Agent identity privacy
Agent identity privacy
Agent identity privacy means an AI agent's on-chain wallet cannot be linked to its operator, its other transactions, or other agents in the same fleet.
One agent identity, many addresses
The agent has one identity. The chain sees many disposable addresses.
import { CropsAgent } from "@crops/agent-sdk";
const agent = new CropsAgent({
metaAddress: process.env.AGENT_META_ADDRESS,
spendKey: process.env.AGENT_SPEND_KEY,
chain: "base",
});
await agent.pay({
to: "0xRecipientMetaAddress...",
amount: "0.02",
token: "USDC",
});What is agent identity privacy?
Agent identity privacy means an AI agent's on-chain footprint cannot be used to identify the agent across payments, or to identify the human or company operating it.
It is not the same as anonymity. The agent has an identity, can sign messages, and can prove ownership of its meta-address. What it does not have is one public address tying together every payment.
How AI agents leak their identity
Default agent setups leak through the signing address, the funding hop, sibling-agent reuse, and public identifiers that people paste into block explorers.
A private agent wallet closes these leaks by never reusing an address and by keeping operator funding separate from spending addresses.
How to make an AI agent identity unlinkable
The setup combines one-time address derivation per payment, operator-side funding privacy, sibling separation, and controlled audit through view keys.
Derive a fresh one-time address for every agent.pay() call.
Fund agent balances through Curvy stealth sends instead of direct operator-wallet hops.
Give each sibling agent a distinct meta-address from a fresh seed.
Use view keys for audit without exposing the spend key.
Can agent identity privacy be audited?
Yes. A view key reconstructs the agent's private ledger for authorized parties. External observers see unrelated transactions; the operator and authorized auditors see one coherent ledger.
Pseudonymous vs anonymous agent identity
| Model | Public identity | Activity linkage | Production fit |
|---|---|---|---|
| Pseudonymous | Stable meta-address | Unlinkable to observers | Default |
| Anonymous | No durable identifier | Harder to reference | Narrow use cases |
| Public EOA | One public address | Fully linkable | Poor privacy |
Frequently asked questions
What is agent identity privacy?
It means an AI agent's wallet cannot be linked to its operator, sibling agents, or other transactions by public observers.
Is agent identity privacy the same as anonymity?
No. A pseudonymous agent can have a stable identity while keeping its activity unlinkable.
Can sibling agents be correlated on-chain?
Not if each agent has its own meta-address, funding path, and one-time payment addresses.
What happens if the spend key is leaked?
An attacker can drain unspent outputs. Keep the spend key in a secret manager and segment fleets so one leak does not compromise the rest.