Private by default,provable by design.
The private settlement and execution rail on Solana. Trade spot and perps without showing your hand, hold assets at institutional grade, and give each AI agent an account it can spend from — every state change proven onchain.
Built for you
Private execution. Institutional grade. Onchain proof.
On a public chain your trade is public before it is final. Your size, your entry, your balance: readable by anyone, and priced against you by everything watching. Orders leak, positions get targeted, and you carry the cost. A desk has the same problem with a compliance department attached to it. And an AI agent has it worst of all, because a wallet on a public chain turns every payment it makes into a machine-readable record of what you are doing.
Sirius is the rail underneath. Balances, positions and transfers are encrypted at the base layer with ZK-provable privacy: proven correct, verified on Solana, private without being unverifiable. Spot and perps fill at oracle mid-price, with no MEV and no market maker spread. Assets sit with a qualified custodian and KYC/AML runs at onboarding, so an institution can actually put size through it. And because the same rail can issue an account with a spending limit you set and can revoke, an AI agent can pay and trade on it without ever touching your credit line.
The architecture
Custody, privacy, execution and settlement in one place, put together in a way you can verify yourself. It is the rail a desk runs on, and the same one an AI agent settles on.
Balances, positions, and transfers encrypted end-to-end. Nothing leaks to the public, and no one can spy, copy, or front-run you.
Trades and perps execute at oracle mid-price. Fair price, no MEV, no market maker spread, hidden from the onchain environment.
Every state change is proven with zero-knowledge and verified natively on Solana in one instruction. Trustless without being public, which is what moving real value privately actually requires.
Roughly 100ms execution with netted onchain settlement. Fast and cheap enough for high-frequency trading and AI agent micropayments.
Assets sit with a qualified custodian, segregated, never rehypothecated. KYC/AML runs at onboarding rather than being bolted on later.
You hold your own key and your own assets. Every withdrawal is authorised by your signature against onchain state, so nobody can move your funds or redirect them somewhere you did not sign for.
An agent gets its own key and its own balance, registered as a sub-account of yours. It signs its own transactions and spends only what you allow. Every payment, swap, or exit it makes is recorded, and you read that record by signing with the parent key.
A daily budget, a per-payment ceiling, and the list of assets it may touch. The rail refuses anything over the limit before the transaction is admitted, so nothing the model does, and nothing in its prompt, can lift them. Revoking is one call and it is terminal.
x402 is the open payment standard, governed by the Linux Foundation, that revives HTTP 402. Your agent stays an ordinary x402 client. Sirius is the facilitator underneath it, so the handshake is unchanged and the amount is never published.
For AI agents
The same rail takes agents as first-class users. Sirius ships an MCP server, so any agent that speaks MCP over stdio gets a funded, spending-limited, private account, and nobody writes payment code. Claude, Cursor, Windsurf, Zed and Cline take the same block. No crypto knowledge required.
Read the integration docs{
"mcpServers": {
"sirius": {
"command": "npx",
"args": ["-y", "@siriusprotocol/mcp"],
"env": {
"SIRIUS_API_BASE": "https://demo.siriusprotocol.xyz/txapi",
"SIRIUS_AGENT_INDEX": "118",
"SIRIUS_AGENT_ACCOUNT_ID": "<the agent's account_id hex>",
"SIRIUS_AGENT_KEY": "<the agent's Ed25519 seed>",
"SIRIUS_MCP_MAX_PAYMENT_USD": "1.00"
}
}
}
}Restart the client and ask it “what is my Sirius balance?” From there it can pay, trade, and read its own limits in plain language. The server refuses to start unless it is pointed at an agent sub-account, and it will not drive a parent account.
See it live
Move private, provable value on a live Sirius demo, and watch real zero-knowledge proofs settle on Solana.
Trusted infrastructure
Sirius is in private beta. Join the waitlist.