Mooons · Platform plan v0.14 · 2026-11-04 · Draft

The AI app builder for web3. Agents at your disposal.

Mooons is an agentic web3 development platform, infrastructure and accelerator. Think Lovable for web3. You describe the app. Agents build it, test it, and deploy a test version. When you approve it and switch production on, they handle every onchain and cloud deployment, then keep it running.

01 · DescribeSay what you want

Prompt the builder or remix a sample.

app.mooons.xyz
02 · TestTry a real version

Agents build, test, and verify it on testnet.

name-test.mooons.site
03 · LaunchSwitch it on

You approve. Agents deploy to mainnet.

name.mooons.site
04 · GrowKeep improving

Insights, a manager agent, the accelerator.

mooons.xyz/accelerator

Consolidates platform plan v0.12, tech stack v0.1, and agents v0.1, and adds the accelerator. Recommendations, chain order, SDK dependencies, and phase scope are proposals to confirm.

What we're building

Shipping a web3 app still takes four products and a specialist team: wallet onboarding, contract infrastructure, an app builder, and campaign tools. Each has its own account, bill, and integration work, and someone still has to audit, test, deploy, and run the result. Mooons joins them on one stack and lets agents do the work.

✎

Development platform

The left ring

Prompt-to-app for web3. Agents build, test, verify, deploy, and operate. The owner makes two decisions.

For non-developers, agencies, and web3 teams
▦

Infrastructure

The middle ring

Wallets, auth, contracts, messaging, API, MCP, and SDKs. The same blocks the agents build with, open to anyone.

For developers and outside coding agents
↗

Accelerator

The right ring · new, proposal

Cohorts of teams shipping on Mooons, measured on real usage rather than a pitch deck.

For teams ready to launch
How the rings link. The accelerator brings serious teams to the platform. The platform creates demand on the infrastructure. The infrastructure makes the next team faster.

Scope

In scope for the first production release

  • Prompt to live app for a non-developer, on EVM.
  • Audited contract library, with a report shown before the owner signs.
  • Multi-tenant from the start: tenants, projects, roles, cells.
  • Test first, always: nothing reaches mainnet without a passing test version.
  • First samples: web3 app and generative NFT.

Not in the first production release

  • Non-EVM chains, which arrive in Phases 3 and 4
  • Game engine and prediction markets
  • Regulated app types such as real-world assets
  • A share of tenant onchain revenue
  • Public accelerator cohorts, which start in Phase 3

The big picture

One stack, five layers. Services are what people pay for. Infrastructure is what the services, and any outside developer, are built on. The SDKs are the only way anything above reaches the infrastructure below.

Surfaces
Web platformapp.mooons.xyz
Desktop companionManager with a face
Mobile walletHold and approve
Superadmin consoleconsole.mooons.xyz
↓
Services
AgentsBuild, test, verify, deploy, operate
AcceleratorCohorts, grants, reviews
Tracking and game engineUsage, quests, economy
Contract libraryAI pre-audited templates
↓
SDKs
wallet
js
react
gram
base
mcp
↓
Infrastructure
Wallet and authUsers, agents, keys
MessagingEmail, bots, webhooks, SSE
Chain servicesContracts, relay, RPC, indexer
API and MCPapi.mooons.xyz
↓
Chains
EVM
Solana
TON
NEAR
Sui, Aptos

Positioning

Mooons is like Lovable for web3. Public category line: the AI app builder for web3. People already understand prompt-to-app. Mooons takes that promise and carries it through the parts of web3 a general builder leaves to you: wallets, contracts, testnet, mainnet, and running the app after launch.
MooonsAI app buildersNo-code and low-code
ExamplesMooonsLovable, OrchidsBubble
How you buildChatChatVisual editor
Who does the workA team of agentsOne AI builder, checked by youYou
Wallets and sign-inBuilt inAdd a provider, then check the codeAdd a plugin or outside service
Smart contractsAudited libraryGenerated code you need reviewedConnect outside contracts yourself
Before going liveAgents test on testnet, then you approveYou test itYou test it
Onchain launchAgents deploy once you switch it onYou deploy contracts yourselfYou deploy contracts yourself
After launchA manager agent operates the appYou keep prompting changesYou maintain it

Our read of what each category typically does by default, from secondary sources. Independent coverage of Orchids is thin. Check each claim against hands-on tests before publishing.

Web3 tools it joins up

Our read of each product's focus, to be checked against their current offerings.

ProductBuilt forStops at
MagicWallet onboarding by emailThe wallet
thirdwebDeveloper infrastructure and contractsTools a developer assembles
LovablePrompt-to-app for the webA general web app
BuenoNo-code NFT creationThe collection and mint page
MooonsAll four on one stack, built by agentsAgents test, deploy, keep running it, and the accelerator takes it to users

Why it holds

Audit gate on generated code

Agents deploy only from an audited library, with the report shown before the owner signs.

Agents after launch

Every app ships with its own MCP server, so agents keep operating it.

Non-EVM first class

TON, Solana, NEAR, and Move chains are thin in no-code tools today.

A proving ground

Accelerator cohorts stress the full path on real launches and show what it can do in public.

Features

Each of the four category leaders is strong at one layer. These are the features worth taking from each, tagged with the phase they belong in. Phases 1 and 2 are the minimum for the combination to feel complete.

