Wealth infrastructure for autonomous agents · Powered by Uniswap

No safer
place.

Autonomous agents are already the majority of on-chain activity. 24,500 registered on-chain in ERC-8004's first week. Agent Capital Markets arrived without a bank. Gotts is the institution that was missing.

Read the Docs Explore the Architecture
GTS-A01
AGENTS
32 Autonomous specialist agents
GTS-S01
SECURITY
15 Independent security layers
GTS-M01
MCP
154 Typed MCP tools
GTS-F01
FEES
0% protocol fees
Scroll

Agent Capital Markets arrived without a bank. Agents accumulated wallets, identities, and capital — and stored them in infrastructure built for humans. No custody. No reputation system. No way to recover from a bad actor.

Gotts is the answer.

The name comes from Gringotts in Harry Potter, the one bank in fiction nobody can rob. Gotts takes the premise at face value: build custody where even the operator can't steal funds. On-chain proof instead of human trust.

$30T Projected autonomous transaction volume by 2030 (a16z)
24,500+ Agents registered in ERC-8004's first week
100M+ Agent-to-agent transactions via x402
585K+ Tokens deployed by autonomous agents on Uniswap V4
The moment

Four forces.
One 90-day window.

The infrastructure for Agent Capital Markets didn't exist two years ago. It does now. Four shifts converged in a 90-day window, and Gotts sits at the intersection.

January 15, 2026
ERC-8004 Live on Ethereum mainnet
Agent identity is now a standard

Co-authored by engineers at MetaMask, the Ethereum Foundation, Google, and Coinbase. ERC-8004 defines on-chain identity, reputation, and validation registries for autonomous AI agents. The Ethereum Foundation's dAI Team made it a strategic priority. 24,500 agents registered in the first week.

Since May 2025
100M+ Agent-to-agent transactions via x402
Agent payments reached scale

x402, HTTP-native micropayments settled on-chain, is production-ready. The x402 Foundation (Coinbase + Cloudflare) is pushing integration into infrastructure that handles ~20% of global web traffic, plus Google Cloud's Agent Payments Protocol and Vercel. v2 added multi-chain support in December 2025.

Late 2024 → production 2025
10,000+ MCP servers published, 97M monthly SDK downloads
MCP became the universal agent interface

The Model Context Protocol, launched by Anthropic in late 2024, was rapidly adopted by OpenAI, Google, Microsoft, and hundreds of open-source frameworks. It's now how AI agents connect to external infrastructure. The major frameworks (Claude, GPT-4o, Cursor, Devin) all support it. Gotts Safe speaks MCP natively. No adapters, no middleware.

2024–2026
$7.7B Market cap with $1.7B daily volume
Agent Capital Markets

550+ AI agent crypto projects. Warden Labs processed 650K swaps via the Uniswap Trading API in three weeks. Virtuals hosts 18,000+ autonomous agents generating $470M+ in GDP. Non-human identities outnumber human ones 96:1 in enterprise (CyberArk 2025). The treasury infrastructure didn't exist.

Infrastructure

Six instruments.
One bank.

Six components, one architecture. Vaults hold strategy. Custody holds keys. Safe gives language. The Agent Network executes. Brain learns. Skills translate intent. On-chain identity at the start; a permanent record at the end.

P-001
VAULT
001 · Vault

Gotts
Vault

A permissionless ERC-4626 account your agent deploys in one transaction. Identity-gated. Yield-bearing. Composable across the DeFi stack immediately.

  • Auto-created Uniswap V4 pool for every share token
  • NAV-aware pricing via on-chain hook
  • am-AMM Harberger auctions for strategy management
  • Collective CCA participation for token launches
  • Morpho, Pendle & Aave composability at deployment
  • Senior / Junior perpetual yield tranche splits
  • PolicyCage: strategy bounded by immutable on-chain logic
P-002
SAFE
002 · Custody

Gotts
Custody

Agent-native custody built directly into Gotts Safe. Keys are generated, stored, and used exclusively inside hardware enclaves across three privilege lanes. They never enter agent memory.

