Locker Vault
Holds the account's key. It reads a request with its camera, shows it in its own words, and signs by QR.
Approves the agent key, or revokes it Signs the mandate, the agent's limits Signs deposits and withdrawals
Hyperliquid perps · Paper by default · Keys in Locker Vault The agent trades.
The agent trades.
It holds nothing.
Your private key is nowhere: not on our servers, not on the agent's machine, not with anyone. An AI agent trades Hyperliquid perps for you, within limits you sign on your phone, while the key that owns the money stays offline in Locker Vault.
A paper account on the real book Withdrawals only from the phone No telemetry in the agent
Daily pilotpaper account · 00:30 UTC
DeliberatingReader. The day's texts talk about rates and the ECB. No figures read, only the words.
Trader. Long ETH, a limit inside the lower third of the week, and what would prove me wrong.
Step 1 of 5 placed on paperSize, leverage 3 and the next four steps computed by the code
Shown live on lpa liveExample of one day
Locker VaultMandate for the agent key
- Markets
- BTC, ETH, SOL
- Largest order
- $500
- Leverage
- 3 at most
- Valid until
- 3 Nov
Three places.
The key that owns the money never leaves the phone.
An agent that trades needs to sign orders. Handing it your private key would let any program on that machine empty the account. So the work is split in three, and only QR codes cross between them.
lpa and its guardian
You, a script or an AI assistant call lpa. The guardian, a background process, holds an agent key in memory and signs trading actions only.
Quotes every order on the live book Checks your policy, then the mandate Never gives the key or the password to the caller
Your account
Orders, cancels and leverage arrive signed by the agent key. Every withdrawal and every send from that key is refused by Hyperliquid itself.
Orders, cancels, leverage Public reads of markets and positions The agent key expires on its own
Only QR codes cross between the phone and the computer. Never a key.
Trading on the computer.
Money only on the phone.
| What | Signed by |
|---|---|
| Markets, quotes, positions, balances | nobody, public reads |
| Paper orders | nobody, simulated on the live book |
| Open, close, cancel, leverage | the agent key, in the guardian |
| A copy's or a pilot's orders | the agent key, under the mandate |
| Approve or revoke the agent | Locker Vault |
| Deposit, withdraw, move margin | Locker Vault |
| The mandate | Locker Vault |
| Signed with the agent key | Hyperliquid |
|---|---|
| Place, modify, cancel orders, set leverage | accepted |
| Withdraw, send USDC, send a token, move between spot and perps | refused |
| Approve another agent, approve a builder fee | refused |
| Deposit the account into a Hyperliquid vault | accepted |
Measured on mainnet, 28 September 2026. The agent key cannot withdraw, but it can lose money: by trading badly, or by a deposit into someone else's vault, which lpa never signs. A thief with the key file and your password does not need lpa. The real bound is a dedicated account that holds only what you are ready to risk.
Mandate to signLocker Vault · offline
- Allowed uses
- trade, copies
- Markets
- BTC, ETH, SOL, HYPE
- Largest order
- $500
- Highest leverage
- 3
- Orders per day
- 40
- Daily loss stop
- $150
- Notional per day
- $5,000
- Service fee
- 0.05%
- Valid until
- 3 Nov 2026
Limits signed once,
on the phone.
Read on the phone, not the computer
The computer can be lied to. The vault decodes the request itself and shows every bound on its own row, the fee recipient included.
Checked before every opening
The guardian reads the mandate again before each order. It never widens your local policy, and nothing on the computer can widen the mandate.
Thirty days at most
By design. An expiry brings you back to read the limits again.
Revoked without the phone
lpa mandate revokestops every opening at once, in this guardian and the next, until the phone signs a new one.
One wallet,
four ways to drive it.
The same limits and the same refusals apply, whoever asks.
The lpa command
For you and your scripts. Every order shows its quote, its fees and its limits before it leaves, and every refusal carries a stable code and what to do next.
lpa perps quote --symbol ETH --side long --size 0.03 --leverage 3Your AI assistant, through MCP
42 tools, each running the lpa command of the same name. An order needs a quote you saw, good for ten minutes and once.
- Claude Code
- Claude Desktop
- Cursor
- Codex
- Gemini CLI
- Antigravity
Copies of a trader
Mirror a trader on paper, or on the real account under a mandate that names that trader, with its own copy budget. Your own account is never copied.
lpa copy start --leader 0x5b5d…c060 --budget 500 --days 3The daily pilot
Once a day it gathers a dossier, asks a model for one decision, and lets the code judge it. Paper by default; one real day only on your gesture.
lpa pilot run-nowlpa pilot day
The model picks three things.
The code decides the rest.
The model decides
The side, the market, and where the first entry goes, with its confidence and its thesis. It never decides how much.
The code decides
The size, the distance between steps, the exit price, and whether the trade is allowed at all, from your charter.
You decide
Paper or real, the limits on the phone, and the charter's figures. A note you write reaches the model as Measured by the person.
- 00:30
The dossier code
Candles, funding, open interest, fear and greed, the week's economic calendar, the headlines of the Fed, the ECB and CoinDesk. Frozen with a fingerprint, and refused rather than cut if it does not fit the model.
- 00:31
The reader model
A first voice reads the texts alone, with no figures and no prices, and gives the climate of the day.
- 00:32
The trader model
Reads the charter, the dossier, the climate and its own lessons, and ends on long, short or nothing. Nothing is the usual answer.
- 00:33
The verdicts code
The market is allowed, the prices are figures, the entry sits in its zone, no high-impact release within twelve hours, room for a position, the costs counted. One no, and nothing opens.