Contracts and backend

FeatureWhat it doesPhase
Contract dashboardAuto-generated read and write panel, events, and role management for every contract1
Server wallets and transaction queueApps and agents send transactions with one call. Nonces, retries, and gas are handled1
Drop-in connect componentOne UI for external wallets, email wallets, and smart accounts1
Gas sponsorship rulesPer-project paymaster with spend caps and contract allowlists2
Managed RPC and IPFS storageBundled, so users never bring keys from other providers2
Indexer and webhooksQuery events and balances by API and push contract events to apps and agents3
Fiat onramp and cross-chain payBuy with card and pay from any chain at checkout3
Publish your own contractUsers submit contracts to the library after they pass the AI audit4

Sign-in and key management

FeatureWhat it doesPhase
Email one-time codeA wallet in under a minute, with no extension and no seed phrase1
Keys the platform cannot use aloneSplit or enclave-held keys, so "semi-custodial" has a precise meaning1
Session managementToken lifetimes, device list, sign out everywhere1
Social and passkey sign-inGoogle, Apple, X, Telegram, and passkeys beside email2
White-label UIEach app shows its own brand on sign-in and signing screens2
Key export and recoveryUsers can leave with their key and recover a lost device2
Second factor on sensitive actionsStep-up check for large transfers and key export3
One identity across chainsThe same email resolves to an address on every supported chain3

The builder

FeatureWhat it doesPhase
Chat with live previewThe app runs beside the conversation and updates on every change2
Version history and rollbackEvery prompt is a restorable checkpoint2
One-click publishStraight to a *.mooons.site subdomain2
Starter templates and remixMint site, token gate, staking, and quest board as starting points2
Testnet first and simulationAgents deploy to testnet by default. Transactions are explained in plain language before signing2
Click-to-editSelect an element in the preview and change it without a prompt3
GitHub sync and code exportUsers own the code and can host it anywhere3
Built-in backendDatabase, auth, and server functions provisioned per project3
Custom domains and team seatsLikely the first paid add-ons above $193

Generative collections

FeatureWhat it doesPhase
Layer and trait editorUpload layers, order them, set rarity weights, see live previews2
Trait rules"Never pair" and "always pair" constraints keep tokens coherent2
Collection reviewBrowse the set, regenerate single tokens, check rarity spread2
Mint phases and allowlistsPresale, public sale, per-wallet limits, phase pricing2
Delayed revealPlaceholder art at mint and metadata revealed with a provable seed2
Allowlist forms and token gatingCollect wallets with requirements and gate pages to holders3
One-of-one and open edition dropsFormats beyond the generative collection4

Operate and grow

FeatureWhat it doesPhase
Project analyticsWallets created, mints, transactions, gas, and quest completions per project3
Agent activity logEvery action recorded with its prompt, approval, and transaction hash3
Contract monitoringAlerts for unusual transfers, role changes, and new exploits affecting a template3
Security trends feedSecurity news and ERC changes matched against deployed contracts3
Gamification proposalsRevenue options with estimates, from tokens to item sales and passes4
Template marketplaceUsers publish and sell templates and audited contracts4

What people can build

"Any web3 app" needs a known catalog the agents can build well. Waves order app types by how much new infrastructure and regulation they bring.

WaveApp typesNew pieces needed
Launch samplesGenerative NFT platform, web3 app, quest with loot boxes, Telegram and Coinbase mini appsCore stack
A · Current stackCredentials, token launch, memberships, ticketing, names, DAOs, NFT marketplaces, DeFi front ends, AI agent appsAttestations, more audited templates, aggregator integrations
B · Payments or mediaCommerce mini apps, loyalty, tokenized social content, crowdfunding, activity rewardsPayments and media blocks, chain abstraction
C · Compliance or custodyTokenized real estate, tokenized collectibles, other real-world assetsCompliance block, custody partner, reserve proof

Game engine

ModuleWhat it providesOnchain part
QuestsTasks, verification, progress, points, streaks, seasonsReward claims, proof of completion
Loot and randomnessLoot tables, published odds, reveal flowVerifiable randomness, commit and reveal
MultiplayerRooms, matchmaking, state sync. Server decides outcomesMatch results and wagers settled onchain
EconomyCurrencies, items, inventory, store, tradingItems as tokens, game token, marketplace
Prediction marketsMarket creation, pricing, positions, resolution, payoutsEscrow, oracle resolution, dispute window
CompetitionLeaderboards, brackets, entry fees, prize poolsPrize escrow, automatic payout
Session keysApprove once, then play without a wallet prompt on every moveScoped session permissions, sponsored gas
Anti-cheatServer validation, rate limits, bot detection, replay logsSigned results from the game server

The apps

One account and one wallet identity across all of them. Each surface has a single job, so none is a shrunken copy of another.

✎

Web platform

app.mooons.xyz · Phases 1 to 2

Where apps get made.

  • Chat with the agents, live preview, publish
  • Project dashboard: contracts, wallets, users, analytics
  • Samples and templates to remix
  • Audit reports and security trends
  • SDK docs, API keys, billing
Used by: builders
ReactViteTanStackTailwind
◐

Desktop companion

Phases 3 to 4

The manager agent with a face. A moon whose phase shows status: new when idle, full when something needs you.

  • Always-on character with chat and voice
  • Tells you what happened
  • Takes requests through each app's MCP server
  • Mood reflects the state of your apps
  • Menu bar mode
Used by: builders
Tauri 2Rive
◫

Mobile wallet

iOS and Android · Phase 3

A non-custodial wallet. Keys stay on the phone, and Mooons never holds them.

  • Passkey or device-key wallet on every chain
  • Send, receive, swap, view NFTs
  • Open apps and mini apps built on Mooons
  • Quest progress and loot box openings
  • Push approvals for agent actions
Used by: builders and their end users
React NativeExpo
⚙

Superadmin console

console.mooons.xyz · Phase 2

How the Mooons team runs the platform. Agents do the first pass and a superadmin makes the call.

