MetaMask Snap Your keys. Your MetaMask. Your Hive.

Sign Hive transactions, derive keys, and encrypt data — all secured inside MetaMask. Private keys never leave the sandbox.

Built for security. Designed for simplicity.

Four core capabilities, zero compromises.

Sign Transactions

Authorize Hive transactions with user confirmation dialogs. Multi-operation support with clear previews.

Derive Keys

BIP44 key derivation (m/44'/3054') for owner, active, posting, and memo keys. On-demand, never stored.

Encode & Decode

Encode and decode buffers using derived Hive keys. Secure encryption and decryption for data exchange.

Zero Key Storage

Private keys derived, used, and immediately cleared. WASM sandbox isolation. No persistence. No network requests are made.

Get started in three steps

Install

Install from the official MetaMask Snap directory or connect via the demo site.

Approve

Approve BIP44 key derivation, RPC communication, dialog, and WebAssembly permissions.

Sign

Sign Hive transactions, encrypt and decrypt buffers, and retrieve your public keys.

Security First

Your keys never leave MetaMask

Hive Wallet Snap operates under the principle of least privilege. Every permission is scoped to the minimum required, and no private keys are stored in memory or exposed to the client.

Required Permissions

$ snap_getBip44Entropy // For deriving Hive keys from MetaMask seed phrase
$ endowment:rpc // For Snap communication with dApps
$ snap_dialog // For user confirmation when signing transactions or encrypting/decrypting buffer
$ endowment:webassembly // For WebAssembly support in Hive libraries: Wax and Beekeeper

Security Guarantees

  • Keys are derived only when needed and immediately cleared from memory after usage

  • No network requests are made

  • Input validation is performed on all transaction data

  • No sensitive data is stored in browser storage

Built for developers

Four RPC methods. One npm install. Full Hive integration.

hive_getPublicKeys

Derive owner, active, posting, memo public keys

hive_signTransaction

Sign and broadcast Hive transactions

hive_encrypt

Encrypt buffers with memo key pairs

hive_decrypt

Decrypt previously encrypted data

npm install @hiveio/metamask-snap

Prerequisites

  • Node.js >= 20.18.1
  • pnpm = 10.0.0
  • MetaMask Flask

Architecture

src/
├── assets/            # Snap assets, e.g. icons
├── hive/              # Hive libraries configuration
├── index.ts           # Main Snap entry point
├── rpc.ts             # RPC method types
├── snap/              # RPC method handlers
└── priviledged-apis/  # Bip44 entropy functions