Compare
WalletSuite vs Privy
WalletSuite is wallet operations infrastructure: one API for balances, history, fees, swaps, and broadcast across 80+ chains — for any address, not only wallets we manage — with non-custodial MPC signing behind a policy gate and a verifiable audit trail. Privy, a Stripe company, builds embedded wallets for consumer apps: user auth, funding rails, and wallets your users hold.
If your product needs the full data plane and governed signing — especially for AI agents — WalletSuite is built for that. If you are building a consumer app around social login and onramps, Privy is a strong choice.
Last updated:
| Capability | Privy | WalletSuite |
|---|---|---|
| Data for any address | No — Managed wallets only — balance and history endpoints are keyed to a Privy wallet ID | Yes — Any plain address, no registration |
| External wallet data | No — Connected external wallets get no data APIs | Yes — Any wallet, no import needed |
| Wallet import | Partial — The whole private key is transferred into Privy's system (EVM and Solana only) | Yes — Existing keys become MPC split shares — never held whole by anyone |
| Full activity history | No — Transfers only, one asset per query | Yes — Transfers, contract calls, swaps — every record tagged with its type |
| History chain coverage | No — 10 mainnets — no Bitcoin, no Tron | Yes — 80+ chains |
| Full lifecycle (build → broadcast) | No — EVM, Solana, Tempo only — elsewhere, raw signatures | Yes — All 80+ chains |
| Simulation before signing | No — No simulation API | Yes — Inside every preparation |
| RPC and indexing | Partial — Your own RPC at scale and for custom chains | Yes — Fully handled — no nodes, no indexers |
| Deposit webhooks | Partial — Managed wallets only, select chains | Yes — Any watched address — no per-asset setup |
| Policy enforcement | Partial — Some rules enforced at the API level, outside the enclave | Yes — In the signing path — a deny means no signature exists |
| Custody model | Partial — Shamir secret sharing in a TEE; custodial option via Bridge | Yes — Non-custodial MPC, configurable quorum, no seed phrase |
| Key exposure during signing | No — Complete key reconstructed in the TEE on every signature | Yes — None — a complete key never exists, anywhere |
| Audit-log API | No — None documented | Yes — Exportable decision records + signing receipts |
Privy capabilities verified against docs.privy.io, August 2026.
Data for any address, not just registered wallets
Privy’s data endpoints — wallet balance and wallet transactions — are keyed on a Privy wallet ID. They work for wallets your app created in Privy or imported into it, and for nothing else. There is no way to query balances or history for a counterparty, a user’s external MetaMask, or any address Privy doesn’t manage.
WalletSuite reads take a plain address. No wallet registration, no import step. Balances, history, and fees for any address on any supported chain — your wallets, your users’ external wallets, the counterparty you are about to pay.
Real products constantly need data about addresses they don’t control — deposits arriving from external wallets, counterparty checks before a payout, portfolio views for connected wallets. If the data API only answers for wallets the provider manages, you end up running an indexer anyway.
Transaction history: full activity vs a per-asset transfer feed
Privy’s history endpoint requires exactly one named asset or token contract per query, and its response schema contains exactly two record types: transfer_sent and transfer_received. No contract calls, no approvals, no swaps, no NFT activity. Coverage is 10 mainnets — Bitcoin and Tron are not among them — while Privy advertises transacting on hundreds of blockchains.
WalletSuite’s history endpoint returns a full activity feed for any address, every record tagged with its type: native and token transfers, contract calls and creation, and swaps — one call, no per-asset filter. If you are rendering an activity screen or reconciling operations, a per-asset feed of transfers is not transaction history. It is a deposit ledger.
| Spec | Privy | WalletSuite |
|---|---|---|
| Query key | Privy wallet ID | Plain address |
| Works for | Wallets your app registered | Any address |
| Record types | 2 — transfer_sent, transfer_received | Transfers, contract calls and creation, swaps |
| Per-asset filter | Required — exactly one asset or token per query | Optional |
| Chains | 10 mainnets | 80+ chains |
| What it renders | A deposit ledger | A full activity screen |
Chain coverage: one answer everywhere vs tiered support
On Privy, the full transaction lifecycle — building, submission, gas sponsorship — covers EVM, Solana, and Tempo. On its Tier-2 chains (Bitcoin, Tron, Cosmos, Stellar, Sui, Near, TON, Starknet, Aptos), Privy provides curve-level signatures only: you build the transaction with chain-specific libraries and broadcast it yourself.
On WalletSuite, all 80+ supported chains carry the full surface — read, prepare, sign, broadcast. Preparation computes the nonce, fees, and every chain-specific field server-side, so a Tron transfer is the same three calls as an Ethereum one. A chain list measures where you can produce a signature. The question that decides your roadmap is which chains the provider will build and broadcast for.
RPC: handled, not homework
For its embedded client flows, Privy’s bundled RPC providers are rate-limited for development and moderate app usage; at scale, Privy recommends you set up your own RPC providers. Custom chains require you to supply the RPC URLs yourself.
With WalletSuite, chain connectivity is the product. No customer RPC, node, or indexer appears anywhere in the integration — and if you already run your own node, broadcasting through it is an option, never a requirement.
Webhooks: know when funds arrive
Privy’s on-chain deposit webhooks cover Privy-managed wallets only, on select chains, with tracked assets configured in the dashboard.
WalletSuite deposit notifications watch addresses, not managed wallets — subscribe to any address you care about and get notified the moment funds arrive, native coins and tokens alike, with no per-asset configuration. Every delivery is signed, and failed deliveries retry automatically.
