Archon Get early access

Safety

Your money stays where it is. Archon is given a key that trades.

Your funds never leave your Hyperliquid account. Archon does not hold them, does not pool them and never sees the wallet that can move them. Here is exactly what it is given, what it does with it, and what you can do if you want it to stop.

01Two keys

The key that moves money never leaves you.

Hyperliquid lets an account authorise separate keys, called API wallets, to sign orders on its behalf. That is what you give Archon.

You keep this

Your main wallet

The wallet you signed up to Hyperliquid with. It owns the account, the USDC and the positions.

  • Deposits and withdrawals
  • Transfers to anyone
  • Creating and replacing API wallets

Archon never asks for it, never sees it, never stores it.

Archon is given this

An API wallet

A separate key you create on Hyperliquid for one purpose: placing orders on your account.

  • Place and cancel orders
  • Set leverage, which Archon fixes at 1x

On 28 Oct 2026, on testnet, we signed a withdrawal and two transfers with one. Hyperliquid refused all three and the balance did not move.

The test: withdraw3, usdSend, spotSend signed by an API wallet for a funded testnet account, each asking to move 1 USDC to the account's own address. All three were refused, and Hyperliquid named the API wallet's own empty address as the user. It has not yet been repeated on mainnet; we will do that before any real-money account goes live, and publish it. Source: docs/evidence/agent-key-withdraw-2026-10-28.md, 28 Oct 2026.

02What Archon does with it

The key could place any order. The engine places very few kinds.

We will not tell you an API wallet is harmless. It can trade your account, and a careless program could trade it badly. That is why the engine's limits are written into its code and published here.

Archon does

  • Buy and sell only in the markets your rule trades
  • Hold longs only, at 1x, sized as equal slots of the account
  • Use orders that fill now or cancel, never orders left on the book
  • Sell everything and stop if the account falls 30% from its peak
  • Read your balances, positions and fills to show them on your dashboard

Archon does not

  • Withdraw, transfer or bridge, and the key was refused when we tried
  • Go short, borrow, or raise leverage above 1x
  • Touch positions in markets its rule does not trade
  • Ask for your seed phrase or your main wallet's key, ever
  • Hold, pool or lend your funds

03Where the key lives

Archon Hosted

Your API wallet key is stored only in encrypted form, using AES-256-GCM, sealed to your account's address so a copied record will not open for any other account. The master key lives in the server's environment, never in the database, so a copy of the database alone reveals nothing. It is decrypted only inside the engine, when an order needs signing.

Self-hosted

The key stays on your own computer or server. Archon's platform never receives it. Your AI assistant is told, in the runbook, never to print it, log it or ask for anything more than the API wallet key and your account address.

04Practice first

Play money first. Real money after a clean week.

  1. 30 Oct 2026

    Testnet opens

    Hyperliquid's testnet uses play USDC from a faucet. Archon runs exactly as it would with real money.

  2. 7 days, per account

    The soak

    Your account runs on testnet for 7 days. Any incident restarts the clock.

  3. Then, if you say so

    Mainnet

    Real funds, one account at a time, only after the soak and only when you choose it.

05Stopping it

Ways to stop Archon, from gentlest to final.

  1. 1

    Pause new trades

    No new positions. Exits keep running so nothing is left unattended.

  2. 2

    Close everything

    Sells every position Archon manages, then opens nothing until you turn it off.

  3. 3

    Replace the key

    On Hyperliquid, create a new API wallet with the same name. Hyperliquid retires the old one at once.

  4. 4

    Let it expire

    Choose an expiry when you create the key. After that date it cannot sign anything.

Replacing a named API wallet deregisters the old one, as described in Hyperliquid's documentation on API wallets. Your positions stay on Hyperliquid whatever you do here; you can always manage them yourself in Hyperliquid's app.

06Payments

You can check every payment yourself.

Payments go to securepath.eth, which resolves to 0x67683ea19559aee0f6cefc2997ec9cf31ff8ecac The app checks on every start that the name still points at that address, and refuses to take payments if it does not. A hijacked or mistyped name cannot redirect your money.

Archon never asks you to sign anything that moves funds except the payment you choose to send. It reads that transaction from the chain and accepts it after 2 confirmations.

07What we cannot protect you from

Losses

The rules can lose money. The halt limits a fall; it does not prevent one.

Hyperliquid itself

Your funds sit on Hyperliquid. An outage or a failure there is outside Archon's control.

Fast markets

Orders cross up to 1% to fill. In a sharp move an order can miss, and the next cycle tries again from a worse price.

Every safety detail, in writing.

The docs cover custody, keys and limits in more depth, including what to check before you go live.

Safety and custody → Connect Hyperliquid