  • Hot lane: session keys scoped to routine vault ops within spending limits
  • Cold lane: owner authority for parameter changes and high-value ops
  • Fail-safe lane: can only call cancel() on the proxy — never initiate
  • TEE attestation via AWS Nitro Enclaves
  • Time-delayed proxy as primary security primitive
  • Cancellation window survives full hardware compromise
P-003
MCP
003 · Protocol Access

Gotts
Safe

154 typed, validated tools covering the full Uniswap protocol surface. 11 chains, all major versions, pre-flight simulation on writes.

  • Trading tools: quote, approve, swap, cross-chain execution
  • Liquidity tools: position management, JIT, TWAMM rebalance
  • Research tools: pool analytics, token data, opportunity scanner
  • CCA tools: bid construction, intelligence scoring, participation
  • Safety layer: pre-flight simulation, slippage guards, address validation
  • Streaming: real-time price feeds, mempool monitoring
  • Wallet-agnostic: EOA, ERC-4337, Safe, Privy, CDP
  • x402 outbound: pay-per-use external data, no API key onboarding
P-004
AGENTS
004 · Execution

The Agent
Network

A library of specialist autonomous agents (execution, research, strategy, development, infrastructure, economy) plus The Goblin Network: a permissionless executor framework any address can join.

  • Trade Executor: optimal routing across V2, V3, V4, UniswapX
  • LP Strategist: range management, rebalancing triggers, fee harvesting
  • Pool Researcher: statistical analysis of pool behavior and risk
  • Vault Manager: deposit, rebalance, harvest, and distribute yield
  • Treasury Manager: multi-asset allocation and revenue distribution
  • Goblin Network: permissionless job execution, gas refund model
  • Composition patterns: delegation hierarchy for multi-agent workflows
P-005
BRAIN
005 · Intelligence

Gotts
Brain

Persistent dual-store memory built on the CoALA cognitive architecture. Episodic memory stores execution outcomes; semantic memory distills cross-session insights. It improves from execution history alone. No fine-tuning. No human feedback.

  • Cross-session learning via episodic (LanceDB) + semantic (SQLite) stores
  • Reflexion self-critique after every write operation
  • ExpeL insight distillation every 4 hours
  • ADWIN drift detection for regime shifts
  • Ebbinghaus decay calibrated to DeFi timescales
  • Asymmetric confidence: failures degrade faster than successes build
P-006
SKILLS
006 · Interface

Gotts
Skills

68 intent translators, accessible by slash command or natural language. Skills are thin orchestration layers with zero business logic. Protocol intelligence lives in agents; safety enforcement lives in MCP middleware.

  • 6 trading skills, 11 research skills, 9 Agent Capital Markets skills, 7 vault skills
  • 5 composite multi-agent skills (e.g., /launch-token-full chains deployer → vault-creator → liquidity-manager)
  • /self-funding-setup transforms a new agent into a self-funding participant in one command
  • Works with any MCP-compatible agent framework (Claude, GPT-4o, Cursor)
  • Natural language or structured /slash-command invocation
  • Auto-activation from contextual intent
Execution Architecture

From intent
to execution.

Actions move through three layers. Skills translate intent. Agents execute strategy. MCP tools enforce safety.

EX-001
INPUT
01
User Intent
Natural language or /slash-command invocation
EX-002
SKILL
02
Gotts Skill
Parse intent, validate parameters, delegate to agent — zero business logic
EX-003
AGENT
03
Gotts Agent
Multi-step autonomous execution via MCP — strategy lives here
core
EX-004
TOOLS
04
Gotts Safe MCP Tools
154 on-chain reads/writes with pre-flight simulation, schema validation, and 15-layer safety pipeline
EX-005
CHAIN
05
Uniswap Protocol / ERC-4626 Vaults / ERC-8004 Identity
On-chain settlement — the user sees a result, never the infrastructure
TRACE-01
EXAMPLE
/execute-swap 500 USDC to WETH — The skill validates intent, the Trade Executor agent finds optimal routing across V2/V3/V4/UniswapX, Gotts Safe pre-flight simulates the swap, and the TEE signs only within its defined policy envelope. The user sees a result. They never see the infrastructure.
Security Architecture

Threat model
first.

Autonomous agents signing transactions are a fundamentally different threat model than traditional DeFi. A $50 memory interposer can break hardware enclaves. Confused deputy attacks succeed 84.6% of the time. A hallucinated address drains a wallet in one block. Any single layer can fail. These are the specific controls we built, organized by what they defend against.

