# Zafeguard — Full Site Digest

> Visual blockchain workflow automation. Build, deploy, and scale workflows across any chain in under 10 minutes — without code. Every workflow is signed by MPC-secured keys, integrates with any AI agent via MCP, and runs on a pay-as-you-go model.

This document is a concatenated, markdown-formatted snapshot of every page on https://zafeguard.com, intended for AI agents and indexers that want to ingest the full site in a single fetch.

---

## Home (https://zafeguard.com/)

**Hero:** Complex blockchain. Simple workflow. Anyone can build.

Zafeguard turns complex blockchain operations into visual workflows. Drag pre-built components onto a canvas — swaps, payments, conditions, MPC signing, API calls — connect them, and deploy. Workflows run across 20+ networks (EVM, Bitcoin, Solana, alt-chains). Every workspace ships with MPC-secured keys. AI agents can call any workflow via MCP. Pricing is pay-as-you-go: $0.01 per run with no monthly fee.

### How it works

1. **Design your workflow visually.** Open the canvas and drag pre-built components — swaps, payments, conditions, MPC signing, API calls — onto it. Connect them to define your logic. No code, no blockchain expertise required.
2. **Configure in one place.** Set API keys, wallet credentials, gas policies, and environment variables in your workspace settings. Connect social logins, MPC key clusters, or smart accounts — all from one dashboard.
3. **Deploy and monitor live.** One-click deployment with enterprise concurrency controls. Watch every execution in real-time. Review run history, replay failed steps, and pipe alerts into your existing tools.

### Platform modules

- **MPC Security** — distributed key management with built-in or self-hosted nodes.
- **AI Agent Integration** — MCP server endpoint per workspace.
- **Payment Service** — invoice → checkout → escrow → MPC sign → settle.
- **Gas Station** — sponsor user gas under policy.
- **Visual Builder** — drag-and-drop workflow canvas.
- **Developer SDK** — TypeScript client + REST API + webhooks.
- **Embedded Wallets** — non-custodial social-login wallets, zero seed phrases.
- **Concurrency Control** — enterprise-grade run scheduling.
- **Event Triggers** — webhook, API, schedule, on-chain event.
- **Condition & Branch** — if/else logic inside workflows.

---

## MPC Security (https://zafeguard.com/product/mpc/)

**Hero:** Your key is never in one place. Multi-party computation splits your private key across multiple independent nodes. No single node — or person — ever holds a complete key. Every transaction requires agreement from a threshold of nodes to proceed.

### How threshold signing works

Each node holds a secret shard of the private key. To sign a transaction, a threshold (e.g. 3 of 5) of nodes engage in a multi-round cryptographic protocol that produces one valid signature — without ever reconstructing the full key on any single node. The on-chain transaction looks identical to a signature from a normal single-key wallet.

### How key generation works (DKG)

Before any signing, nodes perform a distributed key generation ceremony. Each node independently generates its secret shard. There is no trusted dealer, and no full key is ever assembled. The result: a public key usable on any chain, and a set of shards held by separate nodes.

### Deployment models

**Built-in MPC** (included on Professional and above)
- Keys split across multiple secure, globally distributed nodes
- No seed phrase — social login + MPC recovery
- Threshold agreement required for every transaction
- Gasless signing via gas station integration
- Active in minutes, zero infrastructure setup

**Self-Hosted MPC** (Enterprise)
- Deploy MPC nodes on your own servers or cloud
- Keys entirely within your controlled environment
- Connect your existing identity and compliance stack
- Custom threshold policies (e.g. 3-of-5 nodes)
- Full audit logs piped to your SIEM
- Dedicated support and deployment assistance

### Composable security

- **Custom threshold policies** — any m-of-n. Adjust without re-keying.
- **Social recovery** — guardians can restore access; no seed phrase, no single recovery key.
- **Hardware integration** — combine MPC shards with HSMs or physical security keys.
- **Composable approval flows** — time locks, quorum approvals, geo-restrictions, chained conditions.

