Security model

Why Sollection is non-custodial, what each signature authorizes, and how action keys differ from merchant API keys.

Sollection is non-custodial. It stores invoice data, builds payment transactions, verifies signatures, submits signed payment transactions, and confirms settlement. It does not ask for, collect, or store seed phrases or private keys.

Recipient wallet approval signs a message and does not transfer funds.
Payer wallet payment signs a transaction and may transfer funds.
Merchant API keys are account credentials and must stay server-side.
Action keys are platform-level keys for approved assistant/agent flows only.
Payment links are immediately payable and should be treated as trusted merchant/account integrations, not public LLM tools.