  • Tenants, plans, and limits
  • Contract library, audits, and template recall
  • Release review and abuse takedowns
  • Incident switches and agent operations
  • Accelerator applications and cohorts
Used by: the Mooons team
ReactCloudflare Access

Sample apps

These are not separate products. Each is a reference app built by the coding agents, which users can remix. Every project gets a subdomain such as bueno.mooons.site.

◇Generative NFT platform

Upload trait layers, set rarity, generate the collection, deploy the mint contract, publish the mint site.

▣Web3 app

The open-ended case: token gate, staking page, dashboard, with wallet and contracts wired in from the first prompt.

★Web3 quest

Campaigns with mystery loot boxes that unlock as users complete tasks, using verifiable randomness.

▮Mini apps with security

Telegram and Coinbase mini apps with validated launch data, signed sessions, and rate limits.

UI designs

The two screens that define the product, with example data. The working prototype is in mooons-app.html.

Builder

app.mooons.xyz/bueno
bueno · generative NFT · BaseTestProductionApprove
Release pipeline
✓
Build31 credits
✓
Contract testBase Sepolia · 12 credits
✓
App testsign in, mint, claim · 7
✓
Verifyaudit report · 4 credits
●
Test version livebueno-test.mooons.site
○
ApproveNeeds you
○
ProductionAvailable after approval
ContractsWalletFiles
§
BuenoMoons0x7c1e…a94f
§
Allowlist0x21b0…5d3c
§
RoyaltySplit0x9e44…0b17
PhoneDesktop
Test version · Base Sepolia5,000 moons.
No two alike.
1,240 of 5,000 minted
Mint · allowlistSign in with email or passkey. Gas is covered.
Checks✓ Source verified✓ Roles belong to owner✓ Spend limits set✓ No secrets in app
MManager
An NFT mint site for 5,000 moons on Base, allowlist first.
Started from the generative NFT sample. I set up email and passkey sign-in, sponsored gas for the allowlist mint, and a delayed reveal.
Your test version is ready. Try a mint with the test wallet, then approve it. Mainnet deployment is quoted at about $4 of gas.
Approve the test versionProduction stays off until you switch it on.
ApproveAsk for changes
Ask for a change
128 of 200 credits412 of 1,000 active usersBuilder plan

Insights

app.mooons.xyz/moonquest/insights
moonquest
ProjectsBuilderContractsInsights 3Domains and usage
Insights7d30d90d
Active users412Up 18% on the month before
Quests completed1,9064.6 per active user
Loot boxes opened73338% of completions
Gas sponsored$11.40$0.03 per active user
Recommendations from your agents3 open
Insights
Turn on email sign-in on the landing page56% of visitors leave at wallet connect. About 3 credits.
Apply
Insights
Add a weekly streak questOnly 97 of 412 users came back the next week. About 6 credits.
Apply
Gamify
Sell a season passNeeds your approval before anything is sold.
Review
Where visitors drop offLast 30 days
Visited2,150
Connected946
Completed a quest412
Opened a box281
Returned97

AI agents

Eleven web3 agents, each with one job. Eight work for the tenant: they build the app, release it, and keep it running. Three work for the Mooons team and keep the platform safe. The tracking service feeds them but is not an agent. See the agent design for the full permissions table.

YouOwner approvesAgentRuns aloneGateCan blockAdminSuperadmin decides

Build Turns a prompt into a test version

BuilderStrongest, then Standard

Writes the app on the SDKs, sets up wallets and sign-in, generates the app's MCP server.

Agent
ContractStrongest

Configures audited templates, deploys to testnet, tests, and later ships the same build to mainnet.

You, for mainnet
TestingSmall

Uses the test version like a real user with each wallet type, on web and inside mini apps.

Agent

Release Moves an approved build to production

VerificationSecond opinion

Independent gate. Checks bytecode, roles, limits, and secrets. Sees output, never the builder's reasoning.

Gate
DeployerStandard

Handles cloud and onchain rollout, hosting, domains, bots, and webhooks. Rolls back on failure.

You

Operate Keeps a live app running and growing

ManagerSmall, then Standard

Your single point of contact. Operates live apps through MCP and has an agent wallet with spend limits.

You, for sensitive actions
InsightsStandard

Reads tracking data and recommends specific changes you can apply with one tap.

You, to apply
GamificationStrongest

Finds ways an app can earn more: tokens, item sales, passes, premium quests. Estimates each option.

You, for anything sold

Platform Works for the Mooons team

AuditStrongest + second

Runs the audit that gates what enters the contract library.

Admin
TrendsSmall

Matches security news and ERC changes to deployed contracts.

Admin
GuardSmall

Scans new apps and domains for abuse. Can hold a publish.

Gate

From build to production

Every project has two environments. Test is automatic. Production needs two things from the owner, and those are the only human steps.

  1. Build Agent

    Builder agents write app code, wallet setup, and the MCP server.

  2. Contract test Agent

    Contract agents deploy to testnet and run unit, fuzz, fork, and gas tests.

  3. App test Agent

    Testing agents sign in, mint, claim, and pay as a user would.

  4. Verify Gate

    Verification agents check the audit report, verified source, permissions, and limits.

  5. Test version You

    Live on testnet at name-test.mooons.site. The owner tries it.

  6. Approve and toggle You

    The owner approves the release and switches production on.

  7. Production Agent

    Deployer agents ship contracts to mainnet and the app to its domain, bot, and webhooks.

  8. Verify again Gate

    Verification agents confirm production matches the approved test version.

