---
title: "who holds the keys to a river's account"
canonical_url: https://ensurance.app/guide/who-holds-the-keys-to-a-rivers-account
markdown_url: https://ensurance.app/guide/who-holds-the-keys-to-a-rivers-account.md
subtitle: "the institution never pools the balance with its own money. whoever holds an account's token holds the key, and people and AI work under them"
category: onchain
---

# who holds the keys to a river's account

*the institution never pools the balance with its own money. whoever holds an account's token holds the key, and people and AI work under them*

A bank's first job is to hold your money. Once you deposit it, the cash is the bank's, and what you own is a claim the bank owes you. The institution in this series does the reverse. The balance is never pooled with its own money. It sits in the account's own wallet, and whoever holds the account's token holds the key.

The Colorado River carried water long before anyone kept books, and the river, the species in it and the people along it exist whether or not anyone opens an account for them. [**Ensurance**](/?from=guide) is one way money can reach them. It is not what they are.

**What is self-custody?** Self-custody means whoever holds an account's key controls the money in it directly, with no bank or company holding it for them. On ensurance, a river's account is a wallet bound to a token. Whoever holds that token holds the key, and the money sits in the river's own wallet.

:::johnson
**the river does not hold a key. someone has to, in its name.**

The account belongs to the place. The token that controls it sits in a keeper's wallet, and the keeper signs in the place's name, in public.

[see what AI agents can do under an account's mandate →](/solutions/ai-agents?from=guide&topic=natures-balance-sheet)
:::

## what a bank holds, and what this holds

| | a bank account | a river's account here |
|---|---|---|
| where the money sits | on the bank's balance sheet, as a deposit it owes you | in the account's own wallet, on Base, a public blockchain network |
| who controls it | the bank, under your instructions | whoever holds the account's token |
| who can reverse a mistake | the bank, under its rules | nobody, once a transaction settles |
| insured | deposits at insured US banks, to at least $250,000 per depositor per ownership category | no |
| balances lent out | yes; lending is how most banks earn | no; the account may place its own USDC in allowlisted venues (below) |

That is the plain meaning of **self-custody** here. The balance is never pooled with the institution's own money, and control follows the token, not the institution. Ensurance is not a bank: no charter, no deposits, no interest, no deposit insurance.

## the token is the key

Every account here starts as an agent NFT in a group, such as `.basin` for watersheds. Its wallet is a **tokenbound account**: an address computed from the token's contract, its ID and the chain ([what a tokenbound account is](/guide/what-a-tokenbound-account-is?from=guide)). Hold the token and you control the wallet. Transfer the token and control goes with it, along with everything the wallet holds at that moment.

Computing an address and deploying the wallet behind it are two separate steps, and most accounts have only taken the first.

:::stat
2,095 | accounts the protocol counts, 14 November 2026
86 | accounts the public catalog marks with a wallet deployed, of 2,085 it lists
:::

The deployed figure is the same 86 of 2,085 that [can an animal have a bank account](/guide/can-an-animal-have-a-bank-account?from=guide) published from 12 October, so the count did not move in a month. The catalog marks a wallet when the app deploys it; one deployed outside the app may not be counted.

Whoever holds an account's token holds its key. A river cannot sign, so a person or organization keeps the account in its name, and people and AI can work for it under its mandate. Early in the build, most accounts are kept by the people who set them up. More keepers closer to each place is the aim.

## one river's keys

[`colorado-river.basin`](/colorado-river.basin?from=guide) is the account for the whole Colorado River basin. Its wallet is deployed. Its token, number 567 in the `.basin` group, is held in an operator wallet, which keeps the account in the river's name. The chain records addresses, not names, and anyone can read what the account holds and what it has done.

The account runs with its **autonomous** setting on. What it holds and what has moved through it is the subject of [what a river does with an account](/guide/what-a-river-does-with-an-account?from=guide).

The account does not own the river. Its mandate says it should "never substitute for treaty rights or compact law." The key opens a wallet, not a watershed.

## who works the counter

An account here has whoever its keeper lets in: a person in the app, a program the keeper approved, or an AI model reading the account's mandate. They are first-class operators. None holds a key of its own, and a model has no signing power, ownership or personhood of its own.