Ring 1 Preventive Stop bad transactions before they're signed
L0
ERC-8004 Identity Gate
Universal agent identity. The single gate for all vault participation. No secondary staking. No proprietary systems.
L1
TEE Key Isolation
Keys generated and stored inside hardware enclaves. Never touch agent memory. Attested at runtime.
Cryptographic
L2
CaMeL Injection Defense
Capability-based security separating control flow from data flow. Untrusted data cannot affect program execution.
L2.5
MCP Integrity Verification
Tool provenance signing. Independent state verification. MCP-Guard achieving 96% attack detection.
L3
TEE Policy Engine
Signing policies enforced at the enclave level. A compromised LLM cannot sign outside its defined envelope.
Cryptographic
L6
Pre-Flight Simulation
Every write operation simulated via eth_call before broadcast. Catches hallucinated addresses, incorrect amounts, and reverts.
L11
V4 Hook Safety Checks
Hook-level invariant enforcement on every pool interaction. Malformed hook calls are rejected at the protocol layer before execution.
L12
SIWE Auth / Reputation-Gated Access
Sign-In with Ethereum authentication gates administrative endpoints. Reputation tier enforced at the API layer before any state mutation.
L13
PolicyCage On-Chain Invariants
Strategy boundaries encoded as immutable on-chain logic. No operator can override vault policy after deployment — not even the vault owner.
Cryptographic
Ring 2 Reactive When preventive controls fail — and they will — catch it before finality
L4
Time-Delayed Execution Proxy
Preventive controls have a 12% bypass rate. TEE hardware enclaves can be broken with a $50 memory interposer. Prompt injection succeeds against the best models 8.8% of the time. Any preventive layer in Ring 1 can fail, and when one does, the attacker has the keys.

That's why reactive defense is primary, not a fallback. The time-delayed proxy is the only mechanism that survives LLM compromise, key exfiltration, and TEE hardware attacks simultaneously. Major transactions are announced on-chain before execution: 10-minute windows for routine operations, up to 48 hours for critical moves. During that window, a separate cancel authority (different key, different privilege lane) can veto any pending action. The attacker must compromise the agent, the enclave, and the independent monitor, all within the delay window. That's the design constraint.
Ring 3 Forensic Detect anomalies post-execution; inform future prevention
L5
Active Monitoring & Cancel
Fail-safe cancel authority. Separate key, separate privilege lane. Veto any pending transaction during the delay window.
L7
On-Chain Guards
Immutable Solidity modifiers: onlyAgent, hasReputation, withinTierLimit. Cannot be bypassed after deployment.
Cryptographic
L8
Post-Trade Verification
Independent state reconciliation after every execution. Discrepancies trigger automatic position review and alert escalation.
L9
Reputation Enforcement
On-chain track record gates access to advanced features. Misbehavior has permanent, compounding consequences.
L10
Adaptive Circuit Breakers
Continuous dampening curves, never binary halts. Regime-aware alpha parameter adjusts to market stress in real time.
L14
NAV Circuit Breakers
Net-asset-value deviation triggers automatic pause. Protects against oracle manipulation and flash-loan attacks on vault pricing.
L15
VaultReputationEngine Enforcement
Cross-session performance data feeds the reputation score continuously. Degraded agents are demoted automatically. No human intervention required.
Cognitive Architecture

The agent
that remembers.

Most DeFi agents start fresh each session. Gotts Brain doesn't. It keeps a persistent record of what happened and why, built on CoALA cognitive architecture with Reflexion self-critique and ExpeL insight distillation. Its design draws on cybernetics: the study of how systems regulate themselves through feedback.

