Platform Architecture
How Momo is built - from the Telegram bot to the multi-agent backend and user isolation model.
Overview
Momo is a multi-layer AI platform. Each user gets a fully isolated workspace with persistent memory, their own agent sessions, and private encrypted storage. Nothing is shared between users.
Telegram / Web App
↓ HTTPS webhook / REST API
Momo Backend (Node.js, Process Manager, secure port)
↓ Auth + routing
Per-user Agent (OpenClaw)
↓ Model selection
Claude Opus / Sonnet / Haiku
↓ Tools
App Builder · Yield Radar · Wallet Scorer · Memory · Web Search
Infrastructure
| Component | Details |
| Server | VPS at [secure server] - nginx reverse proxy |
| Backend | Node.js + Express, Process Manager managed, secure port |
| Domain | momo-agent.xyz - SSL via Let's Encrypt |
| Web App | app.momo-agent.xyz - React + Vite |
| Docs | docs.momo-agent.xyz - static HTML |
| Bot | @MomoAgentXYZ_bot - Telegram webhook |
AI Models
| Role | Model | Use Case |
| App Builder | claude-opus-4-5 | Building full web apps (32k tokens) |
| Crypto Intelligence | claude-opus-4-5 | Wallet scoring (RAWR), yield radar, money markets, liquidation monitor, smart money tracking, SQD real-time event streams |
| Agent Sessions | claude-sonnet-4-6 | Persistent OpenClaw agent sessions |
| Fast Chat | claude-haiku-4-5 | Quick responses, routing decisions |
User Isolation
Every user gets:
- Isolated workspace at
[user data directory]/workspaces/tg_{userId}/
- Encrypted MEMORY.md, dashboard.jsonl, app files
- Dedicated OpenClaw agent sessions (
{userId}_assistant, {userId}_crypto)
- Per-user yield alerts, money market rate alerts, LP range alerts, liquidation warnings, copy trade settings
- JWT auth for web app access
Crypto Stack
| Feature | Data Source |
| Solana wallet scoring | On-chain transaction indexer - parsed swaps, all DEXes |
| EVM wallet scoring | Real-time chain indexer - Base + ETH logs/transactions |
| Yield data | DeFiLlama pools API - APY, TVL, 30d history |
| On-chain flow confirmation | Real-time chain indexer - 25 chains |
| Hyperliquid scoring | Real-time fills dataset |
| DEX flow radar | Real-time swap event indexer - Base + ETH |
| Token metadata | On-chain asset metadata resolver |
Security
- All user data encrypted at rest (AES-256-GCM)
- Atomic file writes (.tmp → rename) to prevent corruption
- Rate limiting: 100 req/15min general, 5 req/15min auth
- CORS restricted to specific domains
- JWT auth for web API endpoints
- bcrypt password hashing
- No API keys hardcoded - environment variables only
Process Manager Processes
| Process | Service | Role |
main-backend | [secure port] | Main backend - chat, builds, crypto, webhooks |
momo-alerts | - | Alert engine - polls wallets, fires Telegram alerts |
openclaw-simple | [internal port] | OpenClaw gateway - persistent agent sessions |