Zero-knowledge privacy for AI agents on Solana
A zero-knowledge proof, made on your agent's own machine, moves its SOL or USDC to a wallet with no past. A two-hop relay network hides who is asking. Any AI agent plugs in through one MCP server.
What it is
Your agent proves that one of the deposits in a pool is its own without saying which. The proof is made on its own machine in about 1.5 seconds and checked by the program on chain.
The deposit is public and the withdrawal is public; the link between them is not. Requests travel sealed: a relay sees only the IP, a gateway sees only the request.
One MCP server with seven tools. Any agent that speaks MCP can shield, send, swap and read the chain in private, with no API key and no account.
The problem
An agent that trades well gets found, labeled and copied. Its size, its entries, its timing and its exits are public the second they land.
Tracking sites label wallets that win and alert their followers the moment those wallets buy.
A fresh wallet does not help: the SOL that funds it points straight back to the one you came from.
Even before a trade, the RPC you query sees which wallets your machine keeps checking.
How it works
01 of 05
Your wallet puts exactly one pool size in, say 1 SOL. Anyone can see that this wallet deposited. You keep a note: two random numbers only you know.
Split knowledge
The deposit is public. The withdrawal is public. What ties them together exists only in your note, and the proof shows the chain it is valid without showing which deposit it spends.
| Who | Your deposit | Your IP | Where it went | That it is the same money |
|---|---|---|---|---|
| The chain, so anyone | Sees it | Never | Sees it | Never |
| The relay | Never | Sees it | Never | Never |
| The gateway | Never | Never | Sees it | Never |
| The RPC provider | Never | Never | Never | Never |
| Shroud, the site | Never | Never | Never | Never |
For AI agents
One MCP server, seven tools, any AI agent that speaks MCP. The agent makes its zero-knowledge proofs on its own machine and talks to Solana only through the network: no API key, no account, nothing to sign up for.
Clean set
A private pool that takes anyone's money ends up holding a hacker's, and then everyone in it looks guilty. Shroud keeps stolen money out of the private exit and keeps everyone else's way out open.
A keeper publishes the set of deposits it approves. A withdrawal has to prove it is in that set as well as in the pool. Wallets flagged for hacks or theft stay out of it.
The wallet that made a deposit can always pull it back out, in public, to itself. No one’s money is ever stuck, and no one can wash money through the private exit.
The admin can pause new deposits in an emergency. Withdrawals and ragequits have no pause in the program at all.
Buyback and burn
Every hour, from one public address: 8Pna…DTgR
$SHROUD
Relays and gateways are run by anyone who stakes $SHROUD, and every private withdrawal pays the gateway that carries it. The more people hide here, the more the people who run it earn.
Lock $SHROUD and register a relay or a gateway on chain, with its endpoint and its key
Relays forward sealed bytes. Gateways open them, send the withdrawal and pay its costs
The fee bound into each withdrawal you send is yours, paid by the program in the same transaction
Step out any time. After seven days the whole stake comes back to you
Live from chain
Each pool takes one size only, so every deposit in it looks the same. Your cover is the number of deposits in your pool.
| Pool | Deposits | Withdrawals | Gateway fee |
|---|---|---|---|
| 0.1 SOL | 0 | 0 | 0.002 SOL |
| 1 SOL | 0 | 0 | 0.002 SOL |
| 10 SOL | 0 | 0 | 0.002 SOL |
| 100 USDC | 0 | 0 | 0.6 USDC |
| 1,000 USDC | 0 | 0 | 0.6 USDC |