Norbert Wiener · 1948
Feedback Loops
A system that can't observe its own output can't improve. Wiener's core idea: action must feed back into the next decision. In Gotts Brain, each execution outcome gets stored, critiqued, and carried into the next session.
→ Reflexion self-critique · ExpeL consolidation
W. Ross Ashby · 1956
Requisite Variety & Ultrastability
A controller needs at least as many responses as the environment has disturbances. Ashby's Law of Requisite Variety: the agent's repertoire has to match DeFi's complexity. Ultrastability goes further. When conditions shift beyond the agent's current range, the system restructures itself.
→ 27 MCP tools · Adaptive strategy selection
Stafford Beer · 1972
Viable System Model
Beer's VSM identifies five subsystems a viable organism needs: operations, coordination, control, intelligence, and policy. Gotts is built along the same lines. Vaults operate. The Ledger coordinates. PolicyCage controls. Brain provides intelligence. Governance sets policy.
→ Five-subsystem architecture
Cycle 01 · Custody-Access
Trust compounds on-chain
  • Safe TEE signs execution
  • On-chain history recorded
  • VaultReputationEngine scores
  • ERC-8004 tier updated
  • Better access terms unlocked
Cycle 02 · Learning-Performance
Execution improves from experience
  • Execution outcome stored in episodic memory
  • Reflexion self-critique generated
  • ExpeL consolidation every 4 hours
  • Semantic insights written to SQLite
  • Next execution measurably better
Cycle 03 · Capital-Scale
Performance attracts capital
  • Better performance verified on-chain
  • More deposits follow track record
  • More TVL generates more data
  • More rebalancing reaches milestones
  • Tier upgrades unlock leverage
A USDC/ETH rebalance hits 3× the predicted slippage. The Brain stores the episode, critiques the timing via Reflexion, and after ExpeL consolidation writes a semantic insight: "avoid the first 30 blocks after an epoch boundary." No human feedback. No fine-tuning. Next time, the execution is measurably better.
The central thesis: agent infrastructure and agent capability have to co-evolve. Better custody and identity systems let agents take on harder strategies. Better-performing agents generate more data, more volume, more reputation, which strengthens the infrastructure they run on. The three cycles above (Custody-Access, Learning-Performance, Capital-Scale) aren't independent loops. They're one spiral.
Who it's for

Three audiences.
One backend.

Building agent software, running on-chain strategies, or integrating vault infrastructure. Gotts is the financial backend so you don't have to build one.

001 · Agent Developers
Give your agent a complete financial backend in one transaction.

Your agent registers via ERC-8004, deploys a vault, and gets custody, yield, reputation, and payment rails. No financial infrastructure code to write.

One-transaction setup — deploy a vault, get an ERC-8004 identity, and start earning yield on idle capital immediately
154 typed MCP tools — plug the server into any MCP-compatible agent framework (Claude, GPT-4o, Cursor agents) with zero custom tooling
x402 payment rails built in — your agent can pay for external data and services per-request in USDC; no API keys or accounts receivable
Pre-flight simulation on every write — the safety layer catches hallucinated addresses and bad amounts before they reach the chain
002 · Yield Strategists
Autonomous strategies that execute 24/7 without a human in the loop.

Deploy a vault with a bounded strategy, let the agent network handle rebalancing, MEV capture, and yield harvesting.

Auto-compounding yield via Uniswap V4 hooks, Morpho, Aave, and Pendle composability from day one
am-AMM Harberger auctions — the best strategy manager wins the vault; rent flows directly to depositors as real yield
Senior / Junior tranche splits — offer different risk profiles to different capital allocators within a single vault
PolicyCage — strategy boundaries enforced by immutable on-chain logic; no human can override them after deployment
003 · Protocol Builders
Integrate vault infrastructure via a standardized, composable API.

ERC-4626 vaults, ERC-8004 identity hooks, and x402 payment gates are open standards. Gotts layers agent execution, custody, and reputation on top. All composable.

ERC-4626 vaults — fully composable with the entire DeFi stack; no proprietary interfaces or custom integration work
ERC-8004 identity integration — gate your protocol's advanced features behind verified on-chain agent reputation from day one
x402 revenue primitive — monetize any endpoint without API keys; charge per-request in USDC with ~200ms settlement
Goblin Network integration — outsource permissionless job execution to a decentralized executor network with a gas refund model
Reputation

Reputation is
capital.

Five tiers of earned trust. Each tier unlocks real financial capabilities, not badges. Trust accrues on-chain, compounds over time. An agent that leaves Gotts leaves its track record behind.

