XKOVA Docs
Wallet Providers
Thirdweb is XKOVA's current shared MPC wallet infrastructure for account holders and institution staff. XKOVA keeps provider mechanics below separate member and staff authorization layers, while externally controlled EOAs and Safe ownership retain their distinct signing models.
The wallet provider interface
A wallet provider supplies wallet creation, lookup, and signing infrastructure. Thirdweb is the shipping MPC provider for XKOVA human wallets today. Shared provider code constructs canonical owner subjects, resolves or pregenerates the exact provider wallet, normalizes errors, and creates short-lived browser ceremonies. Separate account-holder and institution-staff services decide who may provision or sign. This is the model from Integrations and Orchestration applied to wallets: the vendor is an adapter below XKOVA's owner-specific authorization and lifecycle.
Custody and signing models
Private-key custody and the authority to open a signing session are separate facts. State both when evaluating a wallet integration.
| Model | Security boundary |
|---|---|
| Externally controlled EOA | The external owner controls the private key and signs independently of XKOVA. |
| Thirdweb MPC human wallet | Thirdweb keeps MPC private-key material non-exportable. A valid XKOVA custom JWT plus the public client can establish a general provider signing session. |
| Safe vault | The Safe contract holds value and requires its configured owner quorum. Each owner can use a Thirdweb MPC wallet or another approved signer wallet. |
| Custodial provider | A custodian controls signing under the institution's approved controls. |
XKOVA never receives or exports human MPC private-key material. Contracts still require a valid owner-address signature or Safe quorum before the XKOVA Relayer can submit value movement. For Thirdweb MPC wallets, XKOVA additionally protects the signing-critical custom-JWT issuer, freezes the business payload, verifies the returned signature, and disposes the browser provider session. See Non-custodial Model for the mechanics and Wallets and Balances for the member wallet surface.
Example vendors
The provider seam is designed to bound a future replacement, but provider behavior is not assumed equivalent. Thirdweb is the available MPC provider today. Any later provider must be reviewed for identity, key custody, signing-session authority, recovery, export, and logout behavior. The product surface can remain stable only after that adapter and its security properties are implemented and certified.
Related
- Wallets and Balances: the member wallet surface and balances.
- Non-custodial Model: member signing and relayer submission.
- Security Model: the non-custodial threat model and key handling.