Rustok Wallet

io.github.temrjanPublished by GitHub account temrjanv0.2.2Updated Oct 24, 2026

Self-custody Ethereum Agent Wallet. All chains enabled by default. User assumes all risks.

VerifiedSTDIODesktop onlyFinanceSecurity & Monitoring

Overview

AI-generated overview

A local MCP server that gives an AI assistant a self-custody Ethereum agent wallet with multi-chain balances, sends, and pre-sign transaction security analysis.

What you can do
Manage a self-custody Ethereum wallet unlocked with a password, covering Ethereum, Arbitrum, Base, Optimism, zkSync and Sepolia testnet with unified balance and routing. Check balances and send ETH or tokens, with a mandatory txguard security check before signing. Analyze transactions before signing: decode calldata, apply security rules, simulate execution and enrich findings with threat intelligence. Gate capabilities in read, preview and execute tiers, with a trust ladder from autonomous agent to console-approved to phone-signed.
When to use it
Use it when you want an AI assistant to hold and operate a self-custody Ethereum wallet across several chains, or to run pre-sign security checks on transactions and addresses. It suits agent-driven on-chain workflows where every action should be verified before signing.
Requirements
Runs as a local process via the npm package rustok-agent-mcp over stdio. The environment variable RUSTOK_AGENT_PASSWORD is required to unlock the agent wallet. Desktop only; no web execution. Network access to the supported chains is needed for balances and sends.
Before you install
The server controls a self-custody wallet holding real funds, and the README states the user assumes all risks. It asks for the wallet password through RUSTOK_AGENT_PASSWORD, so treat that secret carefully. Sending transactions moves funds and is irreversible; keep the execute tier and trust ladder restrictive and review txguard findings before approving. Address checks send addresses to a third-party threat-intelligence service.

Installation

In SourceWeft

  1. Open Rustok Wallet in the dashboard and add it to a workspace.
  2. Enable the server for the chats that should use its tools.

Desktop only via STDIO. STDIO servers start a local process, so they need the SourceWeft desktop host.

Other MCP clients

Follow the launch instructions in the repository.

README

Rustok

Ethereum wallet with chain abstraction and transaction security engine.

Status: Production — Phase 7 DONE — Android verified on Sepolia; iOS supported. React Native app with real on-chain transactions, full onboarding, and txguard live analysis.

Website: rustokwallet.com | X: @rustokwallet | Agent editions: github.com/rustok-org

What is this?

Rustok is a self-custody Ethereum wallet built around two ideas:

  1. Your keys, your chains — one seed phrase controls addresses across Ethereum, Arbitrum, Base, Optimism, and zkSync. Balance and routing are unified; you pick the chain, the wallet handles the rest.
  2. Trust but verify — every transaction is analyzed by txguard before signing. It decodes calldata, runs security rules, simulates execution via revm, and enriches findings with threat intelligence.

The mobile app (Android + iOS) is the primary interface. A public HTTP API and CLI are available for headless txguard analysis.

2026 evolution: the same self-custody core now ships as a wallet for AI agents — MCP tools with fail-closed capability gating (read / preview / execute) and a three-rung trust ladder (autonomous agent → console-approved → phone-signed). See rustokwallet.com and the rustok-org repositories (mcp, console, mobile, paraswap-mcp, uniswap).

Features

  • Multi-chain wallet — unified balance, send, and receive across 5 mainnet chains + Sepolia testnet
  • BIP39 seed phrase — MetaMask-compatible path (m/44'/60'/0'/0/0), cross-device recovery
  • txguard analysis — pre-sign security scan with risk badge and per-finding breakdown
  • PIN + Biometric lock — Argon2id-hashed PIN, Face ID / fingerprint unlock, background auto-lock
  • Onboarding — create wallet (4-step wizard + phrase quiz), import from seed phrase, or recover from lockout / biometric change
  • Activity history — real transaction feed with pending-state tracking and explorer links
  • Theme — light / dark / system with design-token consistency across the UI

