My Pools — KRAY•SPACE

Sovereign DeFi · L1

You hold the keys. The pool is yours.

Think of it as a currency-exchange booth that lives inside your own house: Bitcoin on one side of the counter, your Rune on the other, and every trade pays you a fee. Kray Space is only the street sign pointing traders to your door — it never sees, holds, or touches your keys. Your pool runs on the open-source kray-pool-agent daemon: it independently verifies on-chain reserves before signing anything, and Kray Space re-checks every signed transaction against ~25 immutable rules before a buyer ever sees it.

Why this matters → See pool anatomy →

Official source · tomkray/kray-pool-agent

Already running the agent?

Same one-click as KrayWallet. Writes the official pack into the folder you cloned. Keys in ~/.kray-pool-agent stay. Then npm install and restart kray-pool-agent ui.

Pick the same folder you cloned (the one whose package.json says kray-pool-agent).

Download ZIP only

Owner address

How a swap works

Five checks stand between a trade request and a broadcast transaction — miss one, and the swap never happens. Tap a step for the full detail.

Buyer requests a quote. Someone on /swap clicks BUY. Kray Space looks up your pool, builds an unsigned PSBT, and asks your daemon for permission over a private WebSocket.

Setup journey — install, then go live

macOS, Linux, or Windows via WSL. About five minutes end to end.

Open your terminal (macOS: press ⌘ + Space, type “Terminal”) and paste:

curl -fsSL https://www.kray.space/pool.sh | bash

Checks for Node.js 20+ (offers to install it), pulls the open-source agent from GitHub, sets up the kray-pool-agent command. It never asks for keys or funds — read the script first if you want. Already installed? Close this and use Update my agent folder on My Pools — official pack, sha256 fail-closed, keys untouched.

Terminal-only setup (skip the browser dashboard)

# 1. Create your pool (interactive wizard, ~2 min) kray-pool-agent setup # → Generate a new 24-word wallet or import 12/24 words # → Choose a password (12+ chars), pool name, owner bc1p address # → Pick Static, Stable (pegged) or Multi-rune, set your fee % # → Prints a bc1p... pool address # 2. Fund the pool address with BTC + your Rune (wait 1 confirmation) # The ratio of BTC:Rune you send sets the initial price. # 3. Go live kray-pool-agent start # → Enter your password → pool goes ONLINE on /swap

Prefer to install manually? (git clone)

git clone https://github.com/tomkray/kray-pool-agent cd kray-pool-agent npm install npm link # exposes the `kray-pool-agent` command

kray-pool-agent ui

Opens a local dashboard in your browser — 127.0.0.1, your machine only, protected by a per-session token — that walks through wallet, pool config, one-click sign, funding and going live.

127.0.0.1:8420/?token=••••

K KRAY•SPACE · Pool Agent Sovereign liquidity pool — local control panel Running

1 Pool wallet 2 Configuration 3 Sign & register 4 Fund 5 Go live

2 · Pool configuration

Name it, pick Static / Stable / Multi-rune, set your fee.

After setup it becomes your control panel: a quest checklist (fund → scan/activate → daemon → live), analytics, an activity feed with Krayscan links, live reserves & price, fee/pause controls, pair management, an optional price peg, and withdraw instructions. Keep the terminal open — it hosts the daemon.

Static

Price = the on-chain ratio (BTC ÷ rune at the address). No admin price, no peg — the AMM (x·y=k) moves it on every swap; you move it only by depositing or withdrawing.

Stable

Pegged to USDT/USD/BRL/CNY/etc — your daemon's oracle (median of CoinGecko, Binance, Coinbase, Kraken, Mercado Bitcoin) prices it every ~10s, fixed, zero slippage. Offline >60s auto-pauses the pool.

Multi-rune

One BTC treasury, several rune markets. Runes sent to the pool never auto-trade — Scan, then your signature Activates each pair, with an optional peg per pair.

