Security and custody
You keep your keys, your NFTs and your money. mints prepares transactions, your wallet signs them. The only keys mints holds belong to launch agents and to the listing desk of launchpad collections, and each can do one narrow job.
Your wallet stays yours
- mints never asks for, receives or stores your seed phrase or private key.
- Every purchase, mint, listing and launch is a transaction you see and approve in your own wallet.
- NFTs you buy go straight to your wallet. There is no deposit, no balance on mints and nothing to withdraw.
- Signing in is a signed message, not a transaction. It cannot move anything.
Every key that exists
Only in Phantom or MetaMask, on your device.
CanSigns what you approve: sign in, buys, mints, listings, launches.
Cannotmints never sees it, stores it or asks for it.
Made by the server at launch, sealed with AES 256 GCM.
CanClaims that coin's fees, mints its collection, buys its floor, sends drops.
CannotTouch any other wallet, coin or collection.
Sealed with AES 256 GCM on the server.
CanMove a launchpad NFT that its owner listed on mints, inside the purchase that pays the seller.
CannotMove an NFT that is not listed, or move it without the payment in the same transaction.
The coin mint key, the collection key, one key per new NFT.
CanSign the one transaction that creates that account.
CannotDo anything after it. The coin mint key is erased once the coin lands.
A cookie signed with HMAC SHA 256, valid for 30 days.
CanTell the site which wallet signed in.
CannotSign a transaction or move funds. It holds no key.
Agent keys
Each launch creates a fresh wallet for its agent. The private key is generated on the server and stored sealed with AES 256 in GCM mode, under a master key that lives only in the server environment, never in the database or the code. It is opened in memory for the moment of a transaction and is never shown or sent anywhere, including the mints admin panel, which only shows whether a key is set.
What the agent can do is limited by the chain itself, not by promises: its wallet holds only the SOL it claimed from its own coin's fees and the NFTs it minted or bought. It is the update authority of its own collection, which is what lets it cosign mints.
The platform key and launchpad listings
Listing a launchpad NFT on mints does not move it into escrow. The NFT stays in your wallet; you sign one transaction that gives the platform key a transfer permission on that one NFT. The permission is used only inside a purchase transaction that also pays you, the royalty and the fee. If any part fails, the whole transaction fails.
| If you | Then |
|---|---|
| Cancel the listing | You sign a transaction that removes the permission. |
| Send or sell the NFT somewhere else | The permission is cleared by the transfer, and the listing can no longer be bought. |
| Do nothing | The NFT stays in your wallet until a buyer pays your price. |
One time keys
Some accounts on Solana need their own key to be created: the coin's mint, the collection, each new NFT. These keys are generated fresh, sign their one creating transaction, and have no use afterwards. The coin mint key is kept sealed only between preparing your launch and the moment it lands, then erased.
How we check what you sign
- Sign in: the message must match your address, must be signed within 10 minutes and carries a unique nonce, so an old signature cannot be replayed.
- Launches, mints and launchpad purchases: mints signs its part before you sign. When the transaction comes back, every signature is verified against the exact message. If anything in it was changed, it is rejected and never sent.
- Solana purchases: the transaction is simulated before sending. If it would fail, it is not sent and nothing is spent.
Your session
After you sign in, a cookie keeps you signed in for 30 days on that browser. It holds your account id, an expiry and a signature made with a server secret (HMAC SHA 256), so it cannot be forged or edited. It is not readable by scripts on the page. Disconnect from the account menu to end it.