Merlin Guild

Self-hosted Solana toolkit by Merlin Guild

Manage thousands of wallets, execute bundled trades with MEV protection, and mix SOL locally. No per-transaction fees. Your keys never leave your local vault.

View licensesExplore documentation

One-time purchase, lifetime access

Every membership plan includes all modules and services. Pay once and keep the app.

Basic

$199

A solid entry point: lifetime app access, lifetime security patches, and 30 days of feature updates to get you running.

App access (self-hosted)*
Lifetime
Feature updates*
30 days
Security updates
Lifetime
Private community chat
30 days
Zero-fee operations*
Included
Local key management
Included
Priority support
Not included
Source code access*
Not included
Self-build & code audit
Not included

Pro

$499

The preferred choice for active traders and builders: lifetime access, 90 days of feature updates, priority support, and private community access.

App access (self-hosted)*
Lifetime
Feature updates*
90 days
Security updates
Lifetime
Private community chat
90 days
Zero-fee operations*
Included
Local key management
Included
Priority support
Included
Source code access*
Not included
Self-build & code audit
Not included

Extended

$4,099

Maximum sovereignty for teams and auditors. Everything in Pro, plus full source code access, independent audit rights, and the freedom to self-build and customize.

App access (self-hosted)*
Lifetime
Feature updates*
180 days
Security updates
Lifetime
Private community chat
180 days
Zero-fee operations*
Included
Local key management
Included
Priority support
Included
Source code access*
180 days
Self-build & code audit
Included

All plans are currently available. Need something specific? We build custom plugins and tailored features for your workflow.

Contact us for a quote

Us vs. them

How Merlin Guild stacks up against Slerf Tools, Smithii, Phantom, Solflare, 20LAB, Idxsolana, Coinfactory, Team Finance, and Dexarea on bulk sender, airdrop, token distribution, and DeFi features for Solana.

Feature

Merlin Guild

Slerf Tools

Smithii

Phantom

Solflare

20LAB

Idxsolana

Coinfactory

Team Finance

Dexarea

Local key management

Local (never leaves your machine)Browser flowBrowser flowBrowser flow, Android, iOSBrowser flow, Android, iOSBrowser flowBrowser flowBrowser flowBrowser flowBrowser flow

Private keys stay on user device

SupportedNot supportedNot supportedSupportedSupportedNot supportedNot supportedNot supportedNot supportedNot supported

Works without browser

AvailableUnavailableUnavailableAndroid, iOSAndroid, iOSUnavailableUnavailableUnavailableUnavailableUnavailable

E2E encryption

SupportedNot supportedNot supportedSupportedSupportedNot supportedNot supportedNot supportedNot supportedNot supported

Encryption algorithm

Supported (AES-256-GCM)Not supportedNot supportedNaCl secretbox (XSalsa20-Poly1305)NaCl secretbox (XSalsa20-Poly1305)Not supportedNot supportedNot supportedNot supportedNot supported

Encrypted desktop vault

Available (Argon2id encrypted, local)UnavailableUnavailableUnavailableUnavailableUnavailableUnavailableUnavailableUnavailableUnavailable

Ephemeral in-memory key

Supported (configurable TTL, default 5 min)Not supportedNot supportedNot supportedNot supportedNot supportedNot supportedNot supportedNot supportedNot supported

KDF

Supported (Argon2id)N/AN/ABased on reverse engineering (Scrypt)Based on reverse engineering (PBKDF2)N/AN/AN/AN/AN/A

KDF memory cost

From 256 MB to 1 GB (configurable, default 256 MB)N/AN/AN/AN/AN/AN/AN/AN/AN/A

KDF iterations

From 2 to 6 Argon2 passes (configurable, default 4)N/AN/A10,000600,000N/AN/AN/AN/AN/A

Device-bound pepper

Supported (OS keychain, TPM on Windows)N/AN/ANot supportedNot supportedN/AN/AN/AN/AN/A

Source code audit path (extended license)

