Nyxora Agent

Your Personal Web3 Assistant.

Nyxora is a secure, non-custodial runtime infrastructure for autonomous onchain agents built with a robust Monorepo architecture (Node.js & React). Designed for autonomous workflows with a premium Utility-Centric dark-themed UI and strict client-side key isolation.

Nyxora now natively supports the Model Context Protocol (MCP). You can transform your external AI agents (like Claude Desktop and Cursor) into secure Web3 actors that execute swaps and fetch balances using Nyxora's secure signer vault. View the MCP Integration Guide

It operates under a Zero-Trust, Defense-in-Depth Cryptographically Bound Human-in-the-Loop execution model, ensuring that Remote AIs (LLMs) never have unilateral access to your funds.

🔥 Key Features

Advanced Security Architecture

• 🛡️ On-Chain AI Kill-Switch: Nyxora is governed by an Arbitrum Smart Contract (NyxoraAgentRegistry). Users have absolute cryptographic power to instantly paralyze the AI's on-chain execution if compromised, solving the Web3 AI safety dilemma. Read more about our Arbitrum Architecture

• 3-Tier IPC Architecture: Nyxora is split into isolated processes: Core (LLM Runtime), Policy Engine (Guardrails on port 3001), and Signer Vault (Isolated Key Manager on Unix Sockets).

• DeFi Configuration BYOK & UI Masking: All aggregator and provider API keys are strictly isolated via a Bring Your Own Keys (BYOK) architecture into a heavily guarded ~/.nyxora/defi_keys.yaml file. The local web Dashboard masks these injected secrets using *********** and IS_SET censorship, completely neutralizing malicious browser extensions from exfiltrating your keys.

• Approval Replay Protection (Nonce Guard): Transactions requested by the AI are drafted as hashes and signed with a randomized 16-byte Nonce. The /api/transactions/:id/approve endpoint strictly enforces Nonce matching to completely eliminate double-spending and Replay Attacks.

• Immutable Policy Guardrails: Transaction limits (e.g. max_usd_per_tx) are strictly enforced by the Policy Engine. The LLM has zero write-access to bypass these rules.

• Graceful SQLite WAL Shutdown: Integrated SIGTERM/SIGINT interceptors ensure that when the daemon stops, active requests are safely terminated and SQLite Write-Ahead Logs (WAL) are securely flushed, preventing database corruption.

🌐 Web3 Skills (On-Chain)

• Security Scanner: Nyxora can scan smart contracts via GoPlus Labs to detect Honeypots, Hidden Taxes, and malicious proxy upgrades before you buy.

• Advanced DeFi Optimization: Autonomously supply assets to Aave V3, deposit into Beefy/Yearn Auto-Compounder Vaults, manage Uniswap V3 Liquidity (LP), and instantly revoke infinite approvals to secure your wallet. Features intelligent Transaction Chaining to auto-approve allowances prior to execution.

• 6-Engine Meta-Aggregator & Anti-MEV: The core engine interfaces with a powerful 6-Engine Meta-Aggregator (1inch, 0x, LI.FI, Relay, OpenOcean, and KyberSwap) to route tokens cross-chain, ensuring absolute maximum liquidity depth.

• Adaptive Auto Slippage Protection: Nyxora enforces a dynamic and adaptive 'auto' slippage by default to leverage dynamic MEV-protection from these industry-standard aggregators. However, the user retains absolute control to override this dynamically—either globally via the Dashboard Settings or on a per-transaction basis through NLP chat commands (e.g., "Swap 1 ETH to PEPE with 10% slippage").

• Dual-Routing Market Intelligence Engine: Real-time asset tracking utilizing a sophisticated API Waterfall. Symbol queries are routed to CoinGecko/CEXs for global FDV, while Contract Addresses trigger DexScreener for live on-chain liquidity metrics across all networks.

• Asynchronous Watchdog Agents: Seamlessly spawn detached background instances for long-running monitoring tasks (e.g., "Notify me when $ETH drops below $2500"), leaving your primary chat session free for other operations.

