Why open is better than gated

The largest closed-source toolkit in this space asks users to paste their private key into a web form. Their FAQ has a whole section reassuring users about it. Quoting verbatim:

“you need to enter your private key, which is specific to that wallet address : IT'S NOT YOUR SEED WORDS”

It doesn't matter that it isn't a seed phrase.A spending key in a browser is one malicious extension, one XSS, or one screen-share away from being drained. Their reassurance — “your private key never leaves your browser” — treats “your browser” like a trust boundary. It isn't. Every browser extension you've ever installed sees your localStorage.

We use Beacon SDK. Your keys live in your wallet app (Temple, Kukai, Umami) and never enter our pages. Every transaction is signed inside your wallet, with your wallet's confirmation, not in our JavaScript.

The same toolkit gates “advanced” features behind owning the maintainer's artwork. Quoting verbatim:

“some advanced features are perks for collectors of my works: any person owning one or more of 1/1 or multi-editions artworks”

That's pay-to-tool with a buyback. Anyone the maintainer doesn't want using their tools: blocked. Their answer to “Can I be banned?”:

“For whatever personal reason I could have, If I don't want anymore to share some or all of these tools with you, then I will block your wallet, without any explaination or notification”

Buying their NFT — the entry fee for the “perks” — doesn't change the kick-without-notice clause. You bought a token. You did not buy due process.

Every tool here is free, forever, for everyone. There is no membership. There are no perks. There is nothing to revoke.

Some tools offer automatic NFT purchases when watched artists drop. To do that, the tool needs a key that can sign without asking the user each time. Either:

• It's stored client-side (the private-key-in-form anti-pattern from #1), or
• It's held server-side, where the tool's operator can drain you whenever they want.

Our alternative is a watchlist: when a watched artist mints, the activity shows up in /follow; you click Buy; your wallet asks you to sign. A few seconds slower than autobuy. Zero key access required. We choose it.

The same toolkit's FAQ says, verbatim:

“using any of these tools don't entitle you to any right or anything else, no warranty of any kind is provided”

“I don't ask you anything, you don't have anything to pay, so I don't owe you anything AT ALL”

That's a maintainer publicly setting the floor for how they'll treat users: no obligations, no notice, no recourse. Combined with #2, the position is “buy my NFT for the perks, and I owe you nothing for it, and I can revoke at any time.”

We don't need to make these claims. The MIT license already says no warranty — read it. But it's the same disclaimer every open-source project ships with, and the crucial difference is: you have the source. If we ever stop maintaining it, you maintain it. If we ever start misbehaving, you fork. Rights you derive from the GPL or MIT or BSD are real because the code is the contract.