Hyperliquid API wallets: how a bot trades without withdrawal rights
Updated Nov 12, 2026 · 6 min read
Senpi doesn’t use API wallets: each strategy trades from its own strategy wallet. What a Hyperliquid API (agent) wallet can and can’t do, limits, expiry and how to revoke one, Nov 2026.
Senpi doesn’t use API wallets: each Senpi strategy trades from its own funded strategy wallet, and the agent holds no key. A Hyperliquid API wallet, also called an agent wallet, is a separate key that your main wallet approves to sign trades on its behalf. It lets a bot, an app or an AI agent place and cancel orders for your account without ever holding your main key, and it cannot send your funds to another address: withdrawals and transfers out are signed by the main wallet itself. This page covers what an API wallet can and can’t do, its limits, how to revoke one and why Senpi doesn’t use them, from Hyperliquid’s documentation on Nov 9, 2026.
Key takeaways
- Senpi doesn’t use API wallets: each strategy trades from its own dedicated account, and the agent holds no key.
- An API wallet signs trading actions for your main account or its sub-accounts; it never needs your main wallet’s private key.
- Withdrawals and transfers to another address require the main wallet’s own signature.
- An account can approve one unnamed and up to three named API wallets, plus two named ones per sub-account.
- An approval can be set to expire, at most 180 days ahead; approving a new wallet with the same name replaces the old one.
- Revoke an API wallet you no longer use, and never reuse an old API wallet address.
What an API wallet can and can’t do
| Action | API wallet | Main wallet |
|---|---|---|
| Place, modify and cancel orders | Yes | Yes |
| Set leverage and margin | Yes | Yes |
| Move funds between your own perp, spot and HIP-3 balances | Yes, to the same account only | Yes |
| Withdraw to an external chain | No | Yes |
| Send funds to another address | No | Yes |
| Approve or revoke API wallets | No | Yes |
Limits, expiry and nonces
- How many: one unnamed and up to three named API wallets per account, and two more named ones for each sub-account.
- Expiry: you can set an expiry when approving, at most 180 days ahead.
- Replacement: approving a new unnamed wallet replaces the old unnamed one; approving a named wallet replaces the one with the same name.
- Pruning: an API wallet is also dropped when it expires or when the account that approved it has no funds left.
- Nonces: Hyperliquid tracks the last 100 nonces per signer, so bots running several processes should give each one its own API wallet.
How to check and revoke API wallets
Your approved API wallets are listed on Hyperliquid’s API page in the app (app.hyperliquid.xyz/API), with their names and expiry dates. To revoke one, remove it there, or approve a new wallet under the same name, which replaces it. Do it whenever you stop using a bot or app. Hyperliquid also warns developers never to reuse an API wallet address after it is replaced: once its nonce history is pruned, old signed actions could be replayed.
Why bots and AI agents use them
A bot needs to sign orders day and night, so its key lives on a server. If that key could withdraw, anyone who stole it could empty the account. An API wallet limits the damage to trading: a stolen key could place bad trades, but could not move your funds out. That is why most Hyperliquid trading bots, terminals and AI agents ask you to approve one rather than hand over your main key, and why you should still revoke any you no longer trust.