### Why MPC beats the alternatives

**vs. Seed Phrases:** A seed phrase is a single point of failure. MPC has no seed phrase to steal because no complete key ever exists in one place.

**vs. Hardware Wallets:** Hardware wallets require physical access and are a bottleneck for automation. MPC nodes run 24/7 and participate in automated workflows with equivalent security guarantees.

**vs. Single-Server Custody:** A single server is one breach or insider threat away from total loss. With MPC, compromising one node reveals nothing — an attacker would need to compromise the threshold simultaneously.

### MPC vs Multisig

Both distribute signing authority, but they differ in **where** the distribution happens.

**Multisig (on-chain m-of-n approval)**
- Multiple independent private keys exist, each held by a different party.
- A transaction is valid only when a threshold sign separately; the blockchain verifies each signature on-chain.
- *Pros:* battle-tested, fully transparent, no trusted computation.
- *Cons:* higher gas costs (signatures grow with signers), policy leaks on-chain, policy changes require on-chain transactions, only works on chains that natively support multisig.

**MPC (off-chain threshold computation)**
- Key shards held by separate nodes that never communicate the full key.
- A threshold of nodes produce one standard signature — indistinguishable from a single-signer transaction.
- *Pros:* single on-chain signature (same gas as any transaction), policy is private, works on any chain, reconfigurable threshold without key rotation.
- *Cons:* requires trust in MPC node implementation, nodes must be online, harder to audit than a multisig contract.

| Dimension | Multisig | MPC |
|---|---|---|
| Signing location | On-chain | Off-chain |
| Gas cost | Higher (grows per signer) | Standard |
| Privacy | Public policy | Private |
| Chain compatibility | Limited (needs native support) | Universal |
| Key exposure | Full keys exist per party | No full key ever exists |
| Policy changes | On-chain transaction required | Off-chain reconfiguration |
| Automation | Hard (requires coordination) | Native (programmatic 24/7) |

Choose multisig when: transparency is a compliance requirement, building a public DAO/treasury, the chain supports multisig natively at no extra cost.

Choose MPC when: cross-chain key management is needed, gas efficiency matters, policy must be private, programmatic 24/7 signing is required.

---

## Payment Service (https://zafeguard.com/product/payments/)

**Pitch:** End-to-end crypto payment workflows — built with blocks.

The entire payment lifecycle is exposed as workflow components: invoice generation, multi-currency checkout, smart-contract escrow, MPC-secured signing, treasury settlement. Assemble visually or call via API.

### Payment flow

Invoice (generated) → Checkout (multi-currency) → Escrow (smart contract) → MPC Sign (secured) → Confirm (on-chain) → Settle (treasury).

### Features

- **Multi-currency checkout** — USDC, ETH, BTC, BNB, and 30+ tokens in one flow across all supported chains. Fiat bridge included.
- **Smart contract escrow** — configurable release conditions triggered by on-chain events or workflow conditions. No trusted intermediary.
- **MPC-secured signing** — every settlement signed by multiple nodes. No private key ever exposed.
- **Treasury routing** — route settled funds automatically by currency, chain, or amount. Split payments across recipients.
- **Gasless payments** — integrate with gas station so buyers never need native tokens.

---

## Gas Station (https://zafeguard.com/product/gas-station/)

**Pitch:** Build gasless blockchain experiences. Sponsor transactions for your users with a custom policy — no ETH required in user wallets.

### Features

- **Policy-based sponsorship** — define exactly which contracts, functions, and users qualify.
- **Spend limits** — daily, monthly, or per-user caps with alerts before thresholds hit.
- **EVM-wide coverage** — works across 20+ supported EVM chains from one configuration.
- **Gasless social onboarding** — users log in with Google/Apple and transact immediately, no ETH.
- **Workflow integration** — add as a component to any workflow; sponsorship applied at execution.
- **Usage analytics** — track gas sponsored by user, contract, and chain with audit logs.
- **Address risk screening** (coming soon) — every sponsorship request is screened against sanctions lists and scored 0–100 for on-chain risk before gas is covered.

