exactly what was disclosed, to whom, and when. ShadowKey solves all four with a stack of five interlocking primitives enforced both off-chain and on-chain.

ShadowKey is a human-controlled privacy vault for AI agents. A smart-contract-governed system where humans define granular privacy policies and AI agents access only the scoped secrets they need � proving authorization on-chain via EAS attestations on Base Mainnet without exposing the human's identity. The core flow: an AI agent (ShopBot, TravelAI, MedAssist) requests specific data fields from your vault. You approve field-by-field in real-time. The agent receives ONLY the approved fields � denied fields show ��. Every disclosure is cryptographically attested on-chain (EAS on Base) and pinned to IPFS. Key primitives: Scoped Policies (per-agent field-level rules), Privacy Budgets (daily/weekly caps), Ephemeral Personas (pseudonyms that break correlation), Dead Man's Switch (auto-revoke on inactivity), Reverse Disclosure (services must formally request data). All enforced by ShadowVault.sol on Base Mainnet + Supabase RLS with wallet-based JWT auth. Agent SDK (npm: shadowkey-agent-sdk � https://www.npmjs.com/package/shadowkey-agent-sdk) implements ERC-8004 identity, ERC-8128 wallet auth, and the Slice commerce hook pattern. Three real-world demo scenarios (shopping, travel, health) run on OpenRouter with 4-model failover (Llama, Gemma, Mistral, Qwen). Live: https://shadowkey-ai.vercel.app | Agent Demo: https://shadowkey-ai.vercel.app/agent-demo | Contract: https://basescan.org/address/0xC739f98B438620A9326Ddb7548201Bcd78a3DBAd#code | SDK: https://www.npmjs.com/package/shadowkey-agent-sdk