Delegation Desk

Small, specific jobs for a helper account. The key that controls everything stays offline.

Play money. Delegation is enabled. The PaymentBurn fix is not.

TestnetPlay money. Delegation is enabled. The PaymentBurn fix is not.

Security

Delegation Desk is a static site. It reads the public XRP Ledger and asks a wallet to sign. There is no account system and no database.

What this app never touches

  • A Mainnet secret. Pasting a seed is refused, and switching to Mainnet forgets any test key still in the tab.
  • An API secret for Xaman. Only a public API key, if you set one at build time, is included.
  • Custody of funds. The built-in wallet exists for Testnet and Devnet, and its seed stays in memory.
  • A server that can move your account. The optional relay accepts an already-signed revoke blob and nothing else.

Threat model

  • A helper can do everything you granted, with no amount cap. Revoke is the control.
  • A pre-signed revoke file can remove one helper. Anyone who has the file can submit it. It cannot spend.
  • A malicious page in this tab could read a Testnet seed from memory. Do not use this site for a Mainnet seed. Sign Mainnet transactions in Xaman, Crossmark, or GemWallet.
  • Multisig bundles in a link contain partial signatures, not seeds. Treat the link like a capability to finish that one transaction.
  • The dry run uses the public simulate method. It does not submit.

How to report a bug

Open an issue on the repository that hosts this code. Describe what you expected and the transaction hash if one exists. Do not include a seed, a family secret, or a keypair.