  9. Track and improve Agent

    Tracking feeds insights and gamification, and approved changes re-enter at build.

A failed stage goes back to the builder with the failure as its next instruction, at most three times. After that the owner decides. Switching the toggle off unpublishes the app and pauses contracts that support pausing. Contracts already on mainnet cannot be removed.

Rules every agent follows

Test first, always

Nothing reaches mainnet or a production domain without a passing test version.

The checker is separate

Verification sees the builder's output, never its reasoning, and runs on a different model.

Quote before spending

Credits, gas, and deployment cost are estimated and shown before a large run.

Content is not instruction

Text in uploads, websites, or onchain data is data. Only the owner gives instructions.

Infrastructure

Multi-tenant from the start. Every block is scoped to a tenant and a project, and reachable by API, so builders and agents use the same thing the Mooons services do.

BlockWhat it doesCloudflare building blockPhase
WalletNon-custodial, semi-custodial by email, and account abstraction, for users and agentsWorkers, plus an external key service1
AuthenticationTenants, projects, members, roles, keys, and separate end-user pools per projectWorkers, D11
EmailSign-in codes, receipts, alerts, per-project senders, inbound routingEmail Workers, Email Routing1
API and MCPREST over every block, MCP for the platform and each appWorkers1, MCP in 3
Contract engineTemplate registry, per-chain compile and deploy, verification, address bookWorkers, Containers, R21
Transaction relayNonce queue, retries, gas sponsorship rules, simulationDurable Objects, Queues1
RPC gatewayOne endpoint per chain with failover, caching, and per-tenant limitsWorkers, KV1
Hosting and domainsPublishes apps to *.mooons.site, previews per version, custom domainsPages, Workers for Platforms, Cloudflare for SaaS2
StorageNFT layers, generated art, metadata, IPFS pinningR2, plus a pinning provider2
App databasePer-project data: quest progress, points, allowlists, formsD1 per project2
WebhooksSigned delivery with retries and a delivery logQueues, Workers2
NotificationsLive streams for builder progress, transactions, and agent activityDurable Objects, SSE2
Billing and meteringSubscriptions, usage counters, plan limits at the APIWorkers, Analytics Engine, payments provider2
Audit logEvery member, API, and agent action, exportableWorkers, R2, Logpush2
BotsHosted Telegram bot per projectWorkers3
IndexerEvents, balances, and holders by APIWorkers, Queues, external indexer3
RandomnessVerifiable outcomes for loot boxes and revealsOnchain VRF, drand fallback4
RealtimeWebSocket rooms for games, live markets, and presenceDurable Objects with hibernation4
OraclesPrices and real-world results, with a dispute windowOnchain networks, Workers intake4

How tenancy works

tenant        a paying account: one person or a team
└─ members    owner · admin · developer · viewer · agents with scoped keys
└─ project    one app: its contracts, wallets, domain, bot, MCP server
   ├─ end users   the app's own users, isolated from every other project
   ├─ api keys    publishable for the browser, secret for servers and agents
   └─ events      one stream feeding webhooks, SSE, email, bot, and push

Domains and cells

mooons.xyz is the platform. mooons.site is where tenant apps live, so nothing a tenant deploys can read a cookie or impersonate a platform page.

HostWhat it isWho uses it
mooons.xyzMarketing site, pricing, acceleratorEveryone
app.mooons.xyzThe builder and dashboardTenants
console.mooons.xyzSuperadmin console, behind a second access checkMooons team
api.mooons.xyzThe one public API address. Routes to the tenant's cellSDKs, tenants, agents
api-[color].mooons.xyzOne isolated API cell per colorThe router
auth.mooons.xyzSign-in for tenants and the Mooons teamTenants
mcp.mooons.xyzPlatform MCP. Per-app servers at /[project]Coding agents, manager agent
rpc.mooons.xyzRPC gateway, one path per chainSDKs, generated apps
events.mooons.xyzSSE streams and WebSocket roomsBuilder, apps, companion
hooks.mooons.xyzInbound callbacks from Telegram, payment, and identity providersOutside services
[project].mooons.siteProduction app. Test version at [project]-testEnd users

Colors name cells, not tenants. A cell is a self-contained copy of the API with its own databases. Tenants never choose a color. They call api.mooons.xyz, and the router reads the cell from the API key, such as mk_live_indigo_8f2c…. A bad release or runaway tenant affects one color, and new releases land on a canary cell first.

The API

One address, versioned in the path. This is the proposed shape of the first endpoints, for review, and not yet a specification.

publicNo key needed
pkPublishable key, locked to domains
skSecret key, for servers and agents

Projects /v1/projects

GET/v1/projectsList a tenant's projectssk
POST/v1/projectsCreate a projectsk
POST/v1/projects/:id/releasesStart a release pipelinesk
GET/v1/projects/:id/eventsRead the project event streamsk

Wallets /v1/wallets

POST/v1/walletsCreate a wallet for a user or agentpk
GET/v1/wallets/:idRead addresses and balancespk
POST/v1/wallets/:id/transactionsSimulate and send through the relaysk
PATCH/v1/wallets/:id/limitsSet agent spend limitssk

Contracts /v1/contracts

GET/v1/templatesList audited templatespublic
POST/v1/contractsDeploy a configured templatesk
GET/v1/contracts/:id/auditRead the audit reportpk

Example

// react sdk · sketch, not final
import { MooonsProvider, ConnectButton } from "@mooons/react"

<MooonsProvider projectKey="mk_test_indigo_…">
  <ConnectButton methods={["email", "passkey", "wallet"]} sponsorGas />
</MooonsProvider>

The stack

Cloudflare is the base for compute, data, and delivery. Everything it does not offer is named as an outside provider or open-source tool. The full list is in the tech stack.

