Finalized portfolio
Read SOL and every indexed classic SPL or Token-2022 holding from finalized account bytes. Select an asset to send, inspect activity, or share the same receive address.
K256 Money
Use the identity already protected by your device. There is no wallet to install and no recovery phrase to manage.
This application never receives your passkey.
Spendable
—
Checking finalized balance…
Checking finalized holdings…
Balances, mint addresses, token programs, decimals, and safety status come from finalized Solana state. Names, icons, prices, and spam labels are optional advisory metadata on Mainnet only.
No recent activity yet.
These protections appear only when an application needs them. There is nothing to configure for ordinary payments.
Ordinary payments need no setup. This console shows what this application can request, what only the canonical K256 ID surface may change, and which policy extensions remain planned.
Application ID, network, finalized portfolio reads, optional sponsored receive-setup eligibility, and the registered reference call come from this deployment. Portfolio metadata never overrides finalized asset identity, decimals, or balances. Message purpose and bytes remain configurable. Exact and Guarded requests are pinned to the registered call; adapter-validated Verified requests must supply matching calls, guards, review, and an integration-owned semantic adapter.
Read SOL and every indexed classic SPL or Token-2022 holding from finalized account bytes. Select an asset to send, inspect activity, or share the same receive address.
Approve an application-bound, purpose-bound message with the active policy. No Solana transaction is created.
Run this registered deployment's read-only reference call as Exact or Guarded, or supply an integration-owned semantic adapter and matching Verified calls.
Build an arbitrary compatible call batch. K256 derives the technical review from exact bytes and returns authorization only; it does not sponsor or submit the transaction.
Inspect a legacy or v0 transaction, ignore its signatures, and learn whether its exact calls can be authorized through this K256 ID.
Applications may request a supported capability or open the relevant K256 ID control. Every authority change happens on the canonical K256 ID surface and requires the active policy. This application never receives the passkey or silently changes authority.
The values above come from the latest independently verified hosted result in this tab. This app can inspect them, but it cannot change authority. Use the canonical K256 ID policy control to review any module, threshold, controller, or role change.
PolicyModuleKind · ROLE_PERMISSION_BITS · ALL_ROLE_PERMISSIONS · rolePermissionsForPolicy(...)
Review policy and roles in K256 IDDeleting the browser key does not revoke finalized authority. Use “Review revocation in K256 ID” first when you want the permission itself removed.
Choose the exact limits this application may use. K256 ID will show the complete request and the active policy must approve it. This application never receives your passkey or unrestricted control.
These forms call the shipped SDK in this browser. A valid plan is loaded into the same hosted Verified review used by an integration. K256 does not invent accounts, quotes, routes, or sponsor attestations: supply the exact real inputs your application obtained.
The SDK verifies an exact caller-supplied Jupiter v6 instruction plus maximum input and minimum output. It does not choose a quote or route.
Paste one short-lived quote issued by the configured sponsor. The SDK validates its closed schema and expiry, then binds its exact token debit separately from sponsored SOL transport. The sponsor validates quote authenticity at submission; a quote alone never grants authority.
classifyInstructionRequest · prepareTransactioncreateSolanaPayReceiveRequestThe example renders this list from the public SDK. A transfer is Guarded or Verified only when the mint, source, and destination contain exclusively closed-effect extensions and the onchain postconditions hold. Exact-only extensions remain available through a fresh human-present Exact request.
Enter the exact finalized mint, source, and destination. The public SDK reads all three accounts, classifies every extension, and opens the existing hosted review only when the transfer has closed, enforceable effects.
Exact only is not a weaker safety mode. It means K256 commits the complete call and requires fresh human approval, but does not claim closed-world transfer semantics. Unknown extension IDs, malformed layouts, incomplete account coverage, and unbounded effects fail closed.