New Case Study:See how Anthropic automated 95% of dependency reviews with Socket.Learn More β†’
Socket
Sign inDemoInstall
Socket

@stacks/connect

Package Overview
Dependencies
Maintainers
0
Versions
789
Alerts
File Explorer

Advanced tools

Socket logo

Install Socket

Detect and block malicious and high-risk dependencies

Install

@stacks/connect

  • 8.1.6-alpha.16985d0.0
  • npm
  • Socket score

Version published
Weekly downloads
3.9K
decreased by-10.2%
Maintainers
0
Weekly downloads
Β 
Created
Source

@stacks/connect npm

[!NOTE] Please be patient during this latest migration. There has been a long-running effort together with wallets to modernize and move forward the Stacks web ecosystem. It is now culminating in SIP-030 and the new request method in Stacks Connect 8.x.x. Bear with us during this migration. Wallets are still working through some bugs, details, and improvements. We're working on it!

Feel free to continue using Stacks Connect 7.x.x while things stabilize. The 7.x.x version may still be more well supported by some wallets.

For the legacy version of @stacks/connect using JWT tokens, please use the following command:

npm install @stacks/connect@7.10.1

πŸ›¬ Migration Guide

Welcome to the new Stacks Connect! ✨ Read the @stacks/connect docs for more information.

For a while now the Stacks community has been working on a new standard for wallet-to-dapp communication. Stacks Connect and related projects now use standards like WBIPs and SIP-030 to allow wallets to communicate with dapps in a more simplified and flexible way.

⚠️ Deprecations

The following classes, methods, and types are deprecated in favor of the new request RPC methods:

  • show... and open... methods
  • authenticate method
  • UserSession class and related functionality
  • AppConfig class
  • SessionOptions interface
  • SessionData interface
  • UserData interface
  • SessionDataStore class
  • InstanceDataStore class
  • LocalStorageStore class

[!NOTE] To make migrating easier, the familiar UserSession & AppConfig class still exists and is semi-backwards compatible for the 8.x.x release. It will "cache" the user's address in local storage and allow access to it via the loadUserData method (as previously done).

▢️ Migration Steps

To update from <=7.x.x to latest/8.x.x, follow these steps.

  1. Update your @stacks/connect version:
npm install @stacks/connect@latest
  1. Switch from showXyz, openXyz, doXyz methods to the request method.
  • request follows the pattern request(method: string, params: object), see Usage for more details
  • request is an async function, so replace the onFinish and onCancel callbacks with .then().catch() or try & await
  • e.g., showConnect(), authenticate() β†’ connect()
  • e.g., useConnect().doContractCall({}) β†’ request("stx_callContract", {})
  • e.g., openContractDeploy() β†’ request("stx_deployContract", {})
  1. Switch from showConnect orauthenticate to connect() methods

    • connect() is an alias for request({forceWalletSelect: true}, 'getAddresses')
    • connect() by default caches the user's address in local storage
  2. Switch from UserSession.isSignedIn() to isConnected()

  3. Switch from UserSession.signUserOut() to disconnect()

  4. Remove code referencing deprecated methods (AppConfig, UserSession, etc.)

  5. Remove the @stacks/connect-react package.

    • You may need to manually reload a component to see local storage updates.
    • No custom hooks are needed to use Stacks Connect anymore.
    • We are working on a new @stacks/react package that will make usage even easier in the future (e.g. tracking transaction status, reloading components when a connection is established, updating the page when the network changes, and more).

πŸͺͺ Address Access

Previously, the UserSession class was used to access the user's addresses and data, which abstracted away the underlying implementation details. Now, the request method is used to directly interact with the wallet, giving developers more explicit control and clarity over what's happening under the hood. This manual approach makes the wallet interaction more transparent and customizable. Developer can manually manage the currently connected user's address in e.g. local storage, jotai, etc. or use the connect()/request() method to cache the address in local storage.

[!IMPORTANT] For security reasons, the 8.x.x release only returns the current network's address (where previously both mainnet and testnet addresses were returned).