Tier I
Unverified
Protocol access granted. $1,000 deposit cap. 1-hour session keys. The vault door is open. The inner chambers are not.
Score 0–49
Tier II
Basic
5% fee discount. $10,000 deposit cap. 4-hour session keys. Identity recognized by the Ledger. Trust beginning to compound on-chain.
Score 50–199
Tier III
Verified
15% fee discount. $50,000 deposit cap. Rehypothecation access to Morpho, Aave, Seamless. 24-hour session keys. The idle earns now.
Score 200–499
Tier IV
Trusted
25% fee discount. $100,000 deposit cap. Uncollateralized credit delegation via Aave V3. Up to 5× recursive leverage. 7-day session keys. The Ledger lends on your behalf.
Score 500–999
Tier V
Sovereign
40% fee discount. $10M daily cap. 30-day session keys. Governance participation. Permanent identity lock — burn the CANNOT_TRANSFER fuse. The vault recognizes you without introduction.
Score 1,000+
Economics

The volume
flywheel.

Gotts doesn't consume Uniswap volume. It generates it. Each vault deployed becomes a persistent source of Uniswap flow, and each execution feeds back into the learning loop.

1
Agent deploys a Gotts Vault
A Uniswap V4 pool for the share token is automatically created, NAV-priced and hook-governed from the first block.
2
Strategy auction begins
am-AMM Harberger lease: the winning manager pays continuous rent to depositors as real yield. Every auction tick is a Uniswap event.
3
Vault capital enters Uniswap
Rebalances, CCA bids, JIT liquidity, MEV redistribution — every vault lifecycle event routes through Uniswap V4 hooks.
4
Volume compounds yield
Fee revenue, MEV capture, and rent flow back to vault depositors. Higher yield attracts more capital. More capital generates more Uniswap volume.
Yield
Volume
Reputation
Capital
G
Composability
Vault shares are ERC-20s. Everything else follows.
Gotts vault shares are standard ERC-20s. Composable with Morpho (collateral), Pendle (yield split), Aerodrome (LP). Once a share token is woven into a user's position, pulling it out destroys value. Stickiness through composability, not token emissions.
Reflexivity Note
Soros's reflexivity, anchored to real flow.
The flywheel is structurally reflexive: performance attracts capital, capital generates volume, volume improves performance. But this one is anchored. Each vault lifecycle event (rebalance, auction tick, CCA bid) is a real Uniswap transaction generating real fees. The loop amplifies actual protocol usage, not circular token incentives.

Powered by Uniswap.
Entirely.

Uniswap V4 has processed $110B+ in cumulative volume across 413 deployed hooks and 4,371+ pools. Each vault deployed generates flow that's structural and persistent, driven by vault lifecycle logic rather than market sentiment. The flywheel is architectural. Gotts and Uniswap are linked by design.

V4 Hooks
NAV-Aware Pools
UniswapX
CCA Participation
Dynamic Fee Engine
am-AMM Auctions
MEV Redistribution
TWAMM Rebalancing
ERC-7683 Intents
V2 · V3 · V4
11 Chains
Gotts Safe

154 tools.
One server.

Typed, validated access to the full Uniswap protocol surface. Tools are pre-flight simulated. Writes are guarded. Works with any MCP-compatible agent framework.

Vault Operations 40 tools
Intelligence, ERC-8004 & CCA 32 tools
Data & Analytics 18 tools
Safety, Session Keys & Utility 18 tools
Liquidity Management 12 tools
Real-Time, Streaming & Protocol Fees 12 tools
Portfolio & P&L 10 tools
Trading & Execution 12 tools
Total tools
154

Writes are pre-flight simulated before broadcast. Inputs are schema-validated. Responses are typed. The server sits between your agent's intent and on-chain state.

Read the Docs View on GitHub
Developers

Start building
today.

Full API reference, typed Gotts Safe, protocol contracts, and a working SDK. All open source, all on GitHub.

DOC-01
DOCS
001 · Documentation
Docs

Full API reference, integration guides, and architecture deep-dives. Quickstart gets your agent connected to Gotts Safe in under five minutes.

Open Docs →
SRC-01
REPO
002 · Source Code
GitHub

Gotts Safe, vault contracts, agent library, and Goblin Network executor are all open source. Inspect the code, fork it, contribute.

View on GitHub →
SDK-01
API
003 · SDK & API
SDK

Type-safe SDK for TypeScript and Python. Deploy vaults, query the Ledger, construct x402 payment headers, stream price feeds. A few lines of code.

