
Quickstart
Start with a safe, useful first step.
You do not need to be a developer to inspect Vaultfire. Choose a browser check, give a read-only brief to an AI agent, or run the actual developer example on your own computer.
No path below asks for a personal private key, a funded wallet or a V3 payment.
Choose your path
People, agents, and builders start differently.
I just want to try it
Read the public release and service information in this browser. No installation, account or wallet.
Run the no-install checkI use an AI assistant
Use a tool-capable app with a local or cloud model, or give your assistant the public documents. Five read-only tools; no signing or payment.
Connect a local AI safelyGet the read-only agent briefI want to build
Download the exact source, use the pinned tools, and run register/revoke plus a real local HTTP/SQLite receipt flow.
Follow the developer setupNo installation needed
Read the current public information.
This button reads three public pages: the release record, the agent discovery document, and service health. It does not connect a wallet, sign, pay, or submit a V3 transaction.
If nothing loads, keep the error message and check your connection. Open the source record directly, inspect discovery, or read reported service health.
Local AI path
Your model can run on your computer.
A local model does the AI thinking on your own device. A tool-capable application connects it to Vaultfire. You do not need a cloud AI provider, a wallet or a payment key for the five public read-only MCP tools.
- Load a local model: use LM Studio with a model that supports tool use. Model downloads and hardware needs vary; choose a local model rather than a cloud-backed one.
- Add the connection: in LM Studio, open Program, then Install > Edit mcp.json. Merge the server entry below into your existing
mcpServersobject; keep any unrelated entries. - Try a safe question: ask your model to use
vaultfire_list_operations, thenvaultfire_get_operationfor/api/x402/trust/contracts, and explain what is available without paying or signing. - Look for a real tool result: discovery should describe 76 operations, including two free ones. Reading the description of a paid operation does not execute or pay for it. A model answer without a visible tool call is not proof that a request ran.
{
"mcpServers": {
"vaultfire-read-only": {
"url": "https://theloopbreaker.com/api/mcp"
}
}
}Local inference is not the same as offline operation. This connection sends tool requests to the public Vaultfire server, not to a cloud model provider. Tool arguments and normal request metadata leave your device. Never put private keys, wallet seeds or confidential conversation text in those arguments.
The configuration grants no signing, payment or filesystem tools. Standard MCP transport tests do not certify every local model or app version. See LM Studio's setup instructions and verify the result on your own device.
Developer path
Build from exact source, not a guessed example.
This path uses a terminal, which is the application where you type commands for your computer to run. If that is unfamiliar, you can use the browser check above first, or share these steps with a developer. Do not type commands into a wallet or a chat window and assume they ran.
- Prepare: use the included Linux development container, or install the exact versions listed below. Installation can take longer than the example itself. Other host setups are not implied to be tested.
- Download and verify: obtain the selected source and its checksums. A matching checksum means the bytes match the published package, not that the software is independently audited.
- Run locally: install both packages and execute the existing Quickstart. It signs only with disposable public test keys on a local test chain, never your personal wallet or a public network.
- Check success: the final report must have top-level
"status": "passed", show a consent record being registered and revoked, and show the local receipt reachingfinalized. Keep the report and source identity. - Build your integration: follow the versioned SDK and API operation contracts. Check which operations are supported before adding authorization, retries or status polling. Do not treat a schema or simulated catalog as live execution.
Developer Quickstart · local only
Run an example, then check its receipt.
Register consent, revoke it, and inspect a local receipt. This example runs on your computer with disposable local services. It is not a Base mainnet or Solana deployment, and it needs no funded wallet, private key or payment.
Not ready to install development tools? Start with either path below. A terminal is the window where these commands run on your own computer.
- Get the current source. Use the current download and follow its checksum and extraction checks before running it. Do not substitute an older bundle if retrieval fails.
- Install the pinned environment. Use the partner devcontainer included at
full-v3/partner/.devcontainer, or install the exact versions below. Dependency installation and native tool installation are separate setup costs, not part of a prepared quickstart timing. - Run only locally. From the verified extracted root, install the SDK dependencies as well as the sandbox, then run the existing quickstart. No wallet, private key, seed phrase, payment header or public RPC is required or accepted.