Usage

Try the Connect Method Demo App 🌏 to see which methods/features are available for wallets

Install @stacks/connect

npm install @stacks/connect
pnpm install @stacks/connect
yarn add @stacks/connect

Connect to a wallet

Initiate a wallet connection and request addresses.

import { connect } from '@stacks/connect';

const response = await connect(); // stores users address in local storage by default

Get the local storage data (stored by a connect call).

import { getLocalStorage } from '@stacks/connect';

const data = getLocalStorage();
// {
//   "addresses": {
//     "stx": [
//       { "address": "SP2MF04VAGYHGAZWGTEDW5VYCPDWWSY08Z1QFNDSN" },
//     ],
//     "btc": [
//       { "address": "bc1pp3ha248m0mnaevhp0txfxj5xaxmy03h0j7zuj2upg34mt7s7e32q7mdfae" },
//     ]
//   }

Managing the connection state.

import { connect, disconnect, isConnected } from '@stacks/connect';

isConnected(); // false
await connect(); // similar to the `getAddresses` method
isConnected(); // true
disconnect(); // clears local storage and selected wallet
isConnected(); // false

Use request to trigger wallet interactions

import { request } from '@stacks/connect';

// CONNECT
const response = await request({ forceWalletSelect: true }, 'getAddresses');

Available methods

getAddresses
const response = await request('getAddresses');
// {
//   "addresses": [
//     {
//       "address": "bc1pp3ha248m0mnaevhp0txfxj5xaxmy03h0j7zuj2upg34mt7s7e32q7mdfae",
//       "publicKey": "062bd2c825300d74f4f9feb6b2fec2590beac02b8938f0fc042a34254581ee69",
//     },
//     {
//       "address": "bc1qtmqe7hg4etkq4t384nzg0mrmwf2sam9fjsz0mr",
//       "publicKey": "025b65a0ec0e00699794847f2af1b5d8a53db02a2f48e09417598bef09cfea1114",
//     },
//     {
//       "address": "SP2MF04VAGYHGAZWGTEDW5VYCPDWWSY08Z1QFNDSN",
//       "publicKey": "02d3331cbb9f72fe635e6f87c2cf1a13cdea520f08c0cc68584a96e8ac19d8d304",
//     }
//   ]
// }
sendTransfer
const response = await request('sendTransfer', {
  recipients: [
    {
      address: 'bc1qw508d6qejxtdg4y5r3zarvary0c5xw7kv8f3t4', // recipient address
      amount: '1000', // amount in sats
    },
    // You can specify multiple recipients
    {
      address: 'bc1qxy2kgdygjrsqtzq2n0yrf2493p83kkfjhx0wlh',
      amount: '2000',
    },
  ],
});
// {
//   "txid": "0x1234...", // The transaction ID
// }
signPsbt
const response = await request('signPsbt', {
  psbt: 'cHNidP...', // base64 encoded PSBT string
  signInputs: [{ index: 0, address }], // indices of inputs to sign (optional)
  broadcast: false, // whether to broadcast the transaction after signing (optional)
});
// {
//   "txid": "0x1234...", // The transaction ID (if broadcast is true)
//   "psbt": "cHNidP..." // The signed PSBT in base64 format
// }
stx_getAddresses
const response = await request('stx_getAddresses');
// {
//   "addresses": [
//     {
//       "address": "bc1pp3ha248m0mnaevhp0txfxj5xaxmy03h0j7zuj2upg34mt7s7e32q7mdfae",
//       "publicKey": "062bd2c825300d74f4f9feb6b2fec2590beac02b8938f0fc042a34254581ee69",
//     },
//     {
//       "address": "bc1qtmqe7hg4etkq4t384nzg0mrmwf2sam9fjsz0mr",
//       "publicKey": "025b65a0ec0e00699794847f2af1b5d8a53db02a2f48e09417598bef09cfea1114",
//     },
//     {
//       "address": "SP2MF04VAGYHGAZWGTEDW5VYCPDWWSY08Z1QFNDSN",
//       "publicKey": "02d3331cbb9f72fe635e6f87c2cf1a13cdea520f08c0cc68584a96e8ac19d8d304",
//     }
//   ]
// }
stx_getAccounts
const response = await request('stx_getAccounts');
// {
//   "addresses": [
//     {
//       "address": "SP2MF04VAGYHGAZWGTEDW5VYCPDWWSY08Z1QFNDSN",
//       "publicKey": "02d3331cbb9f72fe635e6f87c2cf1a13cd...",
//       "gaiaHubUrl": "https://hub.hiro.so",
//       "gaiaAppKey": "0488ade4040658015580000000dc81e3a5..."
//     }
//   ]
// }
stx_transferStx
const response = await request('stx_transferStx', {
  amount: '1000', // amount in micro-STX (1 STX = 1,000,000 micro-STX)
  recipient: 'SP2MF04VAGYHGAZWGTEDW5VYCPDWWSY08Z1QFNDSN', // recipient address
  network: 'mainnet', // optional, defaults to mainnet
  memo: 'Optional memo', // optional memo field
});
// {
//   "txid": "0x1234...", // The transaction ID
// }
stx_callContract
const response = await request('stx_callContract', {
  contract: 'SP2MF04VAGYHGAZWGTEDW5VYCPDWWSY08Z1QFNDSN.counters', // contract in format: address.contract-name
  functionName: 'count', // name of the function to call
  functionArgs: [Cl.int(3)], // array of Clarity values as arguments
  network: 'mainnet', // optional, defaults to mainnet
});
// {
//   "txid": "0x1234...", // The transaction ID
// }
stx_deployContract
const response = await request('stx_deployContract', {
  name: 'counters', // name of the contract
  clarityCode: `(define-map counters principal int)