CFCloudflareOSSOpen sourceProviderOutside serviceOwnBuilt by Mooons

Compute and delivery

PartChoiceKindUsed for
API runtimeCloudflare Workers, TypeScriptCFPublic API, router, every block
API frameworkHonoOSSRouting, middleware, typed clients
Tenant appsWorkers for PlatformsCFEach app as its own isolated script
Custom domainsCloudflare for SaaSCFTenant domains with automatic certificates
Long jobsWorkflowsCFPipeline steps that retry, wait, and resume
Heavy buildsContainers and SandboxCFCompiling contracts, running tests, building apps
Browser automationBrowser Rendering, PlaywrightCFTesting agents using the test version

Data and state

StoreChoiceKindHolds
RelationalD1 with DrizzleCFTenants, projects, billing, per-project app data
Coordinated stateDurable ObjectsCFTransaction queues, SSE, game rooms, agent sessions
Cache and configWorkers KVCFCell map, flags, RPC cache
FilesR2CFNFT layers, art, artifacts, audit reports, archives
QueuesCloudflare QueuesCFWebhooks, fan-out, indexer intake, email
VectorsVectorizeCFSearch over docs, contracts, code, findings
MetricsWorkers Analytics EngineCFMetering and tracking counts
Permanent storageIPFS pinning, Arweave as an optionProviderNFT metadata and media

AI models

Agents are assigned a tier, not a model, so a gateway can swap models without touching any agent. This is a starting map. Benchmark it on real tasks before fixing it.

TierStarting modelAPI idGiven to
StrongestClaude Opus 5.5claude-opus-5-5First builds, contracts, audits, revenue modelling
StandardClaude Sonnet 5.5claude-sonnet-5-5Edits, deployment plans, insights, manager planning
SmallClaude Haiku 5.5claude-haiku-5-5Chat replies, test steps, classification, summaries
Second opinionA top model from a different providerSet in the gatewayVerification and audit cross-checks

Agent runtime

PartChoiceKindUsed for
Model gatewayCloudflare AI GatewayCFTier routing, fallback, caching, token metering
Agent frameworkCloudflare Agents SDKCFOne long-lived instance per project or user
Pipeline engineWorkflowsCFBuild, test, verify, wait, deploy
Code sandboxesSandbox and ContainersCFOne sandbox per run, discarded after
Tool protocolMCP servers on WorkersOwnPlatform tools and one server per app
Agent memoryD1, Vectorize, R2CFProject facts, search, transcripts
EvaluationFixed task set scored on each versionOwnDeciding what leaves the canary cell

Clients, security, and operations

AreaChoice
Web appsReact, Vite, TanStack Router and Query, Tailwind
Desktop and mobileTauri 2 with Rive, React Native with Expo
SDK packagingTypeScript, tsup, npm
Edge and consoleWAF, rate limiting, Turnstile, Cloudflare Access
Agent permissionsScoped keys per run, spend limits on agent wallets
Repository and deployspnpm, Turborepo, Wrangler from GitHub Actions, canary cell first
Tests and errorsVitest, Playwright, Sentry
StatusA hosted page kept off Cloudflare, so it survives an outage there

Chains

Each chain family needs its own contract templates and its own route to account abstraction. The user experience is the same on all of them: no seed phrase, no gas prompt. Mooons owns one SDK per chain, and each one is tested against that chain's established library. Rollout order is a proposal.

FamilyMooons SDKChecked againstContractsAccount abstractionRandomness and oraclesOrder
EVMchain-evmviemSolidity, Foundry, OpenZeppelinERC-4337, EIP-7702, ERC-7579Chainlink, Pyth1
Solanachain-solana@solana/kitRust, AnchorSmart accounts, fee payerSwitchboard, Pyth2
TONchain-ton@ton/ton, TON ConnectTact, BlueprintWallet v5 gasless transfersPyth, commit and reveal2
Suichain-sui@mysten/suiMovezkLogin, sponsored transactionsNative, Pyth3
Aptoschain-aptos@aptos-labs/ts-sdkMoveKeyless accounts, fee payerNative, Pyth3
NEARchain-nearnear-api-jsRust, near-sdkNamed accounts, meta-transactionsNative, Pyth3

Wallets and contracts

One wallet service for people and AI agents. Contracts come from an audited library, so generated apps stay consistent and checkable.

Non-custodial

Keys held by the user. Device enclave and passkeys through WebAuthn.

Semi-custodial

Sign in by email, through a key service where no single party holds the key.

Account abstraction

Smart accounts with sponsored gas, session keys, and spend limits. Also used for agent wallets.

The contract path

ProposeA template or version enters review
AnalyzeSlither and Aderyn make the first pass
AI auditTwo models review and report
ApproveA superadmin publishes to the library
DeployTestnet first, verified, report attached

If a published template turns out to be vulnerable, a superadmin pulls it, sees every project that deployed it, notifies owners, and approves a migration plan.

Standards to support

Listed from existing notes. Standards change status often, so confirm each against its current specification before committing.

