The trade-only key
What the key can do, what it cannot, and why that keeps your money out of our reach.
Updated Nov 3, 2026 1 min read
The key can
- Place orders on your account
- Cancel orders on your account
- Read positions and fills
The key cannot
- Withdraw your funds
- Transfer funds to another account
- Sign in to your Hyperliquid account
Tarvis trades through an agent wallet: a separate key that Hyperliquid authorizes to act for your account. The limit comes from Hyperliquid, not from a promise of ours. The key has no way to withdraw, even if somebody stole it.
How Tarvis handles it
- Checked before storing. Tarvis asks Hyperliquid what the key is and refuses a main wallet key.
- Encrypted at rest. The key is stored encrypted and never shown again.
- Yours to revoke. You can remove the agent wallet on Hyperliquid at any moment, and Tarvis loses access at once.
What a stolen key could do
It could not take your money out, but it could still trade your account badly. That is why it is worth keeping your Tarvis login safe too:
- Turn on two-factor authentication.
- Use a unique password.
- If something looks wrong, remove the agent wallet on Hyperliquid first and ask questions afterwards.