• "Lean Degen" Auto-Whitelist: Automatically intercepts Contract Addresses (CAs) whenever you check balances or swap tokens, saving them to your localized user_whitelist.json for future tracking.

• Dynamic Portfolio Engine: Merges standard tokens, your custom Degen CAs, and CoinGecko's daily trending list into a single hyper-fast Multicall scan to deliver a clean, spam-free PnL portfolio report in under 1 second.

• Deep Transaction History: Accurately fetch your 30-day (or custom timeframe) Native and ERC-20 transaction history across all supported EVM chains. Powered by the Unified Etherscan API V2, enabling seamless cross-chain fetching (Mainnets & Testnets) using a single API key.

💻 OS & Web2 Skills (Off-Chain)

• Google Workspace Automation 🚀: Transform Nyxora into your ultimate personal assistant. The agent can read your latest Gmail inbox, check your Google Calendar, extract text from Google Docs, and even append expense/trading logs directly to your Google Sheets.
• System Automation & Full OS Access: Instruct the agent to read/write local files, run terminal commands, and browse the web natively.
• Automated Excel Reporting: Instruct the agent to compile its Web3 portfolio or transaction history findings and autonomously generate beautiful .xlsx spreadsheet reports saved directly to your local machine.
• Unstoppable Synergy: Combine both engines with a single prompt. Example: "Read the latest presale token email from my Gmail, automatically set a Take Profit limit order on Uniswap, and log the execution result to my Google Sheets."

🧠 The Masterpiece Memory Architecture

• 4-Layer Air-Gapped Vault: Nyxora features a god-tier memory system that completely isolates conversational habits from the OS Keyring. The AI can dynamically learn your behaviors without ever having physical read-paths to your private keys.
• Hard-Coded Anti-Injection Shield: We enforce a Zero-Trust memory paradigm. Before any user habit is saved to the local SQLite database, it must pass a strict RegExp-based validation layer that autonomously annihilates Private Keys, BIP-39 Seed Phrases, and Prompt Injection attempts.
• Smart Suggestion Engine: Nyxora actively queries its Layer-2 Episodic Database to seamlessly autocomplete your repetitive Web3 routines. If you always swap on Arbitrum using USDC, the AI will proactively suggest it, slashing human-in-the-loop latency by up to 90%.
• Persistent Background Reflection: Empowered by background idle timers and message-count thresholds, Nyxora quietly transcribes your habits into a permanent profile while you step away from the keyboard, ensuring it never forgets your identity even after daemon reboots.

AI & UI Customization

• Zero-Trust Auto-Lock (Passwordless): A sleek glassmorphism blur overlay automatically locks the dashboard during inactivity. Unlocking requires physical local execution via the CLI (nyxora unlock), preventing unauthorized local access.
• Resilient UI (Reconnect Overlay): Built-in global network interceptors ensure that if the daemon restarts or crashes, the UI immediately pauses with a transparent "Offline" overlay and seamlessly resumes your workflow once revived.
• Zero-Click Multi-Session: Instantly create isolated chat sessions with smart auto-naming triggered by your first prompt, exactly like ChatGPT.
• Premium Utility-Centric UI: A sleek, dark-themed dashboard built for high readability and professional Web3 execution, featuring Pseudo-Generative UI widgets (<BalanceWidget>, <MarketWidget>, <SwapWidget>).
• Massive 2026 Model Roster: Out-of-the-box support for cutting-edge models via Google Gemini, OpenAI, Groq, Mistral, xAI, DeepSeek, OpenRouter, and local Ollama, equipped with a searchable CLI prompt to instantly find your favorite model.
• Strict NLP Exactness (Rule 8): The AI is rigorously instructed never to hallucinate or guess missing transaction parameters (like destination chains or swap amounts). It halts and requests human clarification, guaranteeing 100% precision.
• Context Overrides Defaults (NLP Intelligence): The Dashboard configuration (default chain & router) acts only as a safety net. If you issue an explicit command via Telegram (e.g., "Swap 10 USDC to USDT on Arbitrum using Li.Fi"), the NLP engine dynamically bypasses the default settings and executes exactly what you asked for, ensuring maximum flexibility.
• Deep Personalization: Feed the agent custom rules via user.md and define its core persona via IDENTITY.md.