Once you pick a type and sign, setup prints your pool address (bc1p…). Here's roughly what it looks like once live, right here on this page:

MyDog Pool Stable · USD peg

TVL0.0842 BTC

Reserve (rune)1,204,000

Fee0.30%

The deposit ratio sets the price on Static pools (e.g. 0.01 BTC + 100,000 RUNE opens at 10 sats/RUNE); on a Stable pool the parity you set IS the price and any funding ratio works. Wait for 1 confirmation — send the rune as one clean UTXO if you can (Split/Transfer helpers).

Owner wallet

Your everyday wallet (KrayWallet). Signs management actions — pause, fees, pairs — and never holds pool funds.

Pool wallet

A fresh 24-word wallet from step 1. Holds the BTC + Runes, signs swaps. Encrypted at rest (AES-256-GCM + Scrypt), unlocked only in memory while the daemon runs.

Never mix the two — no personal funds in the pool wallet, no pool funds moving through the owner wallet.

What's protected, and what's already been tried

Protected

Private keys — AES-256-GCM + Scrypt at rest, never sent over the network.
SIGHASH attacks — only SIGHASH_DEFAULT / SIGHASH_ALL accepted on pool inputs.
Reserve manipulation — daemon fetches reserves on-chain, never trusts the server.
Fee drain — hard cap 1000 sat/vB, plus a SELL pool net-loss rule: the pool can never lose more than the quoted amountOut (agents ≥ 0.10.0: the seller's payout funds the miner fee; older agents keep the legacy 5% fee cap).
Cenotaph rune burn — pointer/edict range and unknown-tag checks reject burn-inducing PSBTs.
Mempool griefing — nLockTime ≤ height + 100 blocks, nSequence ≥ 0xFFFFFFFD.
Phantom signatures — Schnorr/ECDSA validation before broadcast (BIP-66 + bitcoinjs).
Race conditions — UNIQUE pubkey index in the DB; sign requests serialized per pool.

Attacks → blocked

Kray 2b0ea40c SIGHASH_SINGLE|ANYONECANPAYRejected
Atomicals "0-yuan" zero-value drainRejected
Cenotaph out-of-range pointer/edictRejected
Inflated-reserve server lies about balanceRejected
Phantom signatures r=0 / s=0Rejected
OP_RETURN burn drain, value > 0Rejected
Mempool griefing far-future locktimeRejected

35/35 attack vectors verified by scripts/simulate-user-pool-attacks.js, plus a 20-case daemon-side suite in the open-source agent.

Both halves are open-source and small enough to actually read: kray-pool-agent/src/core/verifier.js (daemon rules) · kray-space/src/defi/poolAgentVerifier.js (server rules, re-applied) · kray-pool-agent/scripts/simulate-daemon-attacks.mjs (daemon-side suite, compromised-server threat model).

Full security doc → Source on GitHub

Or: let your AI set it up for you

Using Claude Code, Cursor, or any terminal AI agent? Copy the prompt below and paste it in. It checks your system, installs the agent, interviews you for the pool parameters, does the price math, and verifies each step — while you alone handle the two moments that matter: typing your password and writing down your 24 words. The prompt explicitly forbids the AI from ever seeing your secrets.

~1 page of instructions · works with any coding agent

Preview the prompt

You are helping me set up a sovereign Bitcoin liquidity pool on KRAY•SPACE using the open-source kray-pool-agent daemon (https://github.com/tomkray/kray-pool-agent). It runs on MY machine, holds MY keys, and routes liquidity to https://www.kray.space/swap. Work through the steps in order and verify each outcome before moving on.

SECURITY RULES — non-negotiable:
1. NEVER ask for, read, display, or store my wallet password, my 24-word mnemonic, or any private key. Those exist only between me and the daemon.
2. The two commands that touch secrets — `kray-pool-agent setup` and `kray-pool-agent start` — must be run BY ME, manually, in my own terminal window. You prepare everything, tell me exactly what I will see, then wait for me to report back.
3. Never pipe input into setup/start, never run them in your own shell, never read ~/.kray-pool-agent/wallet.enc.
4. If something fails, diagnose and fix the environment — never improvise an alternative way to handle keys.

STEP 1 — Environment check
Verify: macOS/Linux/WSL, git installed, Node.js 20+ (`node -v`). If Node is missing or old, install Node 20 via nvm.