AvailableUnavailableUnavailableUnavailableUnavailableUnavailableUnavailableUnavailableUnavailableUnavailable
Merlin Guild comparison definitions[16]
Argon2id
A memory-hard password-hashing function and key-derivation mechanism, winner of the Password Hashing Competition (PHC). It aims at the highest memory-filling rate and effective use of multiple computing units, while still providing defense against trade-off attacks. Argon2id blends the data-independent memory access of Argon2i (side-channel resistance) with the data-dependent access of Argon2d (GPU/ASIC brute-force resistance), making it the recommended variant for general-purpose password storage and encryption key derivation.
References
AES-256-GCM
Advanced Encryption Standard with a 256-bit key operating in Galois/Counter Mode. It provides authenticated encryption with associated data (AEAD), simultaneously ensuring data confidentiality, integrity, and authenticity without requiring a separate MAC algorithm. AES-GCM has been specified as a mode that can be used with IPsec ESP and 802.1AE Media Access Control (MAC) Security.
References
XSalsa20-Poly1305
A high-speed authenticated stream-cipher construction combining the XSalsa20 stream cipher (extended-nonce variant of Salsa20) with the Poly1305 one-time message-authentication code. Used in NaCl/libsodium secretbox for authenticated secret-key encryption.
References
PBKDF2
Password-Based Key Derivation Function 2 (PBKDF2) is a cryptographic algorithm used to stretch passwords into secure, fixed-length encryption or verification keys. Defined in RFC 8018 and NIST SP 800-132. Applies a pseudorandom function (such as HMAC-SHA256) to an input password along with a salt, repeating the process for many iterations to increase the computational cost of brute-force attacks.
References
Scrypt
A password-based key derivation function designed by Colin Percival. Password-based key derivation functions are used for two primary purposes: First, to hash passwords so that an attacker who gains access to a password file does not immediately possess the passwords contained therewithin; and second, to generate cryptographic keys to be used for encrypting and/or authenticating data. The scrypt function aims to reduce the advantage that attackers can gain by using custom-designed parallel circuits for breaking password-based key derivation functions.
References
KDF
Key Derivation Function. A cryptographic algorithm that derives one or more secret keys from a master key or password. KDFs typically incorporate a salt and an iteration / memory cost to defend against rainbow-table and brute-force attacks.
References
E2E encryption
End-to-end encryption (E2EE) is a common mechanism employed to ensure the security of user-to-user communication protocols such as in secure messaging. Standard definitions exist for the types of underlying security properties often expected of E2EE architectures, such as confidentiality, integrity, authenticity, and forward secrecy.
References
MEV
Maximal Extractable Value (formerly Miner Extractable Value): the maximum value that can be extracted from block production by including, excluding, or reordering transactions. MEV-protected routing uses mechanisms such as Jito bundles or private mempools to reduce the risk of frontrunning and sandwich attacks.
References
Jito
Jito Labs' MEV-aware infrastructure on Solana. Jito bundles allow users to submit transactions directly to a network of validators with attached 'tips', giving searchers and traders access to protected execution that mitigates negative MEV such as frontrunning.
References
SWQOS
Stake-Weighted Quality of Service: a Solana network feature that gives transaction-priority weight proportional to the amount of SOL staked by the RPC node or validator. SWQOS can improve transaction inclusion rates and reduce latency during network congestion.
References
Groth16
A zero-knowledge succinct non-interactive argument of knowledge (zk-SNARK) protocol developed by Jens Groth. Groth16 proofs are extremely small and fast to verify, making them practical for on-chain privacy applications such as shielded transfers.
References
Zero-knowledge proofs
Cryptographic protocols that allow one party (the prover) to convince another (the verifier) that a statement is true without revealing any information beyond the validity of the statement itself. In blockchain contexts, they enable private transactions and selective disclosure.
References
TPM
Trusted Platform Module: a specialized hardware security chip built into many modern computers. It provides isolated cryptographic operations, secure key storage, and hardware-rooted attestation, used here to store a device-bound 'pepper' that hardens the encryption key derivation process.
References
RPC
Remote Procedure Call: in Solana, an RPC endpoint is the HTTP/WebSocket interface through which clients query blockchain state, submit transactions, and interact with smart contracts. Using a self-hosted or provider-agnostic RPC node gives users control over rate limits, data privacy, and uptime.
References
TTL
Time To Live: a configurable expiration timer after which a sensitive value (such as a decrypted key held in memory) is automatically erased. Setting a short TTL limits the attack window if the running process is compromised.
References
Non-custodial
Self-custodial architecture where the user retains exclusive control of private keys and signing material. Unlike custodial services, no third party, not even the software vendor, can access, freeze, or transfer the user's funds.
References

Get on the list

Be first to get access when the next build ships. One email, no spam, unsubscribe anytime.

We store only your email to notify you about access. No tracking, no resale.

Privacy policy

  1. Secure queue

    Your email is stored in a secure queue. No automated marketing sequences.

  2. Direct contact

    We reach out personally when the next batch of lifetime access licenses is ready.

  3. Technical fit

    We answer your questions and discuss the details to ensure the toolkit fits your setup.

  4. No obligation

    You decide if you want to proceed with the $199 lifetime license. No upfront commitment.

Questions, answered

How are my wallet keys protected?

Key derivation and storage happen inside a secure, isolated vault on your device. Your keys never leave that vault: they are generated and held there, and the only thing they are ever used for is signing transactions you authorize. Every signing request is checked against a policy that approves requests within your authorized scope and asks for your explicit confirmation before anything falls outside it.

Are there any trading fees?

No. Merlin Guild charges 0% fees on your trades. You only pay standard Solana network and priority fees.

What platforms are supported?

Merlin Guild runs natively on Windows 10 and 11 (64-bit).

What happens if the developer disappears?

Merlin Guild runs entirely on your local machine. It does not depend on a central server to function, meaning your access and workflows remain uninterrupted regardless of our status.

How do updates work?

Updates are manual. You re-run the install command to fetch the latest version. There is no background auto-updater.

Why did my install show an unknown publisher prompt?

This is expected for self-hosted tools. We use a genuine-build check during installation to confirm file integrity instead of relying on standard OS publisher labels.

How do I get help?

Technical support is provided through our private Telegram community. Pro and Extended plans include priority direct support.