Senpi doesn’t use API wallets
Senpi never asks you to approve an API wallet on your account, and your agent holds no key of any kind. Each strategy runs in its own dedicated Hyperliquid account, a strategy wallet you fund from your Senpi main wallet. The agent sends instructions to Senpi’s backend, and signing happens inside Privy’s enclave, from that strategy wallet only and under policy. How the main wallet and strategy wallets fit together is in wallet architecture and inter-wallet transfers. Compared side by side:
| Hyperliquid API wallet | Senpi strategy wallet | |
|---|---|---|
| What it trades from | Your whole account balance: perps, spot and HIP-3, leverage changes included | One dedicated account per strategy, holding only the budget you gave it; your main wallet is never tradeable by the agent |
| How many things can run | One key per bot, four slots per account | As many strategies as you want in parallel, from templates, your own code or mirrors, each with its own account, PnL, leverage and stop rules, so you can compare them |
| Blast radius | A stolen key can trade your entire account against you | A strategy can lose at most the budget in its wallet; pausing or closing it returns the money to your main wallet |
| Where the key lives | On the bot’s server | Nowhere near the agent: its machine holds no key, which is why the October 2026 Railway exposure could not move funds; signing runs in Privy’s enclave and funds can only move between your own Senpi wallets |
| Expiry and revocation | Expires within 180 days; you have to remember to revoke it | A strategy stops when you pause or close it, and every approval is per action in the app |
| Withdrawals | Signed by your main wallet | Only in the Senpi app, with MFA |
Every protection, and the October hosting incident, is covered in is Senpi safe?.
Frequently asked questions
What is an API wallet on Hyperliquid?
A separate key, also called an agent wallet, that your main wallet approves to sign trading actions for your account or its sub-accounts; Senpi doesn’t use one and trades each strategy from its own strategy wallet instead. It lets bots and apps trade without your main private key.
Can a Hyperliquid API wallet withdraw funds?
No, and Senpi’s agent, which uses no API wallet, can’t withdraw either. Withdrawals and transfers to another address must be signed by the main wallet. An API wallet can trade and move funds between your own balances on the same account.
How many API wallets can I have on Hyperliquid?
One unnamed and up to three named API wallets per account, plus two named ones for each sub-account. Senpi needs none of them: each Senpi strategy gets its own strategy wallet, and you can run as many strategies as you want.
Do Hyperliquid API wallets expire?
They can, at most 180 days ahead; Senpi has none to expire, because each Senpi strategy runs from its own strategy wallet until you pause or close it. You set the expiry when approving, and a wallet is also dropped when it is replaced or when the account has no funds left.
How do I revoke a Hyperliquid API wallet?
Remove it on Hyperliquid’s API page in the app, or approve a new wallet with the same name, which replaces it; with Senpi there is nothing to revoke, because Senpi never asks you to approve one. Revoke any wallet a bot or app no longer needs.
Does Senpi use Hyperliquid API wallets?
No. Senpi never asks you to approve an API wallet. Each strategy runs in its own dedicated Hyperliquid account that you fund from your Senpi main wallet, so it can only trade the budget you gave it.
Can Senpi’s agent withdraw my funds?
No. Your agent holds no key at all: it sends instructions to Senpi’s backend, and signing happens in Privy’s enclave from each strategy wallet, where funds can only move between your own Senpi wallets. Withdrawals happen only in the Senpi app, with MFA.
Sources and date
Hyperliquid documentation: Nonces and API wallets; API exchange endpoint (approveAgent, withdraw3, agentSendAsset), Nov 9, 2026; Senpi’s is-senpi-safe and wallet architecture pages. Nothing on this page is financial advice.
Trade from dedicated strategy wallets
Fund each strategy from your main wallet and empty it back at any time; the agent never trades your main wallet.
Related articles
Hyperliquid funding, margin and liquidation explained
How Hyperliquid funding, margin modes and liquidation work, with Nov 2026 numbers and a worked $10,000 example. Fee tiers have their own page.
Hyperliquid fees explained (Nov 2026): maker, taker, builder fees
On a paid Senpi plan you pay only Hyperliquid’s fee. Hyperliquid’s fees on Nov 12, 2026: 0.045% taker, 0.015% maker, tiers, discounts, builder fees by app and HIP-3 rates.
Anthropic stock before the IPO: how to trade ANT now (Nov 2026)
You can trade Anthropic before its IPO: the ANT pre-IPO perp trades 24/7 on Hyperliquid and Senpi, long or short. How it’s priced, what happens at listing, the risks.
Hyperliquid order types: limit, market, stop, TP/SL, TWAP and more
Every Hyperliquid order type and option as of Nov 9, 2026: what each does, when to use it, and whether it pays the maker or the taker fee.