(define-public (count (change int))
  (ok (map-set counters tx-sender (+ (get-count tx-sender) change)))
)

(define-read-only (get-count (who principal))
  (default-to 0 (map-get? counters who))
)`, // Clarity code as string
  clarityVersion: '2', // optional, defaults to latest version
  network: 'mainnet', // optional, defaults to mainnet
});
// {
//   "txid": "0x1234...", // The transaction ID
// }
stx_signMessage
const response = await request('stx_signMessage', {
  message: 'Hello, World!', // message to sign
});
// {
//   "signature": "0x1234...", // The signature of the message
//   "publicKey": "02d3331cbb9f72fe635e6f87c2cf1a13cdea520f08c0cc68584a96e8ac19d8d304" // The public key that signed the message
// }
stx_signStructuredMessage
const clarityMessage = Cl.parse('{ structured: "message", num: u3 }');
const clarityDomain = Cl.tuple({
  domain: Cl.stringAscii('example.com'),
  version: Cl.stringAscii('1.0.0'),
  'chain-id': Cl.uint(1),
});

const response = await request('stx_signStructuredMessage', {
  message: clarityMessage, // Clarity value representing the structured message
  domain: clarityDomain, // domain object for SIP-018 style signing
});
// {
//   "signature": "0x1234...", // The signature of the structured message
//   "publicKey": "02d3331cbb9f72fe635e6f87c2cf1a13cdea520f08c0cc68584a96e8ac19d8d304" // The public key that signed the message
// }

Error Handling

The request method returns a Promise, allowing you to handle errors using standard Promise-based error handling patterns. You can use either try/catch with async/await or the .catch() method with Promise chains.

Using try/catch with async/await

import { request } from '@stacks/connect';

try {
  const response = await request('stx_transferStx', {
    amount: '1000',
    recipient: 'SP2MF04VAGYHGAZWGTEDW5VYCPDWWSY08Z1QFNDSN',
  });
  // SUCCESS
  console.log('Transaction successful:', response.txid);
} catch (error) {
  // ERROR
  console.error('Wallet returned an error:', error);
}

Compatibility

The request method by default adds a layer of auto-compatibility for different wallet providers. This is meant to unify the interface where wallet providers may not implement methods and results the same way.

MethodNotes
getAddressesπŸ”΅Maps to wallet_connect for Xverse-like wallets
sendTransferπŸ”΅Converts amount to number for Xverse, string for Leather
signPsbt🟑Transforms PSBT format for Leather (base64 to hex) with lossy restructure of signInputs
stx_getAddressesπŸ”΅Maps to wallet_connect for Xverse-like wallets
stx_getAccounts🟒
stx_getNetworks🟒
stx_transferStx🟒
stx_transferSip10Ft🟒
stx_transferSip9Nft🟒
stx_callContractπŸ”΅Transforms Clarity values to hex-encoded format for compatibility
stx_deployContractπŸ”΅Transforms Clarity values to hex-encoded format for compatibility
stx_signTransactionπŸ”΅Transforms Clarity values to hex-encoded format for compatibility
stx_signMessageπŸ”΅Transforms Clarity values to hex-encoded format for compatibility
stx_signStructuredMessageπŸ”΅Transforms Clarity values to hex-encoded format for compatibility
stx_updateProfile🟒
stx_accountChange (event)🟒
stx_networkChange (event)🟒
  • 🟒 No overrides needed for any wallet
  • πŸ”΅ Has compatibility overrides that maintain functionality
  • 🟑 Has breaking overrides that may lose some information

To disable this behavior, you can set the enableOverrides option to false or use the requestRaw method detailed below.

