HYPERLIQUID · AGENT WALLET

Connect Hyperliquid to a bot
without a private key

Hyperliquid gives you a built-in safety layer called an agent wallet (API wallet) — a separate key that can place orders but can never withdraw. You never need to hand a bot your private key.

What is an agent wallet?

Think of an exchange API key. On centralized exchanges you can set an API key to "trade only, no withdrawals" — but a leaked key can still place trades. Hyperliquid's agent wallet goes further: it's a separate signing key that structurally has no withdrawal or transfer rights on-chain. The bot uses only that key to place orders. Your private key (seed) never leaves your own wallet, and your funds stay put.

🔒 The key point
Even if an agent key leaked, the worst it could do is trade — never withdraw. That's what makes non-custodial automated trading possible.

Connect in 3 steps

1

Register your wallet address (public info)

Paste just your Hyperliquid wallet address into My Account. An address is public information — safe to share.
2

Create & approve the agent key

The bot generates a trade-only agent key; you sign one approval on Hyperliquid and you're connected. That signature authorizes the key to trade — not to withdraw.
3

Revoke anytime

In the Hyperliquid app → API/agent wallets, remove the agent and the bot instantly loses all order permission. Nothing else in your account is touched.
🇺🇸 U.S. residents
Hyperliquid is a permissionless DEX reached with just a wallet — no separate KYC account needed. If you prefer a U.S.-regulated venue, COTRADING also supports Coinbase & Kraken spot automation. Availability follows each exchange's own terms.

FAQ

Do I give the bot my private key?
No. You register only your wallet address. The bot trades solely through a non-withdrawable agent key.
What if the agent key leaks?
Trades could be placed, but funds can never be withdrawn. Just revoke it in the HL app. Your funds stay safe.
Does revoking stop it instantly?
Yes. The moment you remove the agent, the bot can place no orders at all.

Start safely today

Connect an address — the bot does the rest.