# From the authenticated extracted source root, with pinned tools installed:
npm --prefix full-v3/sdk ci --ignore-scripts
npm --prefix full-v3/partner ci --ignore-scripts
npm --prefix full-v3/partner run quickstartWhat success looks like: the final report has top-level "status": "passed", confirms a local consent record was registered and revoked, and shows the local receipt reaching finalized. Keep the output. A pass proves this local example ran; it does not activate V3 or qualify partner funds.
If it fails: keep the error and stop at the failing step. Missing tools require the exact pinned environment, not looser checks. A busy local port must not be replaced with a public network. Package-download failures require restoring the documented download path, not sharing credentials. Recovery details are below.
Alternative retrieval: pinned Twigpine clone
Authenticate the selected protocol commit after cloning. If the transport is unavailable, use the current HTTP archive above; never switch silently to a historical release.
export VAULTFIRE_TWIGPINE_TOOLS="$(mktemp -d)"
npm install --prefix "$VAULTFIRE_TWIGPINE_TOOLS" --no-save --ignore-scripts=false @gitlawb/gl@0.7.1
export PATH="$VAULTFIRE_TWIGPINE_TOOLS/node_modules/@gitlawb/gl/bin:$PATH"
test "$(git-remote-gitlawb --version)" = "git-remote-gitlawb 0.7.1"
test "$(uname -s)-$(uname -m)" != "Linux-x86_64" || test "$(sha256sum "$(readlink -f "$(command -v git-remote-gitlawb)")" | cut -d' ' -f1)" = "af5da2da412dfe24fff57b1d8a0834da1fa5d971897423a19ded454a0f732e74"
export GITLAWB_NODE=https://node.gitlawb.com
git clone --recurse-submodules gitlawb://did:key:z6MkryiNsYdFEMHv95wxzSQ1vtFXPyVQQrxXdPw3tE5HpfxV/vaultfire
cd vaultfire
git checkout --detach 385415d13aca6f8bd97143cdc63dd2a70f27fa02
test "$(git rev-parse HEAD)" = "385415d13aca6f8bd97143cdc63dd2a70f27fa02"
npm --prefix full-v3/sdk ci --ignore-scripts
npm --prefix full-v3/partner ci --ignore-scripts
npm --prefix full-v3/partner run quickstartPinned environment: Node 20.20.1, npm 10.8.2, SQLite 3.46.1, Foundry 1.3.1, and project Solc 0.8.24. This is local software verification only. It does not deploy V3 to Base or Solana, enable payments, verify a real ML-DSA proof, or authorize partner funds.
Verify the download and inspect implementation details
The current source selector binds the selected archive to its checksum and external sidecar inventory. Verify every extracted file with the supplied Git-free verifier. An archive takes its identity from its own authenticated external sidecar, not an embedded older website projection. Protocol source identity and website publication identity are separate.
The local example builds the source SDK, compiles ConsentRegistryV3, runs register/revoke against disposable loopback Anvil, and finalizes a receipt through loopback HTTP and SQLite.
Archive SHA-256: c3951562b92c25462efd5d3c0c5055cbf378b15790d23fbfd55c38b8f8090818. The current HTTP archive is the first path; clone transport is optional. Historical source is never an automatic fallback.
Expected result, recovery and full-validation limits
A passing quickstart prints its scoped command results, register/revoke reads and local receipt result. Retain the actual stdout, exit code, source identity, environment and elapsed time. Reading these instructions is not execution evidence.
- Version/tool missing: use the pinned partner devcontainer; do not loosen version checks. The website separately requires Node 22, while the partner sandbox pins Node 20.20.1.
- Install/network failure: keep the failure log and retry only after restoring the documented package/tool transport. Never share proxy credentials or private CA material with this site.
- Quickstart fails or times out: keep the source unchanged and report the failing command. A retry in a warmed environment is prepared execution, not cold installation evidence.
- Full validation:
npm --prefix full-v3/partner run full-auditis separate and may require native Solana/Anchor, Rust, cryptography/proof toolchains and substantial resources. Host/simulation checks do not close native, real-proof, release or deployment gates.