Your phone wallet
Bind your NEAR account to your number once. Then send NEAR, or ETH on Base, by voice. The AI asks for the transfer; a NEAR contract you own decides if it is allowed.
It reads it back
Amount, asset, chain and recipient, out loud. You confirm with a 4-digit PIN. The PIN is stored only as a salted hash, and 3 wrong tries lock it for 15 minutes.
The contract says no
Limits per transfer and per day for each asset, a list of allowed chains and saved recipients, and a wait for new ones, all in a NEAR contract. Over a limit, you get a link to sign it yourself.
One address on Base and other Ethereum-style chains
Before NEAR signs, the contract checks the transaction itself: chain, recipient and amount. So only what you heard read back can be signed, and the operator can’t exceed your caps either. Base is on at bind; you allow other chains yourself. Bitcoin and Solana are not supported.
Also works for: launching a coin
Talk a coin onto JustHoot: one call creates the coin and makes it tradable on RHEA, a NEAR exchange. The model asks the questions, code decides what is allowed, and you sign. It adds voice to JustHoot, an existing launchpad.
It asks
Coin, name, ticker, logo vibe, socials. One question at a time, then it reads the lot back.
It refuses
No tickers of real assets, no brands or celebrities (79 on the list), and no promises that the coin will go up. Every refusal is logged.
You sign
A link arrives in the call. It shows the logo, the terms and the exact NEAR cost (about 0.1 NEAR, read from the contract). You sign one transaction with Meteor, HOT, Intear or MyNearWallet.
Try to launch a ticker
Checking the launch desk’s rules…
Also works for: builder quotes
Same line, a builder’s rules. The customer sends a photo of the job, and the owner sets the rules by talking.
Bathroom, cracked tiles behind a dripping tap. Looks small.
Photo to quote
An AI running in sealed hardware describes the job. The photo stays on this server.
Prices come from code
Discounts, deposits and refused work live in owner.yaml. Customers can pay the deposit in almost any token. NEAR Intents converts it and the owner receives USDC on NEAR.
The owner talks, the file changes
From the owner’s WhatsApp or the dashboard. The agent proposes the change, code checks it stays within fixed limits, the owner says yes, and owner.yaml is rewritten.
What a call runs on
Your voice and photos are processed in sealed hardware on NEAR AI Cloud (trusted execution environments, or TEEs). We check its proof live; see /proof. Checking the signature on each chat and photo reply is built, but the live check is still pending.
Your spending limits live in a NEAR contract you own, so neither the AI nor we can go past them.
Sends on Base are signed by NEAR Chain Signatures, after the contract has checked the transaction.
Known limits: this app server is not itself in sealed hardware, Cartesia (if used as the voice) hears reply text, and on WhatsApp Meta sees call metadata.
Fair questions
Can the AI empty my wallet?
No. Transfers go through a NEAR contract you own, which checks a limit per transfer and per day for each asset, the chains you allowed and your saved recipients. New recipients wait 600 seconds, and you can cancel. The AI can only ask; the contract decides.
Who holds the keys?
You own the contract and can always withdraw or revoke the agent. This server holds one agent key that can only call your contract. Being honest: we, the operator, could use it without your PIN, inside your limits. The PIN protects against someone else calling from your line, not against us. The contract is unaudited, so keep small amounts in it.
Who hears my PIN?
Speech-to-text and the language model, both inside NEAR AI TEEs. It is stored only as a salted hash and blanked from the saved transcript and tool log. Three wrong tries lock it for 15 minutes.
What if someone steals my number?
Your number alone cannot move money. Binding is signed by your NEAR account, and a SIM swap or a spoofed caller ID still needs your PIN. Three wrong tries lock it for 15 minutes, so trying every 4-digit PIN takes about 35 days, and even then only your daily cap, to your saved recipients, could move. Revoke the agent from your own wallet if you lose your phone.
Which chains?
NEAR, and Ethereum-style (EVM) chains through NEAR Chain Signatures. One address works on all of them. Base is on when you bind; you turn on others yourself. Bitcoin, Solana and ERC-20 tokens are not supported yet.
Can someone launch $NEAR or an Elon coin?
No. Tickers of real assets, brand and celebrity names, and tickers already on meme.cooking are refused in code before a launch can be prepared. Each refusal goes to the ledger on the dashboard. Replies that promise returns are replaced before they are spoken.
What does a launch cost?
JustHoot asks about 0.1 NEAR, read from its contract’s views, plus gas. JustHoot is mainnet only, so it is real NEAR whatever network this server is on. You see the cost before you sign.
Who sees my photo?
Qwen3-VL reads it in a TEE on NEAR AI Cloud. The photo is kept on this server only. This server verifies each enclave’s Intel TDX quote and NVIDIA GPU attestation (see /proof).
What doesn’t it do yet?
Nothing has been signed on chain by this code yet: no real transfer, launch or deposit. On WhatsApp you can’t interrupt it while it speaks. With Cartesia as the voice, reply text goes to Cartesia, which is not a TEE. The attestation check does not yet compare enclave measurements to a published NEAR AI build. This server is on NEAR mainnet.