UluWalletMCP
Provides tools for managing Algorand signer records, enforcing local signing policy, and signing transactions and bytes for the Algorand blockchain.
Click on "Install Server".
Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state.
In the chat, type
@followed by the MCP server name and your instructions, e.g., "@UluWalletMCPCreate a hot signer for my trading bot"
That's it! The server will respond to your query, and you can continue using it as needed.
Here is a step-by-step guide with screenshots.
UluWalletMCP
MCP server for managing Algorand signer records, enforcing local signing policy, and signing payloads.
Build anywhere, sign here.
UluWalletMCP is not responsible for network access, querying chain state, building transactions, or broadcasting. The caller handles chain context and payload correctness. UluWalletMCP handles key management, policy enforcement, and signing only.
Setup
npm installOptionally set a custom data directory (defaults to ~/.ulu-wallet-mcp):
export ULU_WALLET_MCP_DATA_DIR=/path/to/dataRelated MCP server: Agent Identity Protocol (AIP)
Usage
node index.jsAdding to a Client
{
"mcpServers": {
"ulu-wallet-mcp": {
"command": "node",
"args": ["/absolute/path/to/ulu-wallet-mcp/index.js"]
}
}
}Tools
Signer Management
Tool | Description |
| List all registered signers |
| Get full signer record by ID |
| Generate a new hot signer with fresh keypair |
| Import an account from a 25-word mnemonic |
| Create a LogicSig signer from compiled TEAL |
| Delete a signer and its key material |
Signing
Tool | Description |
| Sign unsigned transactions with policy enforcement |
| Sign arbitrary bytes (hot signers only) |
Core Concepts
Signer Record
Each signer is a registered signing authority identified by signerId:
{
"signerId": "agent-hot-1",
"signerType": "hot",
"signerClass": "custody",
"storageType": "local_file",
"capabilities": ["sign_transactions", "sign_bytes"],
"metadata": {
"description": "Agent automation signer",
"nickname": "agent-hot",
"createdAt": "2026-03-07T18:00:00Z"
},
"addresses": {
"primary": "ADDRESS_HERE",
"authAddress": null,
"lsigAddress": null
},
"policy": {
"maxTransactionsPerRequest": 16,
"allowRekey": false,
"allowCloseRemainderTo": false,
"allowAssetCloseTo": false,
"expiresAt": null
},
"config": {},
"state": {}
}Signer Types
Type | Description | Use Cases |
| Unattended local signer with key stored on disk | Automation, relays, fee sponsorship, agents |
| Stored LogicSig signer (Algorand-specific) | Constrained delegated signing, time-limited authority |
| OS-keychain-backed signer (planned) | User custody, higher trust signing |
Signer Classes
Class | Meaning |
| Signer controls key material directly |
| Constrained delegated authority (e.g. LogicSig) |
| Signing performed by external system (planned) |
| Identity-only record, no signing (planned) |
Storage Types
Type | Used By |
| Hot signers — secret key stored in |
| LogicSig signers — serialized lsig stored in |
| Secure signers (planned) |
Capabilities
Capability | Description |
| Can sign Algorand transaction payloads |
| Can sign arbitrary byte arrays (hot signers only) |
Policy
Policy is enforced before every signing operation. Transactions violating policy are rejected.
Field | Default | Description |
|
| Max transactions per signing call |
|
| Allow transactions with |
|
| Allow payment transactions that close the account |
|
| Allow asset transfers that close out the asset |
|
| ISO 8601 expiry timestamp, |
Additionally, wallet_sign_transactions verifies that each transaction's sender address matches the signer's address before signing.
Data Directory
All persistent state lives under ~/.ulu-wallet-mcp/ (or $ULU_WALLET_MCP_DATA_DIR):
~/.ulu-wallet-mcp/
├── signers.json # Signer records (0600)
└── keys/ # Key material directory (0700)
├── <signerId>.key # Hot signer secret keys (0600, base64)
└── <signerId>.lsig # Serialized LogicSig artifacts (0600, base64)Key material files are created with restrictive permissions (0600/0700).
This server cannot be installed
Maintenance
Resources
Unclaimed servers have limited discoverability.
Looking for Admin?
If you are the server author, to access and configure the admin panel.
Latest Blog Posts
- Your AI Chatbot Just Exposed Your CEO's Salary to an InternBy Om-Shree-0709 on .Agent IdentityMCP SecurityOAuth Delegation
- Why MCP Servers Need Execution Sandboxing (And Why Your Current Stack Isn't Enough)By Om-Shree-0709 on .Agentic AiPrompt InjectionWebAssembly
MCP directory API
We provide all the information about MCP servers via our MCP API.
curl -X GET 'https://glama.ai/api/mcp/v1/servers/NautilusOSS/UluWalletMCP'
If you have feedback or need assistance with the MCP directory API, please join our Discord server