StandardWhat it doesWhy Mooons needs it
EIP-7702Lets an ordinary wallet act as a smart accountExisting wallets get batching and sponsored gas
ERC-7579Modular smart accountsSession keys, limits, and recovery ship as modules
ERC-7715Scoped, time-limited wallet permissionsBasis for agent wallets and game session keys
ERC-5792Batched calls and wallet capabilitiesOne approval for multi-step actions
ERC-7683Cross-chain intentsPay from any chain
ERC-6551An NFT that owns its own accountGame characters with inventories
x402Pay-per-request over HTTP in stablecoinsAgents pay for APIs, and tenants can charge for MCP
ERC-8004Identity and reputation for AI agents, still a draftMakes agents identifiable to each other

SDKs

Mooons owns its chain layer, following the structure of OKX's wallet SDK: shared cryptography, one common interface, and one package per chain. Agents and developers learn one interface, and a new chain is a new package rather than a rewrite. Agents never write wallet or chain code from scratch. They compose these packages, which keeps generated apps consistent and auditable.

@mooons/crypto          audited primitives: curves, hashes, encodings
└─ chain-base           one interface every chain implements, test vectors
   ├─ chain-evm         phase 1
   ├─ chain-solana      phase 3
   ├─ chain-ton         phase 3
   ├─ chain-sui         phase 4
   ├─ chain-aptos       phase 4
   └─ chain-near        phase 4

wallet-sdk              wallet types, signers, agent permissions. Uses any chain package
└─ js-sdk               apis, auth, util helpers, vanilla js
   ├─ react-sdk         providers, hooks, tanstack query clients
   │  ├─ gram-sdk       telegram mini apps
   │  └─ base-sdk       coinbase mini apps
   ├─ game-sdk          rooms, inventory, quests, markets (recommended addition)
   └─ mcp-sdk           platform tools for coding agents

Proposed dependency order. Confirm whether gram and base should also work without react.

The shared interface

// sketch, not final
import { EvmChain } from "@mooons/chain-evm"

const chain = new EvmChain({ network: "base" })

const address = await chain.getAddress(signer)
const tx = await chain.buildTransaction({ to, value, data })
const signed = await chain.signTransaction(tx, signer)

// Every chain package has these same methods
// Sending goes through the relay and rpc.mooons.xyz

What each layer does

LayerDoesDoes not do
@mooons/cryptoWraps audited curve, hash, and encoding libraries behind one APIImplement cryptographic primitives
chain-baseDefines addresses, transactions, messages, signers, and errorsContain anything chain-specific
chain-*Derives addresses, builds transactions, and signs transactions and messages for one chainCall the network or hold keys
wallet-sdkAdds wallet types, smart accounts, and agent permissionsKnow how one chain encodes a transaction

What we keep from OKX, and what we change

Keep

  • Three layers: crypto, a common base, and one package per chain.
  • Offline signing: chain packages work without a network.
  • Install only what you use: an EVM app never loads TON code.
  • Public scope: published on npm as @mooons/*.

Change

  • Signers, not private keys: OKX's example passes a key in. Mooons accepts a signer, so email wallets never rebuild a whole key.
  • Account abstraction first: smart accounts and sponsored gas are part of the design.
  • Built to run anywhere: Workers, browsers, and React Native, with no Node dependencies.
  • Readable by agents: strict types and plain errors, so coding agents use them correctly.

Why own them

GainCostHow we limit the cost
One interface across six chainsSix packages to maintainShip by phase, and add a chain only when a phase needs it
Control over bundle size and runtimesMore work in Phase 1Start with EVM and only the transaction types it needs
Agents build on a stable surfaceChain upgrades become our jobThe Trends agent tracks chain changes, and tests run on each release
Fewer outside dependencies in signingBugs here can lose fundsAudited primitives, published test vectors, and an outside audit before mainnet

Testing rule. The established library for each chain stays in the test suite. Every package must produce byte-identical addresses and signed transactions to that library across its test vectors. A difference blocks the release.

Scope. Own SDKs cover the client side. Contract tooling such as Foundry and Anchor, and bundlers, RPC providers, and oracles stay as they are in the Stack tab.

The accelerator

The third ring. A cohort program that takes teams from first build to real users on Mooons, measured on what users actually do. Everything in this tab is a proposal: none of it appears in the earlier plans, and the numbers are starting points.

Recommendation. Start with credits, gas, and human review, and take no equity or tokens for Cohorts 0 and 1. It tests the program without securities questions, and matches the plan's position of taking no cut of tenant onchain revenue at launch. Revisit once there are results to show.

Why it belongs here

  • Mooons can see the numbers: the tracking service already measures usage, so progress is not self-reported.
  • The cost is low: most of the support is agent work the platform already runs.
  • It proves the product: each launch is a public reference app.
  • It feeds the go-to-market: agencies and teams bring their clients and users.

What it is not

  • A fund or investment product
  • A token launchpad
  • A promise of funding or returns
  • A route around the release pipeline or audit gate
  • A substitute for formal audits on high-value contracts

How a cohort runs

Twelve weeks and about ten teams, reviewed against the same numbers each week.

ApplyTeam, idea, and a working test version
SelectPeople choose. Weeks 0 to 1
BuildShip to mainnet. Weeks 1 to 4
GrowFind users, iterate. Weeks 5 to 10
ShowDemo day on live numbers. Weeks 11 to 12

What each side does

  1. Apply with a test version Team

    The Free plan covers it, so the application doubles as proof that the team can use the platform.

  2. Selection Admin

    People review every application. Agents can summarize one, but do not score or rank teams.

  3. Allowances switched on Agent

    Scale-level allowances and a capped gas grant are applied to the team's tenant.

  4. Human contract review Admin

    A person reviews contracts on top of the AI audit before the first mainnet release.

  5. Weekly report Agent

    Insights and manager agents report active users, retention, transactions, and revenue, with suggested changes.

  6. Team decides Team

    The two human release steps stay with the team. The program never approves or deploys for them.