- 00:33
The first step code
Sized from the charter at leverage 3. The next steps are written in the plan at their prices.
- hourly
The follow code
Each hour, the steps the price reached are filled and the exit moves with the average.
The hour is the charter's, 00:30 UTC by default. The minutes are an example.
Positions by steps No stop on the book.
No stop on the book.
A ladder instead.
The position is built in steps, each posted a measured distance beyond the last. A price that moves against it fills the next step and improves the average. The whole position leaves on one limit, at the average plus a small target.
- Ladder
- 1 · 1 · 2 · 3 · 5
- Step
- 0.75 daily ATR, never a fixed percent
- Leverage
- 3, the same for every step
- Base stake
- 2.78% of the equity, computed
- Room
- 100% before liquidation, ladder complete
- Target
- 10% of the base stake, net of fees and funding
A method, not a promise: it can hold a losing position for a long time. The charter's stop mode places a stop if you prefer one.
one exit · the average + 10% of the base stake, net
Everything it does,
as it happens.
One page on your own computer shows every activity: the sessions, the service, the copies, the MCP clients and the pilot, with their thinking, their tools, their orders and what the models cost.
Daily pilotpaper · step 1 of 5
runningClaude CodeMCP client · 3 quotes
idleCopy of 0x5b5d…c060paper · 2 positions
followingYour sessionlpa · assistant
idle
- 00:30:02dossier frozen, fingerprint 9f2c…a1
- 00:31:14reader: rates, the ECB, ETF flows
- 00:32:40trader: long ETH, limit 2,412.5, confidence 0.6
- 00:33:05verdict market yes · zone yes · events yes, next USD release in 31 h
- 00:33:06verdict size yes · cost-share yes
- 00:33:07step 1 placed on paper, steps 2 to 5 written in the plan
Tokens today 48,210 in · 3,904 outModel cost $0.21Example figures
The page writes seven things and nothing else: a message, the go of a proposed order, pause, resume, stop, a line of memory, STOP. It places no order of its own.
It keeps score of itself
The code judges each past decision against what the market answered since, then the trader writes a lesson in its own words. The lessons head the next day's prompt, for under a cent a day.
Your model, or your machine
Anthropic, OpenAI, Gemini or OpenRouter, or LM Studio and Ollama on your own machine, where nothing leaves it. A model without a price is refused a trade, because its cost cannot be counted.
What keeps an agent
from costing more than you meant.
A dedicated account
Funded with what you are ready to lose, and nothing else. This is the rule that actually protects you.
Paper until you are bored
The paper account fills on the real book, pays the real fees and funding, and is liquidated like a real one.
Read every row on the phone
If the phone shows something the computer did not announce, tap Refuse.
A short mandate
Thirty days at most, so you come back and read the limits again.
Lock when you stop
lpa locktakes the key out of memory. Then nothing can be signed.The word that stops everything
lpa panicstops every pilot and copy, then locks. Your positions stay yours.Plugins like browser extensions
A plugin cannot read your keys nor sign for your account. Install only what you would trust from that author.
Perpetual futures are leveraged. You can lose everything you put in. Nothing here is financial advice, and no part of this product promises that a trade, a method or a model makes money.
Questions before you start
Does the agent ever have my private key?
No. Your account's key stays in Locker Vault, offline. The computer holds a second key, the agent key, that Hyperliquid lets trade and refuses every withdrawal and every transfer to another account.
What if someone steals my computer?
They get a sealed key file they cannot open without your password, and even with it they cannot withdraw. They could trade your account badly, which is why it should hold only what you are ready to lose. Revoke the key with lpa agent revoke and your phone.
Do I need a phone?
For a real account, yes: Locker Vault signs the agent's approval, the mandate and every movement of funds. For paper trading, no: it needs no phone, no key and no money.
Can an AI agent raise my limits, or place an order on its own?
No. A wider local limit waits for your password, and only your phone signs the mandate. Without a terminal and without your go, an order answers CONFIRMATION_REQUIRED. The exception you choose is a mandate that allows the pilot.
Why is there no stop loss?
The method builds the position in steps and exits it whole at the average plus a small target, with a ceiling on the engagement. It is a measured choice, not a promise. The charter's stop mode places a stop if you prefer one.
What does it cost?
Hyperliquid's trading fees, a Locker service fee of 0.05% of each order's notional once your phone approved it, 1 USDC to withdraw (Hyperliquid's charge), and your model provider's price. A model on your own machine costs nothing.
Does the agent send any telemetry?
None. It talks to Hyperliquid, Arbitrum nodes, your model provider if it is not local, a few public sources for the pilot's dossier, and hyperkeel only when you use it. No analytics, no crash reports, no update check. This website counts its visits; the agent sends it nothing.
How do I stop everything right now?
lpa panic: every pilot and every copy stopped, then the key out of memory. It closes nothing; lpa perps close --all does that. On the live page, type STOP.
Start on paper today.
The paper account fills on Hyperliquid's real book with the real fees, and needs no key, no vault and no money. The installer puts everything in ~/.lpa, with no administrator rights.
curl -fsSL https://hyperagentictrader.com/agent-wallet-install.sh | shlpa paper init --budget 1000lpa perps open --symbol ETH --side long --size 0.03 --leverage 3 --paperLONG 0.03 ETH at 3x (market) entry 2668.93 (mid 2668.75) notional $80.07 margin $26.69 fees 0.095% ($0.0761)Paper order filled.
macOS and Linux. Windows and npm: Install