### Policy rules examples

- Contract address: `0x742d...f3a1`
- Function selector: `mint()`, `transfer()`
- User allowlist: verified users only
- Daily limit: $50 per user

---

## AI Agent Integration (https://zafeguard.com/product/ai-agents/)

**Pitch:** Connect any AI agent to your blockchain workflows via MCP. Let Claude, GPT, or your own agent trigger on-chain actions with natural language.

### Getting started

1. **Enable MCP on the workspace.** MCP is off by default. Open Workspace Settings → "MCP — AI agent access" and flip the toggle on. A workspace-specific token like `zmcp_abc12345…` is generated and shown once — copy it immediately.
2. **Point your client at the endpoint.** Send the token in the `x-mcp-token` header (separate from the SDK API key so you can rotate independently).
   ```
   POST https://api.zafeguard.com/v1/mcp
   x-mcp-token: zmcp_abc12345…
   ```
3. The agent automatically discovers every workflow and component in the workspace and exposes them as callable tools — and can build new workflows on the canvas too.

### Use cases

- **Natural language trading** — "Swap 10% of my ETH to USDC" — the agent calls the workflow, you see the on-chain result.
- **Autonomous DeFi strategies** — agents monitor market conditions and trigger rebalancing automatically.
- **AI-powered treasury ops** — schedule recurring payments, route funds, approve transactions, all driven by your AI agent.
- **Cross-chain orchestration** — agents reason across chains, pick the cheapest route, and execute multi-step workflows.
- **User intent execution** — parse what a user wants and translate to a signed on-chain transaction.
- **Automated compliance checks** — verify wallet status, check allowlists, enforce policy before executing.

---

## Visual Builder (https://zafeguard.com/product/visual-builder/)

**Pitch:** Design and deploy complex blockchain workflows with a drag-and-drop canvas. No code required — idea to on-chain in under 10 minutes.

1. **Open the canvas** — blank or pre-built template (payments, wallets, DeFi).
2. **Drag, drop, connect** — pick components from the library (triggers, conditions, on-chain actions) and wire them together. No code, no YAML.
3. **Test with live preview** — run against testnet in one click. See each step execute in real time.
4. Deploy to production. Replay failed runs. Monitor every execution.

---

## Developer SDKs (https://zafeguard.com/product/sdk/)

**Pitch:** Two TypeScript SDKs that ship together. `@zafeguard/caller-sdk` triggers workflows and components on the platform; `@zafeguard/mpc-sdk` lets your app hold an MPC share client-side. Both ship with full type inference and SSE-streamed results — no polling.

### Caller SDK — execute components and workflows

```ts
import { WorkspaceClient, ComponentModule } from "@zafeguard/caller-sdk";

const workspace = new WorkspaceClient({
  apiKey: process.env.ZAFEGUARD_API_KEY!,
  apiSecret: process.env.ZAFEGUARD_API_SECRET!,
});

// Typed input → typed output via SSE, no polling
const { balance } = await workspace
  .call(ComponentModule.GET_EVM_ACCOUNT_BALANCE, {
    jsonRpcUrl: "https://eth-mainnet.g.alchemy.com/v2/KEY",
    tokenAddress: "0x0000000000000000000000000000000000000000",
    account: "0xd8dA6BF26964aF9D7eEd9e03E53415D37aA96045",
  })
  .promise();
```

### MPC SDK — hold an MPC share client-side

```ts
import { EmbeddedSigner, Curve, RecoveryKind } from "@zafeguard/mpc-sdk";

const signer = new EmbeddedSigner({
  agent: [{ baseUrl: "https://node-1.example", apiKey: "..." }],
  threshold: 2,
  curve: Curve.Secp256k1,
});

const loaded = await signer.create({ signerId, recovery: { kind: RecoveryKind.Noop } });
const sig    = await loaded.sign({ messageHash });
```

Ships native binaries for Node.js (macOS + Linux glibc/musl) plus a WebAssembly fallback for browsers, Expo, Cloudflare Workers, Deno, and Bun. Same API across all four.