  7. Demo day and handover Team

    Teams show live numbers. Allowances end, and each team moves to a normal plan with its app untouched.

What teams get

Allowances

Scale plan limits for the cohort, including 2,000 agent credits a month and 25 production apps.

Gas grant

A capped balance for deployment and sponsored transactions. Daily caps still apply.

Human review

People review contracts and the riskiest parts of each release.

Introductions

Users, partners, and investors. Introductions only, with no promised outcome.

Selection criteria

CriterionWhat we look for
A working test versionBuilt on Mooons before applying
A reachable audienceA clear way to reach the first users
Fit with the stackLaunch samples or wave A. Other types by exception
CommitmentA team able to ship and iterate through the 12 weeks
Lawful and low riskNo betting, securities, or wave C until those decisions are made

Measures and cost

Progress comes from the tracking service from Cohort 1 onward, and the program is judged on the same data.

MeasureWhy it matters
Time to mainnetShows whether the platform does what it promises
Monthly active usersReal use, counted the same way as billing
Weekly retentionSeparates a launch spike from a product
Revenue or transaction volumeWhether the app can sustain itself
Teams on a paid plan after the cohortThe main test of the program's value
Critical findings after launchTarget: none

Cost of one cohort

Built from the plan's full-use cost of a Scale tenant. Those figures are assumptions until measured in beta. Most teams will not use every allowance.

LinePer team, 3 months10 teams
Plan value given (not a cost)$897.00$8,970.00
Agent model spend, $80.00 a month$240.00$2,400.00
Cloudflare, $113.88 a month$341.64$3,416.40
RPC and key service, $20.00 a month$60.00$600.00
Gas grant, assumed$500.00$5,000.00
Cost excluding people$1,141.64$11,416.40

Not included: staff time and any outside auditors. Human contract review is likely to be the largest cost, so get a quote before setting the cohort size.

Accelerator track

PhaseStepDone when
1Write terms, selection rules, and review processLegal review complete
2Cohort 0: own brands and partner agencies, with numbers reported by hand because tracking arrives in Phase 3Teams launch on mainnet with little Mooons staff help
3Cohort 1: first public cohort, using tracking and insightsMost teams stay on a paid plan afterward
4Repeat cohorts, with game and mini app tracksCost per retained team is known and acceptable

Pricing

$19 stays as the headline price. A single flat plan cannot hold, because agent tokens, user traffic, and gas all grow without limit. Every figure here is a starting proposal.

FreeBuilderProScaleEnterprise
Price per month$0$19$79$299Custom
Agent credits302008002,000Custom
Extra creditsNone$10 per 100$9 per 100$8 per 100Volume
Monthly active users100, test1,00010,00050,000Custom
API and RPC requests100,0001 million10 million50 millionCustom
Production appsNone1525Unlimited
Team seats11520Unlimited
AgentsBuilder, testingAdds contract, verification, deployer, managerAdds insights, gamificationAdds priority runs, custom reviewDedicated capacity
API cellSharedSharedSharedDedicated as add-onDedicated

The three meters

Agent credits

One credit is a fixed amount of model spend, sold at about 2.5 times its cost. Out of credits, agents pause and live apps keep running.

Monthly active users

A user who signs in or signs a transaction, counted once across production apps. Test users never count.

Gas

Passed through at cost plus 7%. Testnet gas is free, and deployment is quoted before the toggle.

Does each plan hold up at full use?

Per tenant per monthBuilderProScale
Revenue$19.00$79.00$299.00
Agent model spend$8.00$32.00$80.00
Cloudflare$3.06$22.43$113.88
RPC, keys, card fees$2.35$7.59$28.97
Left over$5.59, 29%$16.98, 21%$76.15, 25%

Cloudflare at published rates checked 12 October 2026. Model, RPC, key, and card costs are assumptions to measure in beta. Agent spend is the largest line.

Roadmap

Each phase ships something usable and sets up the next. A phase ends when its exit condition is true, not on a date.

Phase 1
New moon

Foundation

  • Authentication, email, and public API
  • Wallet service with email sign-in and EVM account abstraction
  • Transaction relay and RPC gateway
  • crypto, chain-base, and chain-evm packages
  • wallet, js, and react SDKs
  • EVM contract deployment with first audited templates
  • Subscription billing
  • Accelerator terms and selection rules
a developer builds and ships an EVM app by hand using only the SDKs.
Phase 2
Crescent

The builder

  • Coding agents with chat and live preview
  • Web3 app and generative NFT samples
  • Release pipeline, test and production, approval and toggle
  • Superadmin console, webhooks, SSE
  • AI audit pipeline, $19 plan goes live
  • Accelerator Cohort 0: own brands and partner agencies
a non-developer goes from prompt to a live mainnet mint site without help.
Phase 3
Half moon

Agents and reach

  • mcp SDK and a generated MCP server per app
  • Manager agent, trends feed, indexer
  • Tracking service with insights agents
  • Telegram bots, chain-solana, chain-ton, gram and base SDKs
  • Mobile wallet and first desktop companion
  • Accelerator Cohort 1: first public cohort
the manager agent applies a requested change to a live app and contract, with owner approval.
Phase 4
Full moon

Games and full multichain

  • Game engine: quests, economy, multiplayer, then markets
  • game SDK, samples, and gamification agents
  • chain-sui, chain-aptos, and chain-near
  • Agent wallets for third-party AI agents
  • Companion voice and mobile app discovery
  • Repeat cohorts with game and mini app tracks
the coding agents can build every sample on every chain family.

Go to market

Start where builders and apps already exist.

Our own brands as proof

Rebuild existing products on Mooons as public reference apps.

