# add-proxy (/docs/tx/add-proxy)

The foundation of the keep-the-coldkey-offline setup: sign this once from
the coldkey, then let the delegate submit day-to-day calls with
`proxy_for=<this account>`. The chain reserves a small deposit from the
signer per delegation (returned on removal). The delegate can act within
`proxy_type` immediately (or after announcing, if `delay` > 0) — grant
only to keys you control or fully trust.

| Signer    | Pallet | Wraps             |
| --------- | ------ | ----------------- |
| `coldkey` | Proxy  | `Proxy.add_proxy` |

## Parameters [#parameters]

| Parameter       | Type    | Required | Description                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                             |
| --------------- | ------- | -------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| `delegate_ss58` | string  | yes      | Key that will be allowed to sign for this account.                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                      |
| `proxy_type`    | string  | no       | Scope of calls the delegation covers. One of: Any, Owner, NonCritical, NonTransfer, Senate, NonFungible, Triumvirate, Governance, Staking, Registration, Transfer, SmallTransfer, RootWeights, ChildKeys, SudoUncheckedSetCode, SwapHotkey, SubnetLeaseBeneficiary, RootClaim. Triumvirate, Senate, Governance, and RootWeights are deprecated on the current runtime: they deny all calls, so a proxy of those types can dispatch nothing. Prefer the narrowest type that covers your use; Any can do everything the account can, including transfers. |
| `delay`         | integer | no       | Announcement delay in blocks: the delegate must announce each call and wait this long before executing it, giving you time to veto. 0 executes immediately.                                                                                                                                                                                                                                                                                                                                                                                             |

Address parameters (`--hotkey`, `--coldkey`, `--dest`, ...) accept a raw ss58
address, an address-book or proxy-book name, or a local wallet/hotkey name.

## CLI [#cli]

Preview with `--dry-run` (shows fee, effects, and policy result without
submitting), then submit:

```bash
btcli tx add-proxy \
  --delegate <ss58|name> --dry-run
btcli tx add-proxy \
  --delegate <ss58|name> -w my_coldkey
```

## Python [#python]

```python
import bittensor as sub
from bittensor.wallet import Wallet

wallet = Wallet(name="my_coldkey", hotkey="my_hotkey")
intent = sub.AddProxy(delegate_ss58="5F...")

async with sub.Client("finney") as client:
    plan = await client.plan(intent, wallet)   # fee, effects, policy — no submission
    result = await client.execute(intent, wallet)
    if not result.success:
        print(result.error.code, result.error.remediation)
```

Or build it by op name, as an agent would:

```python
await client.execute_tool("add_proxy", {...}, wallet)
```