API Wallet Setup
How to set up a Hyperliquid API wallet for bot trading.
A Hyperliquid API wallet (also called an agent wallet) is a separate signing key that lets a trading bot place orders in your account without holding your withdrawal keys. This is the non-custodial foundation: the bot can trade but cannot withdraw funds. Here's how to create one, connect it to BullSpot, and revoke it when you're done.
What is a Hyperliquid API wallet?
Hyperliquid lets you create a separate wallet address that can place orders on behalf of your main account but cannot withdraw collateral. You generate the signing key locally, give the bot the private key to sign orders, and Hyperliquid enforces the no-withdrawal boundary on-chain.
This is different from a CEX API key where permissions are server-side: the Hyperliquid agent wallet is a blockchain address with provable on-chain restrictions.
Creating your API wallet
In the Hyperliquid web app, go to your account settings and select 'Create Agent Wallet' or 'Create API Wallet' (the labels vary by UI version). The app generates a new Ethereum-compatible keypair in your browser. Save the private key securely — you will paste it into BullSpot in the next step.
Once created, the agent wallet address appears in your account's approved-agent list. No funds live at this address; it is purely a signing identity.
Connecting the wallet to BullSpot
In the BullSpot dashboard, go to Settings → Hyperliquid Connection. Paste your agent wallet's private key into the encrypted credential field. BullSpot encrypts it at rest and uses it only to sign order messages sent to Hyperliquid's API.
After saving, the connection status shows 'Connected' and the agent can begin placing orders under your configured risk limits.
Revoking an API wallet
To disable the bot's access, go back to Hyperliquid's account settings and remove the agent wallet address from your approved-agent list. Once revoked on-chain, orders signed by that key are rejected by Hyperliquid. You can also delete the credential from BullSpot's settings, but the on-chain revocation is the authoritative cutoff.
Because the agent wallet holds no funds and cannot withdraw, revoking it is instant and final — no need to move collateral first.
FAQ
Can an API wallet withdraw my funds?
No. Hyperliquid agent wallets are on-chain restricted to trading actions (placing and canceling orders). Withdrawal permission stays with your main account keys, which BullSpot never sees.
What if I lose the API wallet private key?
Revoke the old agent wallet on Hyperliquid and create a new one. The lost key cannot withdraw funds, only place orders, so revoking it eliminates any risk.
Does BullSpot store my API wallet key?
Yes, encrypted at rest in the database so the agent can sign orders on your behalf. You can delete the credential from BullSpot settings at any time; revoking the agent wallet on Hyperliquid is the authoritative kill switch.
How is this different from a Binance or Coinbase API key?
Centralized exchange API keys rely on the exchange's server to enforce permissions. Hyperliquid agent wallets are blockchain addresses with on-chain permission rules that the protocol itself enforces. The custody boundary is cryptographic, not policy-based.
Which exchanges does BullSpot support?
BullSpot executes exclusively on Hyperliquid, a decentralized perpetual futures exchange. It does not place orders on centralized exchanges. This guide covers the Hyperliquid setup path.
What are the risks?
Substantial. Perpetual futures are leveraged instruments and you can lose your entire balance. Autonomous execution means trades can be placed without your prior review. Read the risk disclosure before connecting a funded account.
Related
Hyperliquid trading bot · AI crypto trading agent · AI Bitcoin analysis · Agentic trading · Risk disclosure