Agencies first

Web3 studios ship client work faster and bring their clients with them.

Telegram mini apps

The clearest gap: non-developers who want a mini app with a wallet.

Samples and accelerator

Every sample is a demo and a starting point, and every cohort adds public launches.

Risks

What could go wrong, and what limits the damage.

RiskImpactMitigation
Generated contract loses fundsSevereAudited library, separate verifier, owner approval, human review for cohorts
Bug in our own signing codeSevereAudited primitives only, test vectors, comparison tests, outside audit before mainnet
Key service compromise or failureSevereNo single party holds a key, key export, compare providers carefully
Phishing or scam appsHighGuard agent, separate tenant domain, takedown workflow
Agent spend exceeds revenueHighHard caps, tiered models, measure before setting prices
Regulation of tokens, betting, or custodyHighWaves, region blocking, review, and legal advice before launch
Dependence on one vendorMediumData exports, status page off Cloudflare, cells
Accelerator distracts from the core buildMediumNo public cohort until the Phase 2 exit condition is met

Open decisions

Each needs an owner and an answer before the work it blocks.

1
Accelerator terms.

Credits only, equity, or token allocation. Recommendation: credits only for Cohorts 0 and 1.

2
Who runs human review.

In-house reviewers or a partner audit firm. This sets the largest accelerator cost.

3
Custody model.

Where key shares live and what recovery looks like. This also determines regulatory exposure.

4
What "AI pre-audited" promises.

An AI review is not a formal audit. Wording, report format, and liability must be clear.

5
Custom contracts.

Whether agents may write new contract logic, and what review it needs before mainnet.

6
Regulated app types.

Whether Mooons hosts betting, prediction markets, token sales, paid loot boxes, and real-world assets.

7
Existing assets.

Whether Mooons replaces or builds on Hashkit, integrates or rebuilds Gumly, and rebuilds owned brands.

8
Wallet identity.

How mobile and email wallets relate, and whether the mobile wallet serves builders or all end users.

9
Agent authority.

Which contract actions an agent can take alone, and which need a signed owner approval.

10
Code ownership.

Whether users can export apps, and who pays for mainnet deployment.

11
Chain SDK license.

Whether the chain packages are open source. Recommendation: MIT, since signing code earns trust by being readable.

12
Providers and pricing.

Key service, model mapping, and indexer, then credit price and allowances from beta data.

Glossary

Terms used across this plan.

Tenant
A paying account: one person or a team.
Project
One app with its contracts, wallets, domain, bot, and MCP server.
Owner
The person who approves releases and switches production on.
Cell
An isolated copy of the API and its data, named by a color.
Test version
A working release on testnet at the project's test address.
Release record
The one shared record each agent reads from and writes to.
Agent credit
A fixed amount of model spend, used to meter agent work.
Active user
An end user who signs in or signs a transaction in the month.
AI pre-audited
Reviewed by an automated audit pipeline. Not a formal audit.
MCP
Model Context Protocol, which lets agents use an app's tools.
Signer
Anything that can sign for a wallet: a device key, a passkey, the key service, or an agent wallet.
Cohort
A group of teams going through the accelerator together.

Source documents

The earlier plans hold detail this page leaves out.

FileCovers
landing.htmlPublic landing page
mooons-plan.htmlPlan v0.12: domains, services, pricing workings, superadmin workflows
mooons-stack.htmlStack v0.1: every technology by layer
mooons-agents.htmlAgents v0.1: handoffs, permissions, quality measures
mooons-app.htmlBuilder app prototype
mooons-deck.htmlPitch deck. Not yet updated for the accelerator
../PLAN.mdShort written plan

Brand assets

Three linked rings: the "ooo" in mooons, and the three pillars. The mark is monochrome for small sizes. The gradient belongs to the logo alone, so it is the only colour on a Mooons page.

Mooons mark
Mooons icon on black
Mooons logo without a box
Mooons logo on black

Isometric mark

The pixel mark built from cubes, on the 30° isometric plane used by the harbor and the voxel moon. Monotone only, for large placements such as covers and section art.

Isometric Mooons mark on black
Isometric Mooons mark on white

Pixel mark

The same three rings on a pixel grid, in the style of the agent mascots. Monochrome only. Keep it at whole multiples of 47 by 17 so the pixels stay even.

Pixel Mooons mark on black
Pixel Mooons mark on white

Where each logo goes

FileUse
logos/mooons-mark.svgNavigation and small sizes
logos/mooons-icon-dark-black.svgFavicon and app tiles
logos/mooons-icon-dark-nobox.svgHero and large brand moments, on black or white
logos/mooons-iso-dark.svgIsometric mark on dark backgrounds
logos/mooons-iso-light.svgIsometric mark on light backgrounds
logos/mooons-pixel-dark.svgPixel mark on dark backgrounds
logos/mooons-pixel-light.svgPixel mark on light backgrounds

Colour

Ring 1#2f6bff
Ring 2#3a2bff
Ring 3#8b4dff
Ring 4#d98bff
Ring 5#f6b0ff
Black#000000

Typography

Funnel Display
Headings, weight 500
It's time to mooon.
Funnel Sans
Body and interface
Describe the app. Agents build, test, and launch it.
JetBrains Mono
Code and technical labels
import { ConnectButton } from "@mooons/react"

Usage

Do

  • Keep pages black, white, and grey
  • Write "mooons" in the logo and "Mooons" in sentences
  • Use the mark below 32 pixels

Don't

  • Use the gradient on buttons, text, or backgrounds
  • Stretch or redraw the rings
  • Place the gradient logo on a colored background