Automation Levels
What each wallet can automate on Chatito: Practice, CEX keys, Propose and Sign, named-pair Smart Policy, Heat roster, and Chatito Agent.
The wallet you use does not decide whether Chatito can run a system. Practice already does that, with no wallet. The job is to stop negotiating with yourself on every candle. The wallet only decides how unattended Live on-chain can be, without handing over the keys.
CEX Live is a separate track: trade-only exchange keys, not these wallets. The Sign sheet also picks which Heat path it will offer.
Trust the Sign sheet in the app if this page and the screen disagree. Wallets change with extension updates.
This is not a ranking of brands. It is a map of capability.
The Ladder
| Level | Name | Who signs while it runs | What you need |
|---|---|---|---|
| 0 | Practice | Nobody. Paper money. | No wallet. |
| CEX | Exchange Live | Chatito, via trade-only API keys | Exchange keys. Wallet optional. |
| 1 | Login / link | You, if you click | Any common EVM or Solana wallet. A signature proves the address. |
| 2 | Propose and Sign | You, every mint / swap / collect / close | Common EVM wallet. Normal transaction. |
| 3 | Named-pair Smart Policy | A keeper, only on the pair you named | Common EVM wallet that can approve Permit2. MetaMask works. Rabby works. |
| 4 | Heat roster | A keeper, only names inside the signed box | Atomic batch Sign (wallet_sendCalls). MetaMask works. Rabby cannot today. |
| 5 | Chatito Agent | A keeper as your same wallet, Heat scan | EIP-7702 (type-4) to Chatito's implementation. Not MetaMask. Not Rabby today. |
None of these is a vault. Tokens and LP NFTs stay in your wallet. Signing a policy is not turning Live on. Live is a separate human switch.
In-app: Help → Automation Levels By Wallet. Wallet pick list: Wallets. The rule itself: Smart Policy.
Level 0: Practice
Capability: full strategy automation on paper.
Trade For Me, Create Strategy, and AI Lab invents all land here. The book can enter, exit, remint, and rotate on practice money with no Sign.
Example. You run Trade For Me, pick DEX, leave the book on Practice. Overnight it takes a mean-reversion clip and hits a stop. You learn the plan without a wallet.
Cannot do: spend real tokens. That needs a later level and you arming Live.
CEX Live (keys, not a wallet level)
Capability: unattended spot-style automation on your exchange account.
The money stays on the exchange. Chatito stores encrypted trade-only keys. Turn withdraw off. Prefer a dedicated automation key.
Example. You create a Binance trade-only key, save it in Settings, arm Live on a paper-proven DCA book. The keeper places buys and sells on the exchange. No EVM Sign.
Cannot do: DEX or LP Live. Those need a wallet Sign. See Custody and Keys.
Level 1: Login / Link
Capability: prove an address. Identity, not automation.
Sign-In with Ethereum or Sign-In with Solana. Chatito never asks for a seed. Linking several addresses lives in Settings → Wallets. The header wallet is the one that Signs.
Example. You log in with Google, then link MetaMask so checkout or a later Sign has an address. Books still run Practice.
Cannot do: unattended on-chain trades. A linked wallet that never Signs a policy is still Level 1.
Level 2: Propose and Sign
Capability: the system plans the on-chain work. You confirm every action.
This is the default LP Live path. No grant required. Any common EVM wallet that can send a normal transaction.
Some flows prefer one confirm for several steps (wallet_sendCalls). Wallets that lack it fall back to one confirm per step. Both are valid.
Example. LP Create proposes a mint on WETH/USDC. You Sign. Later Overview proposes collect, then a midpoint remint. You Sign each plan. The NFT never leaves your wallet.
Cannot do: run while you sleep. If you do not Sign, nothing on-chain happens.
Level 3: Named-Pair Smart Policy
Capability: unattended automation on one pair you picked.
You approve a capped, expiring Smart Policy (Permit2 + open grant). A keeper may then buy/sell or mint/collect/rebalance/close only that pair, and only send results back to you.
Any common EVM wallet. MetaMask works. Rabby works.
On DEX this is the named-pair executor path. On LP this is the optional unattended sibling of Propose and Sign.
Example. You paper-prove a WETH/USDC book. You Sign a $200 cap for 7 days. Overnight the keeper takes a take-profit and a later re-entry on that pair. It cannot touch an airdrop or a different token.
Cannot do: Heat-scan a changing roster of names. That is Level 4 or 5. It also cannot outlive the cap, the expiry, or a revoke.
Grant is not Live. You still arm Live yourself.
Level 4: Heat Roster (Batch Sign)
Capability: unattended Heat on wallets that can atomic batch Sign, without attaching Chatito Agent.