Policy enforcement in the signing path
Privy enforces some policies at the API level rather than inside the enclave: transfer-size limits, for example, depend on transaction simulation that runs outside the enclave today.
In WalletSuite, every signing intent passes a deterministic policy decision — including per-transaction amount caps — before the MPC cosigner contributes its key share. A deny means no signature exists anywhere. The same gate applies whether the request arrived through the API, the SDK, or an AI agent’s tool call. An API-level check and a signing-path check fail differently: if policy runs beside the signer instead of in front of it, the enforcement boundary is the API, not the key.
An audit trail you can hand to an auditor
Privy documents no audit-log API or export; its security checklist tells customers to implement logging and audit trails themselves.
WalletSuite records a decision record for every allow and every deny — decision, stable reason code, matched rule — plus hash-chained signing receipts, tamper-evident and exportable as structured JSON for your SIEM. You don’t build the audit layer; you query it.
Built for agents, not just usable by agents
Privy shipped agent tooling — a CLI, a sandbox dashboard, an MCP server — and it is credible work. Architecturally, though, it is the same wallet primitive with an agent holding a signer.
WalletSuite treats the agent as a first-class principal: each agent has its own identity and authority, execution bands cap what an agent can even attempt (read, prepare, sign, broadcast), every signing intent passes the policy gate, errors are structured so agents can react programmatically, and every decision lands in the audit trail attributed to the agent that caused it. Giving an agent a signer answers whether it can transact. Governance answers what exactly this agent can do, and how you prove what it did.
What’s still on your plate
With Privy you build the indexer, the preflight, and the audit logging yourself; with WalletSuite those ship as API surface. Here is the same comparison as a build list.
| The job | With Privy | WalletSuite |
|---|---|---|
| Check a counterparty before a payout | No — Bring your own indexer | Yes — One GET with the address |
| Activity screen for a user's wallet | No — Per-asset transfer feed, plus your indexer for contract calls and swaps | Yes — One call — full history |
| Tron transfer, end to end | No — Build with TronWeb, sign raw, broadcast yourself | Yes — prepare → sign → broadcast |
| Know when a deposit lands | No — Dashboard-configured tracked assets, managed wallets, select chains | Yes — Watch the address |
| Catch failures before gas is spent | No — Build your own preflight | Yes — Simulation inside preparation |
| Hand an auditor the trail | No — Build logging yourself | Yes — Export decision records + signing receipts |
Who should choose Privy
Privy is the better fit if you need:
- Embedded wallets created at user sign-up, with social login, passkeys, and account abstraction — at very large consumer scale
- Fiat rails as a feature: card and bank onramps and offramps, stablecoin settlement, and cards via the Stripe family
- A custodial option operated with a licensed custodian (Bridge)
- Auth and wallet in a single vendor for a consumer app on EVM, Solana, or Tempo
Who should choose WalletSuite
WalletSuite is the better fit if you need:
- The full lifecycle — prepare, simulate, sign, broadcast — on every one of 80+ chains, including Tron and Bitcoin
- The data plane included — balances, full history, fees, and deposit notifications for any address, with no RPC nodes or indexers to run
- Non-custodial MPC with configurable quorum — a complete private key never exists, even during signing
- Policy enforced before the signature can exist — per-transaction caps, and a deny means no signature, anywhere
- Evidence, not just logs — decision records for every allow and deny, plus hash-chained signing receipts you can hand to an auditor
- AI agents as first-class principals — per-agent identity, execution bands, and every action attributed in the audit trail
Running both
The two products compose. Teams keep Privy for consumer onboarding and auth, and point their data plane at WalletSuite — reads are address-based, so there is no import or migration step.
Frequently asked questions
Does Privy provide transaction history?
Yes, for wallets it manages, on 10 mainnet chains, as a per-asset feed of sent and received transfers. There is no history for Bitcoin or Tron, and no record types for contract calls, approvals, swaps, or NFT activity. WalletSuite returns full history — transfers, contract calls, swaps — for any address.
Is WalletSuite an alternative to Privy?
For wallet operations, yes. Teams choose WalletSuite over Privy for the full wallet stack — any-address data and the complete lifecycle on 80+ chains — with non-custodial MPC signing, policy enforced before any signature exists, and a verifiable audit trail for humans and AI agents alike. Privy remains the stronger choice for consumer-facing embedded wallets with social login and fiat rails.
Can I use Privy and WalletSuite together?
Yes. Teams keep Privy for consumer onboarding and auth, and point their data plane at WalletSuite — reads are address-based, so there is no import or migration step.
Can Privy return balances or history for wallets it doesn't manage?
No. Privy's balance and transactions endpoints require a Privy wallet ID, and its address-based lookups only resolve wallets and users belonging to your own app. WalletSuite reads accept any address on 80+ chains with no registration step.
Do I need my own RPC provider with WalletSuite?
No. WalletSuite handles chain connectivity end to end. Privy recommends configuring your own RPC providers as your usage scales and requires customer-supplied RPC URLs for custom chains.
Is WalletSuite custodial?
No. The default is 2-of-2 MPC: your share and ours must both sign, and neither party can move funds alone, with configurable quorum and a recovery mode available. A full private key is never assembled, not even inside a secure enclave. Shamir-based systems, Privy's included, recombine shares at signing time, so the complete key exists inside the TEE during every signing operation.
Query any address on 80+ chains before you write a line of integration code.
WalletSuite reads are address-based — point them at the addresses you already have, whichever provider manages the keys.