### REST API

```
POST https://api.zafeguard.com/v1/sdk/components
X-Api-Key: ws_...
X-Sdk-Timestamp: <unix epoch seconds>
X-Sdk-Signature: <base64 Ed25519 signature over METHOD|PATH|TIMESTAMP|BODY>
Content-Type: application/json

{ "module": "...", "input": { ... } }
```

The TypeScript SDKs handle the request signing for you; this is what they call under the hood.

### Webhooks + callbacks

Subscribe to workflow events (run started, run completed, run failed) via webhook URLs configured in the workspace dashboard. Component executions can additionally deliver results to your endpoint with an HMAC-signed callback header — verify in one line.

---

## Use Case: Cross-Chain Swaps (https://zafeguard.com/usecases/cross-chain-swap/)

Let users swap tokens across any EVM chain. Your workflow handles route discovery, approval, execution, and bridging — autonomously.

Flow: Swap Intent → Route Discovery (best price across DEX aggregators) → Approval (if needed) → Execute Swap → Bridge (if cross-chain) → Confirmation.

---

## Use Case: Crypto Payments (https://zafeguard.com/usecases/crypto-payments/)

Generate a payment request, detect on-chain payment automatically, and route funds to your treasury — without writing a single line of code.

Flow: API Request or Checkout Form → Generate Invoice Hash + Amount + Token + Expiry → Detect Payment on-chain → Confirm → Route to Treasury.

---

## Use Case: DeFi Automation (https://zafeguard.com/usecases/defi-automation/)

Monitor on-chain conditions, trigger rebalancing strategies, and execute multi-step DeFi operations — automatically, with MPC-signed safety.

Flow: Price Alert / Schedule / On-Chain Event → Fetch Data → Evaluate Strategy → MPC Threshold Sign → Execute Multi-Step DeFi Operation.

---

## Use Case: Embedded Wallets (https://zafeguard.com/usecases/embedded-wallets/)

Users sign in with Google, Apple, or LINE and instantly have a fully non-custodial, MPC-secured blockchain wallet. No MetaMask. No seed phrase. No friction.

Flow: Social Login → Verify OAuth Token → Extract User ID → Hash Identity → Provision MPC Wallet → User-Ready.

---

## Use Case: Gas Sponsorship (https://zafeguard.com/usecases/gas-sponsorship/)

Cover gas fees for your users from your own balance. Set policies per contract, per user, or per spend cap — and let Zafeguard handle the rest.

Flow: User Transaction or API Call → Policy Check (whitelist + spend cap + contract validation) → Sponsor Gas → Execute Transaction → Log Usage.

---

## Use Case: NFT Checkout (https://zafeguard.com/usecases/nft-checkout/)

Let users purchase a product and receive an NFT in their wallet automatically. No wallet setup required. Gas optionally sponsored.

Flow: Purchase Intent + Item Selected → Create Order Record → Process Payment → Mint NFT → Transfer to User Wallet → Confirmation.

---

## Pricing

| Plan | Price | Includes |
|---|---|---|
| Pay-as-you-go | $0.01/run | No monthly fee, 20+ networks, unlimited workflows, REST API, 7-day run history |
| Growth | $99/month | 10,000 runs, $0.008 per extra, 3 workspaces, 30-day history, email support |
| Professional | $499/month | 100,000 runs, $0.005 per extra, MPC key management, AI agent integration (MCP), embedded wallets + social recovery, gas station with spend policies, 10 workspaces, priority SLA, custom components |
| Enterprise | Custom | Self-hosted MPC, unlimited runs, dedicated infrastructure, address risk + compliance screening, SAML SSO, custom SLA, dedicated CSM |

Network gas fees are billed separately and not included in run costs.

---

## Networks

**EVM (17 chains):** Ethereum, Polygon, Arbitrum, Optimism, Base, BNB Chain, Avalanche, Gnosis, Celo, Moonbeam, Fantom, Polygon zkEVM, and more.