STEP 2 — Install the agent
Run: curl -fsSL https://www.kray.space/pool.sh | bash
Then verify `kray-pool-agent --version` prints 0.6.0 or newer. If `npm link` lacked permissions, the command is `node ~/kray-pool-agent/src/index.js <cmd>` instead — adapt accordingly.

STEP 3 — Interview me for the pool parameters
Collect and validate, then print me a clean cheat sheet I can read while typing into the wizard:
- Pool name (3–100 chars).
- My OWNER address: a bc1p... Taproot address from my everyday wallet (KrayWallet). It only signs management actions and never holds pool funds.
- Pool type: Static pool (BTC + 1 rune, price = on-chain deposit ratio — recommended first pool), Stable pool (BTC + 1 rune pegged to USDT/BRL/etc via oracle — fixed price, zero slippage) or Multi-rune.
- If static or stable pool: the rune's exact NAME, its rune ID in block:tx form, and its divisibility. Help me confirm all three at https://ordinals.com/rune/<NAME> — the wizard verifies on-chain and refuses mismatches.
- If stable pool: also the peg asset (USDT, USDC, USD, BRL, CNY, EUR or a custom ticker) and the parity (1 rune = how much of the asset). This parity IS the pool price — deposits never set it.
- My fee percent (e.g. 0.3 = 0.3%; allowed 0.05–5).
- Optional max swap amount in raw units (0 = unlimited).

STEP 4 — I run setup (secrets stay with me)
Tell me to open a NEW terminal and run: kray-pool-agent setup
Walk me through the wizard using the cheat sheet, and remind me:
- Choose a strong password (12+ chars). You will never know it.
- The wizard shows my 24 WORDS exactly once. I write them on PAPER. They are full ownership of the pool funds — I must never paste them into this chat or photograph them.
- The wizard asks me to sign a registration message with my KrayWallet (owner address) and paste the signature into the terminal. That signature is public proof of ownership — safe to handle.
When the wizard prints my POOL ADDRESS (bc1p...), I paste only that address back to you. Sanity-check its format.

STEP 5 — Fund the pool
Ask what starting price I want (or what amounts I plan to deposit) and do the math: price in sats per rune = BTC_sats / rune_amount_raw. Show me 2–3 example ratios before I send.
Then I send BOTH assets to the pool address from any wallet: the BTC, and the rune in ONE clean UTXO (https://www.kray.space/tools has Split/Transfer helpers if needed).
After I send, check https://mempool.space/address/<pool_address> until the deposits have at least 1 confirmation, and confirm you can see both the BTC and the rune UTXO.

STEP 6 — Go live (manual)
Tell me to run: kray-pool-agent start  (it asks for my password — mine alone).
Then verify with me, in order:
- The daemon log shows a successful WebSocket auth (auth_ok / connected).
- https://www.kray.space/my-pool → I load my owner address → my pool shows a green ONLINE dot.
- https://www.kray.space/swap → my pool is listed for its rune.
If MULTI-RUNE: runes sent to the pool address NEVER trade until I activate them. Tell me to run `kray-pool-agent ui`, open Trading pairs → Scan pool address → Activate each rune with my starting price (one KrayWallet signature each). Only then the pairs appear on /swap.

STEP 7 — Brief me on operations
- The pool is online only while the daemon runs. Ctrl+C = offline within ~30 s, funds untouched on-chain.
- Update the agent anytime by re-running the installer one-liner.
- Full exit: stop the daemon, restore the 24 words in any Taproot wallet (BIP86, first address m/86'/0'/0'/0/0) — everything is there, no permission needed.
- With agent ≥ 0.10.0 the miner fee on SELL comes out of the seller's payout (pool loses exactly the quoted amount), so small swaps work; on older agents tiny SELLs are still rejected by the legacy 5% fee cap.
- Every swap — including rejected attacks and the rule that blocked them — appears in my dashboard at https://www.kray.space/my-pool.
- Multi-rune extra: the local dashboard (`kray-pool-agent ui`) also offers an optional Price peg — it glues a pair's price to USD/USDT/etc via a median of CoinGecko, Binance, Coinbase and Kraken, ticking every ~10 s while the daemon runs.