# Safety

> Operational guidance for agents wired into blockchain infrastructure. Read APIs by default, no transaction signing, and a human confirmation for anything that changes state.

- canonical: <https://ai.tatum.io/safety>
- html: <https://ai.tatum.io/safety>

## Defaults

- Query before you act. Use inspect tools before anything that moves funds or changes state.
- Check the address format. The wrong chain usually returns empty data, not an error.
- Prefer webhooks to polling. Subscribe to events instead of calling RPC or REST in a loop.
- Limit retries. A 429 is a signal to wait, not to try harder.
- Private keys and API keys stay in the environment and never enter the model context.

## Boundaries

**No transaction signing** - These pages document read APIs and gateway access. Transaction signing belongs in your wallet, KMS, or signer.

**Human in the loop** - Deleting webhooks, rotating keys, and gateway writes all need human confirmation.

**Per-chain validation** - EVM, Bitcoin, Solana, Cardano, and others have incompatible address formats. Always check the chain prefix.

## References

- Auth guide: <https://ai.tatum.io/auth>
- MCP page: <https://ai.tatum.io/mcp>
- Workflows: <https://ai.tatum.io/workflows>