Architecture

┌─────────────────────────────────────────────────────────────┐│                    Mobile App (Android / iOS)                ││  ┌─────────┐  ┌─────────┐  ┌─────────┐  ┌────────────────┐ ││  │ Wallet  │  │ Activity│  │ TxGuard │  │    Settings    │ ││  │  Tab    │  │  Tab    │  │  Tab    │  │  (Appearance,   │ ││  │         │  │         │  │         │  │   Biometric,   │ ││  │ • Hero  │  │ • TX    │  │ • Risk  │  │   Auto-lock,   │ ││  │   card  │  │   list  │  │   badge │  │   Network)     │ ││  │ • Send  │  │ • Pull  │  │ • Per-  │  │                │ ││  │ • QR    │  │   refresh│  │   finding│  │                │ ││  └─────────┘  └─────────┘  └─────────┘  └────────────────┘ ││  ┌─────────────────────────────────────────────────────────┐││  │  React Navigation v7  •  Zustand 5  •  NativeWind v4   │││  │  Reanimated 4  •  MMKV  •  Keychain  •  Argon2id       │││  └─────────────────────────────────────────────────────────┘│└───────────────────────────┬─────────────────────────────────┘                            │ JS ↔ Rust Bridge┌───────────────────────────▼─────────────────────────────────┐│          react-native-rustok-bridge                          ││          (uniffi-bindgen-react-native 0.31)                 │└───────────────────────────┬─────────────────────────────────┘                            │ FFI┌───────────────────────────▼─────────────────────────────────┐│                      Rust Workspace                          ││  ┌─────────────┐  ┌─────────────┐  ┌─────────────────────┐ ││  │ rustok-core │  │   txguard   │  │    rustok-api       │ ││  │             │  │             │  │                     │ ││  │ • keyring   │  │ • parser    │  │  Axum HTTP server   │ ││  │ • provider  │  │ • rules     │  │  /health            │ ││  │ • router    │  │ • simulator │  │  /check-address     │ ││  │ • send      │  │ • enrichment│  │  /decode            │ ││  │ • explorer  │  │             │  │                     │ ││  │ • explainer │  │ 8 security  │  │  Self-hosted        │ ││  │ • convert   │  │ rules       │  │  (see deploy/)      │ ││  └─────────────┘  └─────────────┘  └─────────────────────┘ ││  ┌─────────────┐  ┌─────────────┐  ┌─────────────────────┐ ││  │ rustok-cli  │  │ rustok-types│  │rustok-mobile-bindings│ ││  │             │  │             │  │                     │ ││  │  CLI binary │  │ Shared DTOs │  │  uniffi FFI exports │ ││  │  (decode,   │  │  (no crypto │  │  for iOS / Android  │ ││  │   analyze,  │  │   deps)     │  │                     │ ││  │   wallet,   │  │             │  │                     │ ││  │   send)     │  │             │  │                     │ ││  └─────────────┘  └─────────────┘  └─────────────────────┘ │└─────────────────────────────────────────────────────────────┘

Tech Stack

LayerTechnology
MobileReact Native 0.85.2, React 19.2.3, TypeScript 5.8
NavigationReact Navigation v7 (bottom-tabs, native-stack)
StylingNativeWind v4, TailwindCSS 3.4, design-token system
StateZustand 5, MMKV (persistent), React Native Keychain (secrets)
AnimationsReanimated 4.3, React Native Worklets, Gesture Handler
Bridgeuniffi-bindgen-react-native 0.31.0-2
LanguageRust (edition 2024)
EVMrevm v36, alloy-evm v0.30
Ethereumalloy-rs v1.8 (provider, signer, primitives, consensus)
CryptoBIP39 (m/44'/60'/0'/0/0), AES-256-GCM, Argon2id, secp256k1
HTTPAxum 0.8, Tower HTTP (CORS, trace)
AsyncTokio, Futures
SerializationSerde, Serde JSON
CLIclap v4
Loggingtracing, tracing-subscriber

Quick Start

Mobile App

Prerequisites: Node.js ≥ 22.11, Android SDK (for Android) or Xcode + CocoaPods (for iOS).

bash
# Install dependenciescd mobile && npm install
# Start Metro bundlernpx react-native start --port 8081
# Android (separate terminal)cd android && ./gradlew app:installDebug -PreactNativeDevServerPort=8081# Windows: .\gradlew.bat app:installDebug -PreactNativeDevServerPort=8081
# iOS (macOS only, separate terminal)cd ios && pod install && cd .. && npx react-native run-ios

For physical Android devices:

bash
adb reverse tcp:8081 tcp:8081

Detailed mobile docs: See mobile/README.md for onboarding flow, bridge surface, DEV escape hatches, and Android/Windows specifics.

Rust Workspace

bash
# Run all testscargo test --workspace
# Build CLIcargo build -p rustok --release
# Run API server locallycargo run -p rustok-api

CLI Examples

Transaction Security Analysis
bash
# Decode ERC-20 approve calldatarustok decode \  --to 0xdAC17F958D2ee523a2206206994597C13D831ec7 \  --data 0x095ea7b3000000000000000000000000000000000000000000000000000000000000dead00000000000000000000000000000000000000000000000000000000000f4240
# Full security analysis (parse + rules + verdict)# Exit codes: 0=allow, 1=warn, 2=blockrustok analyze \  --to 0xdAC17F958D2ee523a2206206994597C13D831ec7 \  --data 0x095ea7b3ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff
Wallet Operations
bash
# Generate a new encrypted walletrustok wallet new --password "your-secure-password"
# Check unified balance across Ethereum, Arbitrum, Base, Optimism, zkSyncrustok wallet balance 0xd8dA6BF26964aF9D7eEd9e03E53415D37aA96045
# Show wallet info from keystore filerustok wallet info --keystore 0xabc...def.json --password "your-password"
# Send ETH (txguard security check mandatory, testnet by default)rustok wallet send --keystore wallet.json --password "pwd" --to 0xd8dA...6045 --amount 0.1

