Skip to main content

Compare

WalletSuite vs Privy

WalletSuite is wallet operations infrastructure: one API for balances, history, fees, swaps, and broadcast across 80+ chains — for any address, not only wallets we manage — with non-custodial MPC signing behind a policy gate and a verifiable audit trail. Privy, a Stripe company, builds embedded wallets for consumer apps: user auth, funding rails, and wallets your users hold.

If your product needs the full data plane and governed signing — especially for AI agents — WalletSuite is built for that. If you are building a consumer app around social login and onramps, Privy is a strong choice.

Last updated:

CapabilityPrivyWalletSuite
Data for any addressNoManaged wallets only — balance and history endpoints are keyed to a Privy wallet IDYesAny plain address, no registration
External wallet dataNoConnected external wallets get no data APIsYesAny wallet, no import needed
Wallet importPartialThe whole private key is transferred into Privy's system (EVM and Solana only)YesExisting keys become MPC split shares — never held whole by anyone
Full activity historyNoTransfers only, one asset per queryYesTransfers, contract calls, swaps — every record tagged with its type
History chain coverageNo10 mainnets — no Bitcoin, no TronYes80+ chains
Full lifecycle (build → broadcast)NoEVM, Solana, Tempo only — elsewhere, raw signaturesYesAll 80+ chains
Simulation before signingNoNo simulation APIYesInside every preparation
RPC and indexingPartialYour own RPC at scale and for custom chainsYesFully handled — no nodes, no indexers
Deposit webhooksPartialManaged wallets only, select chainsYesAny watched address — no per-asset setup
Policy enforcementPartialSome rules enforced at the API level, outside the enclaveYesIn the signing path — a deny means no signature exists
Custody modelPartialShamir secret sharing in a TEE; custodial option via BridgeYesNon-custodial MPC, configurable quorum, no seed phrase
Key exposure during signingNoComplete key reconstructed in the TEE on every signatureYesNone — a complete key never exists, anywhere
Audit-log APINoNone documentedYesExportable decision records + signing receipts

Privy capabilities verified against docs.privy.io, August 2026.

Data for any address, not just registered wallets

Privy’s data endpoints — wallet balance and wallet transactions — are keyed on a Privy wallet ID. They work for wallets your app created in Privy or imported into it, and for nothing else. There is no way to query balances or history for a counterparty, a user’s external MetaMask, or any address Privy doesn’t manage.

WalletSuite reads take a plain address. No wallet registration, no import step. Balances, history, and fees for any address on any supported chain — your wallets, your users’ external wallets, the counterparty you are about to pay.

Real products constantly need data about addresses they don’t control — deposits arriving from external wallets, counterparty checks before a payout, portfolio views for connected wallets. If the data API only answers for wallets the provider manages, you end up running an indexer anyway.

Transaction history: full activity vs a per-asset transfer feed

Privy’s history endpoint requires exactly one named asset or token contract per query, and its response schema contains exactly two record types: transfer_sent and transfer_received. No contract calls, no approvals, no swaps, no NFT activity. Coverage is 10 mainnets — Bitcoin and Tron are not among them — while Privy advertises transacting on hundreds of blockchains.

WalletSuite’s history endpoint returns a full activity feed for any address, every record tagged with its type: native and token transfers, contract calls and creation, and swaps — one call, no per-asset filter. If you are rendering an activity screen or reconciling operations, a per-asset feed of transfers is not transaction history. It is a deposit ledger.

SpecPrivyWalletSuite
Query keyPrivy wallet IDPlain address
Works forWallets your app registeredAny address
Record types2 — transfer_sent, transfer_receivedTransfers, contract calls and creation, swaps
Per-asset filterRequired — exactly one asset or token per queryOptional
Chains10 mainnets80+ chains
What it rendersA deposit ledgerA full activity screen

Chain coverage: one answer everywhere vs tiered support

On Privy, the full transaction lifecycle — building, submission, gas sponsorship — covers EVM, Solana, and Tempo. On its Tier-2 chains (Bitcoin, Tron, Cosmos, Stellar, Sui, Near, TON, Starknet, Aptos), Privy provides curve-level signatures only: you build the transaction with chain-specific libraries and broadcast it yourself.

On WalletSuite, all 80+ supported chains carry the full surface — read, prepare, sign, broadcast. Preparation computes the nonce, fees, and every chain-specific field server-side, so a Tron transfer is the same three calls as an Ethereum one. A chain list measures where you can produce a signature. The question that decides your roadmap is which chains the provider will build and broadcast for.

RPC: handled, not homework

For its embedded client flows, Privy’s bundled RPC providers are rate-limited for development and moderate app usage; at scale, Privy recommends you set up your own RPC providers. Custom chains require you to supply the RPC URLs yourself.

With WalletSuite, chain connectivity is the product. No customer RPC, node, or indexer appears anywhere in the integration — and if you already run your own node, broadcasting through it is an option, never a requirement.

Webhooks: know when funds arrive

Privy’s on-chain deposit webhooks cover Privy-managed wallets only, on select chains, with tracked assets configured in the dashboard.

WalletSuite deposit notifications watch addresses, not managed wallets — subscribe to any address you care about and get notified the moment funds arrive, native coins and tokens alike, with no per-asset configuration. Every delivery is signed, and failed deliveries retry automatically.

