Account Permissions

Sail is non-custodial. Your funds live in your Sail Account (an ERC-7702 smart account), and Sail can only operate using the permissions you approve.

When you “start” your agent (or change settings later), you’ll usually sign two types of permissions:

1) Token approvals

Token approvals allow your Sail Account to interact with specific contracts (for example, a yield source or router) using a specific token.

• Approvals are scoped to a token and spender.

• They do not give someone control over your wallet. They simply allow smart contracts to move a token under the constraints of your permissions.

• Approvals are common in DeFi. Sail surfaces them in the UI so you can review what you’re signing.

2) Agent permissions (session keys)

Session keys are what make Sail feel “agentic”: you don’t need to sign every rebalance, claim, swap, or bridge.

• Your agent receives a scoped, revocable permission to execute on your behalf.

• The permission is limited to what you chose in onboarding or personalization (networks, stablecoins, protocols, actions).

• You can update or revoke these permissions at any time from the app.

What you should expect to see at signing time

Sail shows you the exact permissions you’re authorizing before you sign, including what the agent can do and where it can do it. This is intentional: you should be able to verify the scope before granting access.

Where to review or change permissions

Open the Profile Menu → Personalization to review and update what your agent is allowed to do. If you expand scope (new protocols/actions), Sail will request new permissions. If you reduce scope, Sail will stop using anything outside your updated rules.