📐 Architecture Workflow

The following diagram illustrates Nyxora's 3-Tier Monorepo Architecture, showing the isolated communication channels (REST API and Unix Socket).

Nyxora separates its duties into 3 independent layers for absolute security:

1. 🧠 Core (The AI Brain): The intelligent assistant that strategizes and plans transactions, but never holds your funds.
2. 🛡️ Policy Engine (The Guard): The security guard that verifies the Brain's plans. If the AI attempts to send funds exceeding your set limits, this engine automatically blocks it.
3. 🔒 Signer Vault (The Safe): The offline vault where your Private Keys and highly sensitive 3rd-party tokens (e.g., Google Workspace OAuth) are securely locked natively in your OS Keyring (GNOME Keyring / macOS Keychain / Windows Credential Manager). It only signs transactions after they pass all rigorous security checks.

Web3 Separation of Concerns (Zero-Trust Routing)

Within the AI Brain, the Web3 codebase is strictly divided to prevent the LLM from hallucinating or maliciously manipulating low-level routing paths:

• aggregator/: The core routing engine (1inch, 0x, KyberSwap, etc.) immune to prompt injection. The AI cannot modify execution rules here.
• skills/: The execution muscles. Pure functions and tools explicitly exposed to the AI for usage.
• utils/: The nervous system managing blockchain configurations, supported tokens, and the RPC Engine.

(Note: Despite the multi-layered security process appearing lengthy, the internal system validation and cryptographic signing occurs in milliseconds, ensuring zero latency bottlenecks).

🛡️ Advanced Security & Threat Model

To dive deeper into the technical details of our Zero-Knowledge security architecture, please visit the Nyxora Security Blueprint.

1. 🚀 Quick Start & Installation

Global Installation via NPM (Recommended)

The easiest and fastest way to use Nyxora is to install it globally via NPM. This ensures you get the latest version and can run Nyxora from anywhere on your machine.

The fastest way to install Nyxora is via our automated installation script:

For Linux & macOS (Bash):

curl -fsSL https://nyxoraai.github.io/Nyxora/install.sh | bash

For Windows (PowerShell):

iwr https://nyxoraai.github.io/Nyxora/install.ps1 -useb | iex

Alternatively, you can install it manually on any operating system using NPM:

npm install -g nyxora@latest

2. Run the Interactive Setup Wizard (API Keys, Wallet, Telegram)

nyxora setup

3. Start the Nyxora background daemon

nyxora start

4. Open the Web Dashboard

nyxora dashboard

Utility: Atomically clear the AI's short-term and long-term memory

nyxora clear --force

⚠️ IMPORTANT: Whenever you re-run nyxora setup or manually edit the config files, you must restart the daemon by running nyxora restart for the changes to take effect.

Local Development (From Source)

If you wish to modify the code or run from source, you can use the Monorepo architecture.

git clone https://github.com/nyxoraAI/Nyxora.git
cd Nyxora

# 1. Install Dependencies
npm install

# 2. Build the Dashboard UI
npm run build

# 3. Interactive Setup Wizard (API Keys, Wallet, Telegram)
npm run setup

# 4. Start the Application
npm start

(If you are actively developing and modifying the source code, use npm run dev to enable hot-reloading for the frontend and backend).

⚠️ IMPORTANT: Whenever you re-run npm run setup or manually edit the config files, you must restart the dev server for the changes to take effect.

📖 Official Documentation

For complete technical deep-dives into our Cryptographic Architecture, please visit our official VitePress Documentation Site!

🔗 Read the Full Nyxora Documentation Here

(Includes guides on Secure Wallet Imports, Architecture Blueprints, Troubleshooting, and Custom Skill Development).

❤️ Support the Project

Building and maintaining a highly secure, zero-trust architecture takes significant time and resources. If you love what we are building, you can help us keep Nyxora open, secure, and constantly evolving by sending a coffee our way:

• EVM (Multi-Sig Safe): 0x490717E50D6434C348AA0D2bD5fe682392823708

License: MIT License