MPC Wallets production usage guide

1. Set up your account and organization
2. Create vaults and wallets
3. Make deposits and withdrawals

​

Prerequisites

• Contact our sales team to acquire your account activation link.
• An iOS device to run Cobo Guard, our dedicated app for multi-factor authentication (MFA), operation approval, transaction signing, and key share management.

​

Set up accounts and organization

​

Create an account

​

Set up Cobo Guard

1. Log in to Cobo Portal.
   • For testing purposes, use the development environment.
   • For production, use the production environment.
2. Click Guide at the bottom left, and click Set up Cobo Guard.
3. Follow the instructions on the screen to install Cobo Guard on your iOS device and link your account with your Cobo Guard.

​

Configure governance policies and user roles

Set up governance policies and user roles

Configuring governance policies and user roles is essential for managing access control and security in your organization.

• Governance policies define approval rules for key operations (such as member deletion, organization freezing, and API key management), using mechanisms such as auto-approval, auto-rejection, and approval quorum. You can edit governance policies if the default ones don’t align with your organizational needs.
• User roles enable you to assign specific permissions to designated members within your organization. When you assign a role to a member, they can only perform actions allowed by that role. For instance, a member with the Viewer role can see wallet information but cannot withdraw tokens.

As an example, you could set up a governance policy requiring approval from at least two members with either Admin or Manager roles before deleting a member, as illustrated in the screenshot below.

​

Invite members

1. Log in to Cobo Portal.
   • For testing purposes, use the development environment.
   • For production, use the production environment.
2. Click the profile icon at the bottom left, and then click Organization.
3. Click Members. On the Members page, click Invite Members.
4. Enter the member’s email address and name, and then select appropriate user roles.
   Confirm on Cobo Guard that this invitation was initiated by you. Also, as a default governance policy, at least half of your organization admins must approve the invitation request on Cobo Guard.

​

Add chains

1. Log in to Cobo Portal.
   • For testing purposes, use the development environment.
   • For production, use the production environment.
2. Click the profile icon at the bottom left, and then click Pricing Plans.
3. Navigate to Supported Chains and click the Chain Management icon.

4. On the Chain Management page, review the list of available chains. If the chains you need are not present, click Add Chains to include additional chains for your organization’s use.

​

Set up an MPC vault

​

Create a Main Key

1. Log in to Cobo Portal.
   • For testing purposes, use the development environment.
   • For production, use the production environment.
2. Click > MPC Wallets.
3. Click Create Main Key.
4. In the Create Main Key dialog box, configure Key Share Holder 2. For detailed information about signer types and their setup, see Signer Type.
   • To use a mobile signer, select a holder from the pull-down list. The TSS Node ID field will be filled in automatically. Click Confirm.
     For quick testing, you can select yourself as a holder. However, for production use, refer to our Security best practices for guidance on selecting appropriate holders.
   • To use a server signer, enter a holder name, fill in the TSS Node ID, and then click Confirm.
5. Confirm in your Cobo Guard app that you initiated this request.

​

Generate key shares

• For mobile signers:
  • Wait for the 1 key share needs to be generated banner to appear on Cobo Guard (this may take a few seconds).
  • Tap the banner to open the key generation interface.
  • Follow the on-screen instructions to complete the key share generation process.
  • We recommend backing up your key shares at this point for added security. However, you can also choose to complete this step later after finishing the guide.
• For server signers:
  • Ensure the TSS Node server is brought online within 24 hours. The key share generation process initiates automatically when the server comes online.
  • If a TSS Node callback server is configured, the generation process will only start after approval from the callback server.

​

Create a wallet and transfer tokens

​

Create a wallet

1. Log in to Cobo Portal.
   • For testing purposes, use the development environment.
   • For production, use the production environment.
2. Click > MPC Wallets.
3. Click Create Wallet. In the dialog box:
   • Enter a unique name for your wallet.
   • If you need to automatically consolidate funds from multiple addresses, enable auto token sweeping. If you’re unsure, you can leave it disabled for now and enable it later if needed.
4. Click Create.
5. From the wallet list, select your newly created wallet to view its details.