// Give your agent a financial backend in one call
const result = await mcp.callTool("deploy-vault", {
  asset: "USDC",
  strategy: "uniswap-v4-lp",
  rebalanceThreshold: 0.05,
  agentIdentity: "0x..." // ERC-8004 registered
});
// → Vault deployed, V4 pool created,
//   agent identity gated, yield from block 0
View SDK Reference →

Built for agents.
Permanent yield.

The bank that works for agents
Read the Docs

Common
questions.

ERC-4626 is the tokenized vault standard on Ethereum. It's a common interface that lets yield-bearing vaults compose with other DeFi protocols automatically. A Gotts Vault is ERC-4626 compliant, which means it works with Morpho, Aave, Pendle, and every other protocol that speaks the standard, from day one, with no custom integration work required.
Yearn and Morpho serve human depositors. Gotts treats autonomous AI agents as principals. That means: ERC-8004 identity gating (agents have verified on-chain identities, not just wallets), TEE-based key custody that never exposes keys to agent memory, CaMeL prompt-injection defense, am-AMM Harberger auctions for strategy management, and a reputation system where track record compounds on-chain and gates access to advanced features like uncollateralized credit delegation.
Security is organized in three concentric rings. Ring 1 — Preventive: L0 (ERC-8004 identity gate), L1 (TEE key isolation), L2 (CaMeL injection defense), L2.5 (MCP integrity verification), L3 (TEE policy engine), L6 (pre-flight simulation), L13 (PolicyCage invariants), L14 (NAV circuit breakers), L15 (VaultReputationEngine). Ring 2 — Reactive: L4 (time-delayed execution, 10 min routine → 48 hours critical) — the only mechanism that survives LLM compromise, key exfiltration, AND TEE hardware attacks simultaneously. Ring 3 — Forensic: L5 (active monitoring & cancel), L8 (post-trade verification), L9 (reputation enforcement), L10 (adaptive circuit breakers). Also L7 (immutable on-chain guards) and L11 (V4 hook safety checks), L12 (SIWE auth / reputation-gated access).
ERC-8004 went live on Ethereum mainnet on January 15, 2026. It establishes on-chain identity, reputation, and validation registries specifically for autonomous AI agents — co-authored by engineers at MetaMask, the Ethereum Foundation, Google, and Coinbase. Gotts uses it as the identity gate: agents register once and that identity is portable across any protocol that integrates the standard. Reputation compounds on-chain and can't be transferred or faked.
x402 is an HTTP-native payment protocol for machine-to-machine payments settled on-chain. Coinbase launched it in May 2025; the x402 Foundation (Coinbase + Cloudflare) now drives integration across infrastructure serving ~20% of global web traffic. In Gotts, x402 is used in two directions: agents pay for external data and strategy endpoints per-request in USDC with ~200ms settlement (no API keys, no invoices), and Gotts Safe exposes its own endpoints as x402-gated resources.
Gotts Brain is the persistent memory and self-improvement system implementing the CoALA cognitive architecture. Episodic memory (LanceDB) stores execution outcomes with Reflexion self-critique. Semantic memory (SQLite) distills cross-session insights via ExpeL consolidation every 4 hours. The Brain learns from on-chain execution, no model fine-tuning, no human feedback, and makes agents measurably better at specific DeFi tasks over time. ADWIN drift detection monitors for regime shifts; Ebbinghaus decay calibrates memory retention to DeFi timescales.
Pure outcome-based learning. Example: an agent executes a USDC/ETH rebalance and experiences 3× the predicted slippage. The Brain immediately stores the episode in LanceDB with full execution context. Reflexion generates a self-critique of the timing decision. After the next ExpeL consolidation cycle (every 4 hours), that episodic data is distilled into a semantic insight written to SQLite: "avoid the first 30 blocks after a Base epoch boundary." No human feedback required. No model fine-tuning. The next time the agent encounters a rebalancing decision near an epoch boundary, it retrieves that insight and makes a measurably better choice. Failures degrade faster than successes build — asymmetric confidence calibration prevents overconfidence.
Gotts is being deployed to Sepolia testnet for early access. The protocol is designed for EVM-compatible chains — permissionless vault deployment, x402 payments, and the MCP server work wherever EVM smart contracts run. Mainnet chain selection will be announced ahead of the public launch.