MetaMask

MetaMask is the provider package for connecting an injected MetaMask wallet to Blockchain Core. It owns provider discovery, wallet prompts, signed proofs, and the optional association between one wallet and one WordPress account.

Free and Pro

Free provides explicit visitor-initiated wallet connection for Terminal and other reviewed Wallet Session surfaces. The provider bundle remains lazy and loads only when a wallet surface becomes visible, receives focus, or starts a connection request.

MetaMask Pro adds wallet login and account linking. A signed-in user with a connected wallet may choose Link with account. A linked user can unlink or explicitly replace the login wallet. Guests never see account-linking actions.

Authentication boundary

MetaMask verifies the signed wallet proof and owns wallet-to-user association. It does not provide email registration, passwords, recovery, redirects, two-factor policy, or general account UI. SnapWeb Auth owns those features when installed.

Wallet login never creates a new WordPress account. The wallet must already be linked to an existing account. If SnapWeb Auth requires recent reauthentication or a second factor, MetaMask pauses and hands control to Auth before any WordPress session is created.

Security model

• Fresh documents do not silently reconnect a wallet.
• Linking, replacement, and unlinking require explicit user actions.
• Replacing a different wallet requires a separate confirmation and new signed proof.
• Short-lived return state stores only the pending action name, never an address, message, proof, or signature.
• Provider-neutral security events contain no wallet address.
• The server rechecks Pro access and current account state; hidden browser controls are not authority.

Start here

Install MetaMask, verify ordinary wallet connection first, and then follow the connection and wallet-login guide to test linking, login, replacement, unlinking, and denied states.