Policy enforcement in the signing path

Privy enforces some policies at the API level rather than inside the enclave: transfer-size limits, for example, depend on transaction simulation that runs outside the enclave today.

In WalletSuite, every signing intent passes a deterministic policy decision — including per-transaction amount caps — before the MPC cosigner contributes its key share. A deny means no signature exists anywhere. The same gate applies whether the request arrived through the API, the SDK, or an AI agent’s tool call. An API-level check and a signing-path check fail differently: if policy runs beside the signer instead of in front of it, the enforcement boundary is the API, not the key.

An audit trail you can hand to an auditor

Privy documents no audit-log API or export; its security checklist tells customers to implement logging and audit trails themselves.

WalletSuite records a decision record for every allow and every deny — decision, stable reason code, matched rule — plus hash-chained signing receipts, tamper-evident and exportable as structured JSON for your SIEM. You don’t build the audit layer; you query it.

Built for agents, not just usable by agents

Privy shipped agent tooling — a CLI, a sandbox dashboard, an MCP server — and it is credible work. Architecturally, though, it is the same wallet primitive with an agent holding a signer.

WalletSuite treats the agent as a first-class principal: each agent has its own identity and authority, execution bands cap what an agent can even attempt (read, prepare, sign, broadcast), every signing intent passes the policy gate, errors are structured so agents can react programmatically, and every decision lands in the audit trail attributed to the agent that caused it. Giving an agent a signer answers whether it can transact. Governance answers what exactly this agent can do, and how you prove what it did.

What’s still on your plate

With Privy you build the indexer, the preflight, and the audit logging yourself; with WalletSuite those ship as API surface. Here is the same comparison as a build list.

The jobWith PrivyWalletSuite
Check a counterparty before a payoutNoBring your own indexerYesOne GET with the address
Activity screen for a user's walletNoPer-asset transfer feed, plus your indexer for contract calls and swapsYesOne call — full history
Tron transfer, end to endNoBuild with TronWeb, sign raw, broadcast yourselfYesprepare → sign → broadcast
Know when a deposit landsNoDashboard-configured tracked assets, managed wallets, select chainsYesWatch the address
Catch failures before gas is spentNoBuild your own preflightYesSimulation inside preparation
Hand an auditor the trailNoBuild logging yourselfYesExport decision records + signing receipts

Who should choose Privy

Privy is the better fit if you need:

  • Embedded wallets created at user sign-up, with social login, passkeys, and account abstraction — at very large consumer scale
  • Fiat rails as a feature: card and bank onramps and offramps, stablecoin settlement, and cards via the Stripe family
  • A custodial option operated with a licensed custodian (Bridge)
  • Auth and wallet in a single vendor for a consumer app on EVM, Solana, or Tempo

Who should choose WalletSuite

WalletSuite is the better fit if you need:

  • The full lifecycle — prepare, simulate, sign, broadcast — on every one of 80+ chains, including Tron and Bitcoin
  • The data plane included — balances, full history, fees, and deposit notifications for any address, with no RPC nodes or indexers to run
  • Non-custodial MPC with configurable quorum — a complete private key never exists, even during signing
  • Policy enforced before the signature can exist — per-transaction caps, and a deny means no signature, anywhere
  • Evidence, not just logs — decision records for every allow and deny, plus hash-chained signing receipts you can hand to an auditor
  • AI agents as first-class principals — per-agent identity, execution bands, and every action attributed in the audit trail

Running both

The two products compose. Teams keep Privy for consumer onboarding and auth, and point their data plane at WalletSuite — reads are address-based, so there is no import or migration step.

Frequently asked questions

Does Privy provide transaction history?

Yes, for wallets it manages, on 10 mainnet chains, as a per-asset feed of sent and received transfers. There is no history for Bitcoin or Tron, and no record types for contract calls, approvals, swaps, or NFT activity. WalletSuite returns full history — transfers, contract calls, swaps — for any address.

Is WalletSuite an alternative to Privy?

For wallet operations, yes. Teams choose WalletSuite over Privy for the full wallet stack — any-address data and the complete lifecycle on 80+ chains — with non-custodial MPC signing, policy enforced before any signature exists, and a verifiable audit trail for humans and AI agents alike. Privy remains the stronger choice for consumer-facing embedded wallets with social login and fiat rails.

Can I use Privy and WalletSuite together?

Yes. Teams keep Privy for consumer onboarding and auth, and point their data plane at WalletSuite — reads are address-based, so there is no import or migration step.

Can Privy return balances or history for wallets it doesn't manage?

No. Privy's balance and transactions endpoints require a Privy wallet ID, and its address-based lookups only resolve wallets and users belonging to your own app. WalletSuite reads accept any address on 80+ chains with no registration step.

Do I need my own RPC provider with WalletSuite?

No. WalletSuite handles chain connectivity end to end. Privy recommends configuring your own RPC providers as your usage scales and requires customer-supplied RPC URLs for custom chains.

Is WalletSuite custodial?

No. The default is 2-of-2 MPC: your share and ours must both sign, and neither party can move funds alone, with configurable quorum and a recovery mode available. A full private key is never assembled, not even inside a secure enclave. Shamir-based systems, Privy's included, recombine shares at signing time, so the complete key exists inside the TEE during every signing operation.

Query any address on 80+ chains before you write a line of integration code.

WalletSuite reads are address-based — point them at the addresses you already have, whichever provider manages the keys.