What is an Agent Key?
An agent key (also called an API wallet) is a Hyperliquid-native mechanism that lets Aura place orders on your behalf without requiring a wallet signature for every trade. You authorize it once; after that, orders execute immediately.
Hyperliquid's API wallet system is documented in full in the Hyperliquid docs.
What an agent key can do
- Place, cancel, and modify orders on Hyperliquid
- Set and update TP/SL orders
- Change leverage and margin mode
What an agent key cannot do
- Withdraw funds
- Transfer funds to another address
- Access your external wallet
- Do anything outside of Hyperliquid trading
The key is scoped to trading actions only. Hyperliquid enforces this at the protocol level.
Where the key lives
The agent key is generated on your device and stored locally — in browser storage on web, or in secure device storage on mobile. It never leaves your device in plain form.
One key per device
Each device or browser profile gets its own agent key. If you trade on two devices, you'll have two agent keys active on the same Hyperliquid account. Hyperliquid allows up to 4 active API wallets per account. See Managing API Wallets.
How to revoke
Go to Hyperliquid.com → Settings → API. You can view and revoke any active agent key from there. Revoking a key from Hyperliquid disables it immediately — Aura will prompt you to re-authorize on that device if you try to trade.
When you'll need to re-authorize
- After clearing browser site data or cache
- After reinstalling the mobile app
- On a new device or browser profile
Re-authorizing is one signature and takes under a minute. Your funds and positions are never affected — see Lost device or cleared storage.