RingTree
A Ledger-secured trust layer where autonomous agents operate without surrendering human control.
Demo
About
RingTree is a Ledger secured trust layer for autonomous agents. It allows agents to run on remote infrastructure without receiving raw API keys or unrestricted wallet access. A trusted broker protects credentials using the official wallet-cli ring and gives each agent only signed, time-limited capabilities, call quotas, and spending budgets. Ledger Flex keeps the user in control of high risk actions such as authorizing a host, granting permissions, revoking access, and signing payments. Agents can pay for services through capped x402 flows, while host binding, nonces, cascading revocation, and audit history prevent replay and silent permission escalation. RingTree enables useful autonomous agents without surrendering control of secrets, permissions, or funds.
How it's made
RingTree is built with TypeScript, React/Vite, Node.js, Express and SQLite. A local broker protects OpenAI, Graph and payment credentials using Ledger’s official wallet-cli ring. The React dashboard connects to Ledger Flex through DMK and WebHID for readable permission approvals and transaction signing. Agents run on AWS EC2 (VPS) and reach the broker through a private AWS SSM relay with no inbound ports. The broker enforces signed capability scopes, expiration, shared quotas, spending limits, host binding, replay protection and cascading revocation. The Graph Agent combines our live Base Sepolia USDC Subgraph with Subgraph MCP queries for blockchain analysis. A separate Key Ring-protected wallet makes capped x402 payments for Graph queries, while mission rewards require an exact Ledger-signed Base Sepolia transaction.