​

Make a deposit

1. Navigate to the Addresses tab, and then click Add Address.
2. Select a network, and then click Create.
3. Navigate to the address you just created and click to display the address.
4. Proceed to your preferred external wallet to initiate the transfer to the deposit address.

​

Configure transaction policies

Configure transaction policies

Transaction policies are essential measures to secure your digital asset operations. When a transaction starts, it’s checked against your organization’s transaction policies in sequential order. If it matches a policy’s trigger condition, the specified action will be taken: auto-approve, auto-reject, or an approval quorum process.In this guide, we’ll create a policy that requires 2-of-3 Admin approval for large USDT withdrawals to non-trusted addresses. For other policy setups and advanced configurations, see Set up token transfer policy.

​

Prerequisites

You have at least three members with the Admin role in your organization.

​

Configure an address list

First, set up a list of trusted addresses for withdrawals:

1. Log in to Cobo Portal.
   • For testing, use the development environment.
   • For production, use the production environment.
2. Click > Transaction Policies.
3. Navigate to the Address Lists tab and click Create List.

4. Enter a name for your address list, then click Confirm.
5. Click your newly created address list, click Add Address, then enter your trusted addresses.
6. Click Submit and complete MFA.

For more details on managing address lists, including batch uploads, see Address list.

​

Create the transaction policy

Now, let’s create a policy with the following security rules:

• Trigger: Withdrawals over 30,000,000 USDT to non-trusted addresses
• Action: Require approval from 2 out of 3 approvers with the Admin user role.

Follow these steps:

1. In Cobo Portal, go to > Transaction Policies.
2. Click Create Policy > Token Transfer.
3. Configure the settings as shown in the screenshot:

4. Click Next and follow the on-screen instructions to complete the policy setup.

Your policy is now active and will require 2-of-3 approval for any USDT withdrawal over 30,000,000 to non-trusted addresses.

​

Make a withdrawal

1. Log in to Cobo Portal.
   • For testing purposes, use the development environment.
   • For production, use the production environment.
2. Click in the main menu on the left hand side.

3. In the Transfer dialog box, fill in the required information, and then click Submit.
4. Double confirm the withdrawal on Cobo Guard.
5. After the withdrawal is confirmed, the transaction will be sent to signes. The transaction will remain pending until it receives the necessary signature.
   • For mobile signers, notify them to open their Cobo Guard to sign the transaction.
   • For server signers, you can check if they are online through Cobo Portal:
     1. Log in to Cobo Portal.
     2. Click > MPC Wallets.
     3. Select your vault and then click the Manage Share Management icon on the upper right hand corner.
     4. On the Key Share Management page, check if there is a green dot on the avatar of the server signer:
        • 🟢 Green dot: The server is online and ready to sign transactions
        • No dot: The server is offline and cannot sign transactions.
   After the transaction is signed, Cobo creates and broadcasts it to the network. The token transfer may take some time to complete, depending on network conditions.

​

View transaction details and status

After making a transfer to or from your Asset Wallets, you can view its transaction status in > Transaction History.

​

Integrate using the WaaS API

1. Start with Sending your first request. This guide covers API key registration, authentication, and SDK usage.
2. Proceed to Integrate MPC Wallets (Organization-Controlled) for detailed instructions on creating wallets and managing token transactions.

​

What’s next

​

Implement security best practices

• Back up your key shares
• Create at least one Signing Key and one Recovery Key in addition to the Main Key.

​

Explore more features

• Enable auto token sweeping: Automatically consolidate funds from multiple addresses into a single designated address.
• Enable fee station: Your all-in-one solution for managing bills and transaction fees.

​

Learn more

• Visit official website
• Read product manuals