You Sign a box of names (and the usual wrap / approve / grant steps). The keeper may act only inside that box. MetaMask caps a batch at 10 calls; the app splits larger Signs into several atomic batches. There is no sequential fallback: if the wallet cannot batch, this path is denied.
MetaMask works on this path (LP Heat, and DEX Heat when the Sign sheet offers it). Rabby cannot today. The app should offer named pair or paper instead.
This is not Chatito Agent. MetaMask still will not attach a third-party EIP-7702. Heat on MetaMask uses this roster path on purpose.
Example. You Sign LP Heat from MetaMask with USDC + WETH in the box. The walker mints the next fundable Heat name, later closes it, and skips an alt/alt that the grant cannot fund. You did not click each mint.
Cannot do: names you did not Sign into the box. Cannot run on a wallet that rejects wallet_sendCalls. Cannot attach Chatito Agent from MetaMask.
Level 5: Chatito Agent
Capability: Heat-scan automation as your same wallet.
The wallet signs EIP-7702 (type-4) to Chatito's implementation, then opens a Heat grant. Tokens still stay in your wallet. The agent may buy scanner names and sell only bags this grant bought.
MetaMask will not attach Chatito Agent. It only authorizes MetaMask's own Smart account. Turning Smart account off does not fix that. Rabby cannot attach Chatito Agent yet.
Example. A wallet the Sign sheet accepts for type-4 Signs Chatito Agent on Base. A DEX Heat book buys a scanner name, then sells that bag on the book's exit. A leftover airdrop in the same wallet is not in inventory and cannot be sold.
Cannot do: run from MetaMask or (today) Rabby. Do not send tokens to the Agent address. Agent API keys (the chk_… builder keys) are a different product: paper and read, never this Sign.
Which Wallet For Which Level
| Wallet | 0 Practice | 1 Login | 2 Propose and Sign | 3 Named pair | 4 Heat roster | 5 Chatito Agent |
|---|---|---|---|---|---|---|
| None (Google / email / Telegram) | yes | no | no | no | no | no |
| MetaMask | yes | yes | yes | yes | yes | no |
| Rabby | yes | yes | yes | yes | no | no |
| Other common EVM | yes | yes | yes, if it can send a tx | yes, if it can Permit2 | only if it can atomic wallet_sendCalls |
only if it type-4s Chatito |
| Phantom / Solflare | yes | Solana identity | Sol Sign when that family is offered | not this EVM ladder | not this EVM ladder | not this EVM ladder |
| Hardware (via an extension) | yes | yes | usually | usually, if Permit2 works | only if the stack can batch | only if the stack type-4s Chatito |
Prefer a dedicated automation wallet, not the vault you cannot replace. A Smart Policy is bound to the wallet that opened it. Switching the header does not move an old grant.
Exact capability can change. The Sign sheet is source of truth. When a new wallet actually Signs Chatito Agent, this matrix updates. Until then, do not assume a brand works at Level 5.
Worked Examples
"I just want a system tonight." Level 0. Trade For Me. No wallet.
"I already trade on Binance." CEX Live after paper. Trade-only key. Wallet optional.
"One pair, I will click when asked." Level 2. MetaMask or Rabby. LP Propose and Sign.
"One pair, I want it to run while I sleep." Level 3. Same wallets. Named-pair Smart Policy. Cap + expiry + you arm Live.
"I use MetaMask and I want Heat, not one pair." Level 4. Heat roster. Batch Sign. Not Chatito Agent.
"I want Heat scan as my same wallet, EIP-7702." Level 5. Only if the Sign sheet accepts type-4 to Chatito. Not MetaMask. Not Rabby today.
"Rabby is my daily driver." Levels 0 to 3. Not 4. Not 5. Named pair or paper.
What Every Live Level Shares
- You stay the custodian. No deposit. No "send tokens to Chatito."
- Capped and expiring once a Smart Policy is in play. Revocable.
- Recipient is you. Output, leftovers, and any new NFT return to the signing wallet.
- Grant is not Live. Opening a policy does not arm the book. Revoke does not turn Live off; the book falls back to manual Sign.
- Agent API keys cannot open, revoke, or arm a Smart Policy.
- Never paste a seed or a main-wallet private key.
If a product needs a deposit, holds the NFT, or wants an unlimited approve, it is not this ladder. Call it custody.
When you need to stop negotiating with yourself, you need a system that can run at the level your wallet actually supports. Paper first. You arm live. Keys stay yours.
Longer write-up: Wallet Automation Levels.
Related
Ready to run a strategy?
Open App