Is Hyperliquid safe to connect to an AI agent?

What an AI agent can do

• Live vs paper: live; public testnet (api.hyperliquid-testnet.xyz) source
• Order approval: On-chain order-book exchange (self-custodial wallet, no KYC account); API wallets/agent keys can trade but not withdraw; no first-party MCP found, community MCPs exist; verify any third-party server before giving it a key source
• Markets: crypto perpetuals, crypto spot (on-chain)
• Pricing: no API fee; maker/taker fees per Hyperliquid fee docs

Safeguards that exist

• Paper, demo or testnet mode: Paper, demo or testnet mode available source
• Withdrawal permission needed or allowed: Withdrawal not needed: Not possible: agent wallets cannot withdraw or transfer source
• Scoped keys, permission scopes or IP whitelisting: API (agent) wallets can trade for your account without withdrawal permissions (official docs) source

Safeguards that are missing

• Can it place live orders unattended?: Can place live orders with no documented approval step source
• Order approval or confirmation options: No approval or limit option in our listing source
• Open source or audited: No public source code in our listing source

Sources

• https://hyperliquid.gitbook.io/hyperliquid-docs/for-developers/api/rate-limits-and-user-limits
• https://app.hyperliquid.xyz/API

Full listing: Hyperliquid · How the score works: Safety score method