The settings, not the software, decide who acts ([autonomous is a setting, not a personality](/guide/autonomous-is-a-setting-not-a-personality?from=guide) covers them in full):

| setting | who starts a move | what a person did first |
|---|---|---|
| manual | a person, in the app or in chat | confirms each card, unless they switched that off |
| automated | a program on a schedule | approved that one program |
| autonomous | the account's model, reading its mandate | turned it on and granted permission |

For the second and third settings, the keeper grants the app permission to act for the account, and can take that permission back.

## does it lend out the balance?

**Ensurance does not lend out account balances.** What an account can do is place its own USDC, a dollar stablecoin, in allowlisted venues on Base, through the app, under the account's setting. Those venues do lend to borrowers, and the risk is theirs and the depositor's. Through the app, an address that is not on the list cannot be deposited to, and changing the list is a code change a person reviews. A keeper signing from their own wallet outside the app is not bound by the list.

Every such deposit traces to a person: the keeper confirms the move, or approves ahead of time the program that makes it. The account's model cannot choose a venue, start a deposit or create a program. We quote no rate, because the rate is the venue's and it moves. [The account proposes. You confirm.](/guide/the-account-proposes-you-confirm?from=guide) walks through the card.

## what self-custody costs

Self-custody moves the risks a bank absorbs onto the keeper.

**No reset.** If a keeper's external wallet key is lost, nobody can move what the account holds, ensurance included. An embedded wallet has its provider's recovery, which is a different trust.

**Control travels with the token.** Sell or send the token and the new holder controls the account and everything in it. The mandate does not bind them; it is text the account carries, not a fiduciary duty a court enforces.

**A wallet that can pay is a target.** [Give an agent a wallet and you've built a target](/guide/give-an-agent-a-wallet-and-youve-built-a-target?from=guide) covers the defences.

## frequently asked questions

### what is self-custody?

Self-custody means the person who holds an account's key controls its money directly, with no bank or company holding it for them. On ensurance, the account's token is the key, and whoever holds the token controls the account's wallet.

### who holds the keys to a river's account?

Whoever holds its token. A river cannot sign, so a person or organization keeps the account in its name. The token for `colorado-river.basin` is held in an operator wallet, which keeps the account in the river's name.

### can ensurance move money out of a river's account?

Only when the account's keeper has granted the app permission to act for it, and the keeper can take that permission back. Without it, the app cannot move anything.

### does ensurance lend out account balances?

No. An account may place its own USDC in allowlisted venues through the app, which lend to borrowers, and a person confirms each deposit or approves the program that makes it.

See how AI agents work under an account's mandate: [ensurance for AI agents](/solutions/ai-agents?from=guide&topic=natures-balance-sheet). Or [explore the accounts](/explore?from=guide).

## sources

[ERC-6551, Non-fungible Token Bound Accounts](https://eips.ethereum.org/EIPS/eip-6551) — The standard that assigns an account to an NFT

[FDIC, Understanding deposit insurance](https://www.fdic.gov/resources/deposit-insurance/understanding-deposit-insurance) — Deposits insured to at least $250,000 per depositor, per ownership category, at each FDIC-insured bank

[ensurance protocol stats](https://ensurance.app/api/protocol/stats) — 2,095 accounts, read 14 November 2026

[ensurance account catalog](https://ensurance.app/api/accounts) — 2,085 listed, 86 marked with a wallet deployed, read 14 November 2026

Allowlisted venues and signing rules: the app's code, read 14 November 2026.

## the series

1. [nature's balance sheet](/guide/natures-balance-sheet?from=guide) — **Read first:** Everyone wants to put nature on the balance sheet. A new kind of institution gives nature its own, and does a bank's work on two sides
2. [nature is the customer](/guide/nature-is-the-customer?from=guide) — Millions of rivers, species and places could hold an account. A few thousand do
3. [what a river does with an account](/guide/what-a-river-does-with-an-account?from=guide) — Personhood gives a river standing. An account gives it a ledger. Here is one, read live
4. [financing nature and the people who depend on it](/guide/financing-nature-and-the-people-who-depend-on-it?from=guide) — A bank lends. This side of the institution funds a place from what moves through it
5. [who holds the keys to a river's account](/guide/who-holds-the-keys-to-a-rivers-account?from=guide) — The institution never pools the balance with its own money. Whoever holds an account's token holds the key, and people and AI work under them