Security Rules (txguard)

RuleSeverityTrigger
unlimited_approvalWarningapprove(spender, type(uint256).max)
set_approval_for_allWarningsetApprovalForAll(operator, true)
permit_to_unknownDangerEIP-2612 permit to unknown spender
permit_unlimitedWarningPermit with value == U256::MAX
known_scamForbiddenAddress in scam database
unknown_functionWarningUnrecognized function selector
value_with_calldataWarningETH sent with contract call
send_to_contractInfoTransfer to contract address

Supported Chains

ChainIDStatus
Ethereum1Active
Arbitrum One42161Active
Base8453Active
Optimism10Active
zkSync Era324Active
Sepolia11155111Testnet

txguard API

Public API for transaction security analysis (rustok-api, Axum). Self-hosted — see deploy/.

EndpointMethodDescription
/healthGETHealth check
/check-addressPOSTAddress security check via GoPlus (malicious flag, risk level, risks)
/decodePOSTDecode and analyze raw EVM transaction (action, risk score, findings)
bash
# Check addresscurl -X POST https://your-rustok-api-host/check-address \  -H "Content-Type: application/json" \  -d '{"address": "0xdAC17F958D2ee523a2206206994597C13D831ec7"}'
# Decode transactioncurl -X POST https://your-rustok-api-host/decode \  -H "Content-Type: application/json" \  -d '{"to": "0xdAC17F958D2ee523a2206206994597C13D831ec7", "data": "0x095ea7b3000000000000000000000000000000000000000000000000000000000000dead00000000000000000000000000000000000000000000000000000000000f4240"}'

Deployed via Docker + Caddy on 185.197.195.191 (deploy/).

Tests

517 tests, 0 failures - Rust workspace: 231 tests (txguard, core, types, mobile-bindings) - Mobile (Jest):   286 tests (components, stores, hooks, screens)

Pre-commit gates:

bash
# Rustcargo fmt --all --checkcargo clippy --workspace --all-targets -- -D warningscargo test --workspace
# Mobilecd mobile && npm run typecheck && npm run lint && npm run test

Project Layout

rustok/├── mobile/                          # React Native app (primary UI)│   ├── src/│   │   ├── screens/                 # Wallet, Activity, TxGuard, Settings, Onboarding│   │   ├── components/              # Design system primitives│   │   ├── navigation/              # AppShell, navigators│   │   ├── stores/                  # Zustand + MMKV state│   │   ├── hooks/                   # Selectors and logic│   │   ├── lib/                     # Bridge, formatting, explorers│   │   └── theme/                   # Design tokens│   ├── android/                     # Gradle project│   └── ios/                         # Xcode project│├── packages/│   └── react-native-rustok-bridge/  # uniffi JS ↔ Rust bridge package│├── crates/                          # Rust workspace│   ├── txguard/                     # Transaction security engine│   ├── core/                        # Wallet logic (keyring, provider, router, send)│   ├── types/                       # Shared DTOs│   ├── api/                         # Axum HTTP server│   ├── cli/                         # CLI binary│   └── rustok-mobile-bindings/      # uniffi FFI exports│├── deploy/                          # Docker + Caddy deployment└── docs/                            # Architecture, phase handoffs, incident reports

License

Rustok is dual-licensed:

  • AGPL-3.0-or-later — open source. Free for any use that complies with AGPL terms, including making source code of derivative works and network-accessible services available to users.
  • Commercial License — available from the copyright holder for uses that cannot comply with AGPL-3.0 (e.g. closed-source Apple App Store or Google Play distribution, bundling into proprietary products).

See NOTICE.md for a summary of licensing, trademarks, and contribution terms.

Trademarks

"Rustok" and "txguard" are trademarks of Temrjan Khasenov. Source code is AGPL-3.0, but the marks are not — see TRADEMARK.md.

Visual assets

Logos, icons, and brand imagery are not under AGPL-3.0. See ASSETS-LICENSE.md.

Contributing

Contributions are accepted under the Developer Certificate of Origin (DCO). See CONTRIBUTING.md.

Copyright (c) 2025-2026 Temrjan Khasenov.

Source: README.md at commit 1e67041

Tools

0
SourceWeft has not started this package in its sandbox yet, so its tools are not known.

Version history

1
  1. v0.2.2LatestSep 16, 2026

Score

50% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

  • Reached in the last 30 days25 pts

    Keep the endpoint answering the MCP handshake; SourceWeft probes it every 30 days.

  • Auth declared10 pts

    Declare the credential headers in the registry entry, or keep the endpoint answering the probe so its auth can be classified.

  • Tools listed15 pts

    Answer tools/list without a credential, or ship a package that starts in a sandbox without one.

  • DescriptionRequired15 pts
  • Logo10 pts
  • Documentation15 pts
  • License10 pts