# AIPAY

> AIPAY (https://aipay.im) is a non-custodial, multi-chain crypto wallet and merchant payment gateway, shipped as a Progressive Web App (PWA). One BIP-39 recovery phrase and one local wallet password control every chain. Keys are generated and encrypted in your browser and never sent to a server; payments settle directly on-chain. There is no account, no backend API, and no database: the app is a static export, and balances, payments and order confirmation are read directly from public RPC endpoints.

This file exists so both humans and AI agents can understand what AIPAY is and, more importantly, **which features are actually enabled today**. AIPAY is fail-closed: several features ship disabled and must not be described as available.

## Feature status (read this first)

Enabled today:

- EVM mainnet wallet: receive, send, balances, transaction history, contacts.
- Solana wallet: receive, send, balances, history.
- Solana swaps (via Jupiter) on the `/swap` page.
- Merchant tools: payment requests, POS QR checkout, payment links, order tracking, products, analytics.
- Encrypted backup and restore (local JSON file, or CryptoKey.im `.ckx` / PNG carrier).
- External `/earn` directory linking to official staking/earning sites.

Disabled today (fail-closed — do NOT tell users these work):

- **MSG (MSGChain) — NOT enabled.** The adapter is implemented but `public/msg-config.json` ships with `enabled: false`. MSG addresses, MSG balances and MSG payments are hidden until MSGChain mainnet parameters are provided.
- **Fiat on-ramp (buy crypto with a card) — NOT enabled.** `public/buy-config.json` ships with `enabled: false` and no provider.
- **NFT gallery — NOT enabled.** `public/nfts-config.json` ships with `enabled: false` and no Alchemy key.
- **EVM token swaps — NOT enabled.** `public/swap-config.json` ships with `enabled: false`. The Solana swap is unaffected.
- **Merchant payouts on MSGChain — NOT open.** Routing merchant payments through an AIPAY on-chain contract on MSGChain is not available yet.

## Documentation

- [Getting started](https://aipay.im/docs/getting-started.md): create or import a wallet, receive and send your first payment, and reconcile it.
- [Wallets and keys](https://aipay.im/docs/wallets.md): the recovery phrase, the local wallet password, address derivation, and what AIPAY can and cannot do with your keys.
- [Supported chains](https://aipay.im/docs/chains.md): every chain AIPAY supports today, plus the per-chain rules that prevent lost funds.
- [Encrypted backup and restore](https://aipay.im/docs/backup.md): what a backup contains, the two different passwords, and how to restore on another device.
- [Merchant guide](https://aipay.im/docs/merchant.md): set up a shop, charge a customer, share a payment link, and confirm orders.

## App entry points

- [Home / wallet](https://aipay.im/en/): balances, quick receive and send.
- [Create wallet](https://aipay.im/en/create-wallet): generate a new recovery phrase.
- [Import wallet](https://aipay.im/en/import-wallet): restore from a recovery phrase or a CryptoKey backup file / image.
- [Receive](https://aipay.im/en/receive): pick a chain and show an address or QR code.
- [Send](https://aipay.im/en/send): send native coins or tokens on a chosen chain.
- [History](https://aipay.im/en/history): local and on-chain transaction history.
- [Contacts](https://aipay.im/en/contacts): saved addresses with automatic chain detection.
- [Swap](https://aipay.im/en/swap): Solana token swaps.
- [Earn](https://aipay.im/en/earn): directory of external staking / earning sites.
- [Settings](https://aipay.im/en/settings): backup, restore, change password, biometric unlock, AI (BYOK) settings.
- [AI agent payments](https://aipay.im/en/agent): plan and export a spending capability for an AI agent. The policy engine is local (not enforced on-chain) and MSG is not enabled.
- [Merchant dashboard](https://aipay.im/en/merchant/dashboard): shop setup, payment links, POS, orders, products, analytics.
- [Point of sale](https://aipay.im/en/merchant/pos): charge a customer amount and show a payment QR code.
- [Checkout](https://aipay.im/en/pay): the page a customer opens from an AIPAY payment link.

## Key facts for AI agents

- AIPAY is **non-custodial**: the recovery phrase and private keys never leave the user's browser.
- One recovery phrase produces **the same `0x` address on every EVM chain** and a **separate Solana address**. Funds do not move between chains automatically.
- The **local wallet password (PIN)** decrypts the stored recovery phrase. It is never stored anywhere and cannot be recovered. It is different from the **backup password**.
- **A backup does not contain the wallet password.** Restoring a backup gives you the encrypted wallet back, and you still need the original wallet password (or the recovery phrase) to unlock it.
- There is no server, no email, no password reset, and no support channel that can recover a lost phrase or password.
- AIPAY's UI is available in English and Simplified Chinese (`/en/...` and `/zh/...`). These documents are English-only.
- **AI agent payments are planned, not a chain rule.** AIPAY can export a spending capability (scope, budget, expiry, approval mode) for an agent process. That policy is enforced **locally** by the agent, not on-chain, and an escalated payment is approved from the command line. MSG is still not enabled.