Advanced Usage

request

The request method is called with an optional options object as the first parameter:

import { request } from '@stacks/connect';

// WITH options
const response = await request(
  {
    provider?: StacksProvider;        // Custom provider to use for the request

    forceWalletSelect?: boolean;      // Force user to select a wallet (default: false)
    persistWalletSelect?: boolean;     // Persist selected wallet (default: true)
    enableOverrides?: boolean;         // Enable provider compatibility (default: true)
    enableLocalStorage?: boolean;      // Store address in local storage (default: true)

    defaultProviders?: WbipProvider[]; // Default wallets to display in modal
    approvedProviderIds?: string[];    // List of approved provider IDs to show in modal
  },
  'method',
  params
);

// WITHOUT options
const response = await request('method', params);

The enableOverrides option enables automatic compatibility fixes for different wallet providers. For example, it handles converting numeric types between string and number formats as needed by different wallets, and remaps certain method names to match wallet-specific implementations. This ensures consistent behavior across different wallet providers without requiring manual adjustments.

The approvedProviderIds option allows you to filter which wallet providers are shown in the connect modal. This is useful when you want to limit the available wallet options to specific providers. For example, you might only want to support Leather wallet:

connect({ approvedProviderIds: ['LeatherProvider'] });

Or multiple specific wallets:

connect({ approvedProviderIds: ['LeatherProvider', 'xverse'] });

requestRaw

The requestRaw method provides direct access to wallet providers without the additional features of request:

import { requestRaw } from '@stacks/connect';

const response = await requestRaw(provider, 'method', params);

Note: requestRaw bypasses the UI wallet selector, automatic provider compatibility fixes, and other features that come with request. Use this when you need more manual control over the wallet interaction process.

Support

Here's a list of methods and events that are supported by popular wallets:

MethodLeatherXverse-like
getAddresses🟑 No support for experimental purposes🟑 Use wallet_connect instead
sendTransfer🟑 Expects amount as string🟑 Expects amount as number
signPsbt🟑 Uses signing index array only🟑 Uses signInputs record instead of array
stx_getAddressesπŸŸ’πŸ”΄
stx_getAccountsπŸ”΄πŸŸ’
stx_getNetworksπŸ”΄πŸ”΄
stx_transferStx🟒🟒
stx_transferSip10FtπŸŸ’πŸ”΄
stx_transferSip9NftπŸŸ’πŸ”΄
stx_callContract🟑 Hex-encoded Clarity values only🟑 Hex-encoded Clarity values only, no support for postConditions
stx_deployContract🟑 Hex-encoded Clarity values only🟑 Hex-encoded Clarity values only, no support for postConditions
stx_signTransaction🟑 Hex-encoded Clarity values only🟑 Hex-encoded Clarity values only
stx_signMessage🟑 Hex-encoded Clarity values only🟑 Hex-encoded Clarity values only
stx_signStructuredMessage🟑 Hex-encoded Clarity values only🟑 Hex-encoded Clarity values only
stx_updateProfileπŸ”΄πŸ”΄
EventLeatherXverse
stx_accountChangeπŸ”΄πŸ”΄
stx_networkChangeπŸ”΄πŸ”΄
  • πŸ”΄ No support (yet)
  • 🟑 Partial support
  • 🟒 Supported


Hiro DocsΒ Β Hiro TwitterΒ Β Stacks Discord

FAQs

Package last updated on 06 Mar 2025

Did you know?

Socket

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Install

Related posts

SocketSocket SOC 2 Logo

Product

  • Package Alerts
  • Integrations
  • Docs
  • Pricing
  • FAQ
  • Roadmap
  • Changelog

Packages

npm

Stay in touch

Get open source security insights delivered straight into your inbox.


  • Terms
  • Privacy
  • Security

Made with ⚑️ by Socket Inc