What taker cannot do
The most important thing to understand about taker is what it is structurally incapable of doing with your account.
taker cannot move your funds
Section titled “taker cannot move your funds”When you link Hyperliquid, you approve an API wallet (Hyperliquid calls it an agent wallet). It is a separate key that taker holds, and it can:
- Open positions
- Close and reduce positions
- Place, modify and cancel orders
- Change leverage and margin mode
It cannot:
- Withdraw funds to any address
- Transfer between accounts or sub-accounts
- Move funds into or out of vaults
- Approve another agent
- Change any account setting that touches custody
This is not a policy we enforce in our code. It is what the key is — the venue itself rejects those actions from an agent wallet. Even if taker’s servers were fully compromised, the attacker would hold a key that can trade your account, not one that can empty it.
taker never sees your private key
Section titled “taker never sees your private key”You are never asked for a seed phrase or a private key, and there is nowhere in the product to enter one. If any site claiming to be taker ever asks for either, it is not us — close the tab.
Linking works by signature: your wallet signs a readable approval message, and taker receives permission, not credentials.
The approval is scoped and expires
Section titled “The approval is scoped and expires”The agent approval is named (taker) and time-limited — roughly 90 days —
after which it must be re-approved. You can revoke it at any time from
Hyperliquid’s own interface, without involving taker at all. Revoking stops
taker from trading immediately; it does not affect your funds or positions.
What taker can do that you should know about
Section titled “What taker can do that you should know about”Being honest about the other direction:
- It can open and close positions, which can lose money. Trading perpetual futures with leverage can lose your entire margin. A stop is not a guarantee — in a fast market it fills at the next available price, which can be worse than the trigger.
- With 1-click on, it executes without a confirmation step. That is the default because it is what the venue does and what fast traders expect. Your risk limits still apply to every order, and the toggle is one click away.
- It reads your account. Positions, balances, order and fill history are read to price orders and render your portfolio.
What it will never do
Section titled “What it will never do”- Trade without you asking. There is no autonomous strategy, no background trading, no “AI decides when to enter”. Every order originates from something you typed or clicked.
- Give you advice. See What taker is — it reports, it does not recommend.
- Act on instructions found in web pages. If a turn used web search, any order proposed in that turn always requires a manual confirmation, even with 1-click on. Fetched text is data, never instruction.