**Bitcoin ecosystem (4 chains):** Bitcoin (PSBT transactions), Babylon staking, multi-provider failover.

**Alt-networks (expanding):** Solana and additional emerging ecosystems. New networks added every quarter.

---

## Brand & Identity

- Site: https://zafeguard.com
- Product: Zafeguard
- Tagline: Visual blockchain workflow automation.
- Positioning: blockchain infrastructure and developer tools for shipping multi-chain products in minutes.
- Categories: blockchain infrastructure, blockchain developer tools, blockchain automation, workflow automation, no-code Web3, MPC custody, AI agent infrastructure (MCP), Web3 SDK.
- Legal entity: Zafeguard Inc., a Delaware corporation.
- Press contact: hello@zafeguard.com.

### Brand assets

Full downloadable kit at https://zafeguard.com/brand/. Every asset is offered as both SVG (vector) and PNG (2048 px longest edge, 1024 px for the tile icon).

- App icon (mark on brand-orange rounded tile): https://zafeguard.com/brand/svg/zafeguard-icon.svg · https://zafeguard.com/brand/png/zafeguard-icon.png
- Mark — brand orange: https://zafeguard.com/brand/svg/zafeguard-mark.svg · https://zafeguard.com/brand/png/zafeguard-mark.png
- Mark — white (on dark): https://zafeguard.com/brand/svg/zafeguard-mark-white.svg · https://zafeguard.com/brand/png/zafeguard-mark-white.png
- Mark — black (on light): https://zafeguard.com/brand/svg/zafeguard-mark-black.svg · https://zafeguard.com/brand/png/zafeguard-mark-black.png
- Mark — mono (currentColor): https://zafeguard.com/brand/svg/zafeguard-mark-mono.svg · https://zafeguard.com/brand/png/zafeguard-mark-mono.png
- Horizontal lockup — brand on dark: https://zafeguard.com/brand/svg/zafeguard-horizontal.svg · https://zafeguard.com/brand/png/zafeguard-horizontal.png
- Horizontal lockup — brand on light: https://zafeguard.com/brand/svg/zafeguard-horizontal-light.svg · https://zafeguard.com/brand/png/zafeguard-horizontal-light.png
- Horizontal lockup — mono white: https://zafeguard.com/brand/svg/zafeguard-horizontal-white.svg · https://zafeguard.com/brand/png/zafeguard-horizontal-white.png
- Horizontal lockup — mono black: https://zafeguard.com/brand/svg/zafeguard-horizontal-black.svg · https://zafeguard.com/brand/png/zafeguard-horizontal-black.png
- Vertical lockup — brand on dark: https://zafeguard.com/brand/svg/zafeguard-vertical.svg · https://zafeguard.com/brand/png/zafeguard-vertical.png
- Vertical lockup — brand on light: https://zafeguard.com/brand/svg/zafeguard-vertical-light.svg · https://zafeguard.com/brand/png/zafeguard-vertical-light.png
- Vertical lockup — mono white: https://zafeguard.com/brand/svg/zafeguard-vertical-white.svg · https://zafeguard.com/brand/png/zafeguard-vertical-white.png
- Vertical lockup — mono black: https://zafeguard.com/brand/svg/zafeguard-vertical-black.svg · https://zafeguard.com/brand/png/zafeguard-vertical-black.png

### Brand colors

- Brand Orange: `#F03000` — identity marker only (logo + small accents)
- Ink: `#0F0F0F` — deepest surface
- Canvas: `#171717` — page background
- Hairline: `#242424` — borders
- Off White: `#FAFAFA` — primary text
- Mid Gray: `#898989` — muted text

### Usage rules

- Use brand orange whenever the surface allows it. Use white or black variants only when the surface forces it; use mono when the host page controls color via CSS.
- Keep clear space around the mark equal to roughly 25% of its height. Minimum size: 16 px.
- Never recolor, stretch, rotate, outline, or shadow the mark. Never combine with another logo in a way that implies partnership or endorsement.

---

## Machine-readable resources

- Sitemap: https://zafeguard.com/sitemap.xml
- Robots: https://zafeguard.com/robots.txt
- This file: https://zafeguard.com/llms-full.txt
- TOC index: https://zafeguard.com/llms.txt