Agent Permissions#

An agent permission is what bounds everything Ava does in Auto — the set of limits you sign, which the wallet enforces on-chain. It applies to whichever wallet runs Auto: your own wallet after a one-time upgrade, or a separate Ava smart wallet you fund (see Smart Wallets). You sign the permission once from your main wallet, and you see and change it in Ava Studio, in the Agent permissions window.

It covers both kinds of Auto work: one-off actions you ask for in chat (supply to Aave, swap on Uniswap, send USDC — you still tap Confirm), and standing jobs that run on a schedule without a prompt (health-factor protection, weekly pay, weekly swap, token claims). Revoking a permission stops every job and action that used it.

Where to find it#

In Ava Studio, open Wallets (/wallets), find the wallet Auto runs on — your upgraded wallet or your Ava smart wallet — and choose Edit permissions. For an Ava smart wallet, the Deposit and Withdraw buttons are on the same card.

What the window shows#

One section per capability — Send tokens, Trade on Uniswap V3, Aave V3, Claim — each with:

• A plain-English summary — "Ava is authorized to … on Base".
• The allowed contracts, by name and address, each linked to a block explorer. Individual functions aren't listed.
• The total spending limit per token — shown as spent / total when there's one token.
• The expiry date.
• Enable or Disable, per chain.

What a permission covers#

Most capabilities are scoped to an app's contracts, not to individual functions:

• Aave V3 covers supply, withdraw, borrow, repay and collateral settings on the Aave V3 pool. Ava won't borrow unless you ask — that's how Ava behaves, not something the permission blocks.
• Send tokens isn't tied to a recipient on-chain. The recipient is set in the job or the request you confirm; the permission only limits how much can be sent.
• Claim is narrower: a verified claim contract and its claim function, for token claims.

The total spending limit is a running total over the permission's life — it doesn't refill. Every permission has an expiry: 1 day, 7 days, 30 days (the default) or a date you pick. Each permission is for one chain.

What Ava can do in Auto is bounded by the allowed contracts, the spending limit and the expiry — and, with a separate Ava smart wallet, also by what you've funded into it. Spending limits cap what Ava is authorized to spend. They don't cap losses on your DeFi positions.

Changing a permission#

Each change is a new signature from your main wallet — a signature, not a transaction, so it costs no gas. You get one usable permission per capability on each wallet and chain, and Studio combines the capabilities you enable into one shared permission. Raising a limit, adding a capability or extending the expiry all mean signing again. Ava can't widen its own permission; only your main wallet's signature installs one.

Chat can't change or revoke a permission — Ava points you to this window.

Disabling a permission#

Choose Disable. Ava stops using the permission right away — every standing job and one-off action that used it stops. Studio then asks your main wallet to send an on-chain removal transaction — a normal transaction, so you pay gas. If that fails, or the permission is on another chain, a Finish on-chain removal button appears. Until the removal lands on-chain (or the permission expires), the permission stays installed on the wallet.

To stop just one job and keep the permission, pause it on Running instead. On an upgraded wallet, undoing the upgrade stops Auto on that network. It doesn't erase the permissions stored on your wallet, so if you might upgrade again, disable them and finish their on-chain removal first. See Revoking Access for the step-by-step.

Verifying on-chain#

The limits aren't just an app setting. The wallet itself enforces them on-chain: a call outside what the permission allows, spending past the total limit, or any use after expiry is refused by the chain, not just by Ava. Ava never gets full control of your wallet. Each allowed contract links to a block explorer, so you can check exactly which contracts Ava may call.

Trust nothing, verify everything — the window is for ergonomics, the chain is the truth.