Skip to main content
In short: you want an AI agent to run DeFi for you, like lending, providing liquidity, swapping, trading perpetuals or moving USDC between networks, without handing your money to anyone. You describe what you want in plain words, and nothing spends until you start it. Your money stays in an account that belongs to you, and you can take it out with your own wallet, without our help and with our servers switched off. Money you send to a trading venue such as Hyperliquid or Lighter sits at that venue, under its rules as well as ours. This is an agentic wallet: an account an AI agent can act from on your behalf, inside limits that the network enforces and our software does not. It is non-custodial in a way you can test: you can take everything out with your own wallet, without our help and with our servers switched off. In chat, the agent writes a strategy card: English rules that wait for a condition, a price or a clock. You backtest the card, approve it with your signature and start it. Workflows can still start on a schedule, at a price, or when another workflow finishes. Nothing is agreed in advance for a workflow. Each time one fires, the plan is rebuilt and priced against the market at that moment. Your funds stay in an account on the blockchain that belongs to you. You can take them out at any time with your own wallet, without our help and without our servers running.

Quickstart

Connect a wallet, add money, describe a strategy, press Run.

Strategy cards

Write a rule in chat, backtest it, approve it, run it on paper or live.

Trading venues

Binance (demo only), Hyperliquid and Lighter: who holds which key.

Words we use

Network, workflow, plan, step, run. Read this first if the other pages feel dense.

FAQ

Custody, getting your money out, and what happens when something breaks.

Every operation

The full list, generated from the running system.

​
What it can do

It does three kinds of work. It acts, across 80 operations on 11 protocols and venues, on Ethereum, Base, Arbitrum and HyperEVM. It trades perpetuals at venues you connect. And it answers questions by reading recorded market history (2,625 data feeds), without spending anything.

​
Things it does

Buying an option is yours to do. The system does not reach an options venue, so a plan that includes a put marks that step as yours. The step sits in the plan so the hedge is written in the right order beside the position it protects. The run does not wait for it, and it cannot check that you placed it.
Leverage magnifies losses as well as gains. Leveraged liquidity positions and leveraged perpetuals can lose money fast. Make sure you understand that before you use them.
A crossing lands in your account, not in your wallet. It costs up to 1% of the amount, and the amount that lands is smaller than the amount that left. Plans are built around the wait, so a step on the far side cannot start early.

​
Things it tells you

None of these spend anything or sign anything. They read market history that is recorded on a schedule, so the same question asked twice gives the same answer. How far back each stream reaches, and where it stops, is on what we hold. How live data reaches a card is on the feed runtime.
Ask these before you act, because the numbers that are easiest to find are usually the wrong ones. A pool’s advertised rate is the last 24 hours across the whole pool, while your money sits in a price range that earns nothing on any day the price leaves it. One real position collected 57.9% in fees over a year and still finished down 6.4%, because the two assets it held moved apart underneath it.

​
What it can do that you cannot

Some of this cannot be done by hand at all. Moving a loan is the clearest case. To repay a loan you need your collateral back. To get your collateral back you must repay the loan. On your own, the collateral stays locked until the loan is repaid, and the only way out is finding the entire loan amount somewhere else first. DeFiLoops borrows the money, moves the loan, and repays the borrowing inside a single transaction. Either all of it happens or none of it does, and your account never holds the borrowed money. Three more work the same way:
  • Steps that belong together become one transaction. “Give permission, then supply” as one transaction means the permission cannot outlive a supply that failed. It is also cheaper: on a real plan, three transactions became two.
  • A step can spend what the step before it produced. Nobody knows how much a swap returns until it runs. By hand you wait for it to land, read the number, and type it into the next transaction. Here the next step reads it directly.
  • The order is worked out for you. Steps that do not depend on each other run at the same time instead of queueing.
A card or a chain of workflows can also act on a clock or at a price, so a sequence that would take a week of watching runs without you.

​
Your money

​
The account is yours

Your account address is worked out from your own address by a fixed calculation. It is the same address on every network, and it exists before anything is deployed to it. There is no deposit step, no vault of ours, and no address of ours that your money passes through. Two other keys touch that account. Neither can hold a token. One is the agent, which approves what your strategy does and can do nothing else. The other pays network fees and has authority over nothing. You can take everything out with your own wallet, without asking us, and without our servers running. → Your account and your keys

​
The agent is a contract, and its key sits in an enclave

Your account gives permission to an agent contract, and it cannot give that permission to a plain key. The signing key on our side lives inside a hardware enclave, a sealed computer that signs a step only if the step passes a fixed policy. The only thing that key can do is tell the agent contract to make one call. The agent has no way to run a raw call on your account. It can call only an approved operation, and each operation takes labelled fields, never a target and never an instruction. It cannot set a destination: each one is named by what it is, such as your own account, and looked up from your account when the step runs. A stolen key has nowhere to write an address of its own. Your account can never be re-pointed at a different agent. The first agent you approve stays, and the only permitted change is to no agent at all, which you make from your own wallet. → The hardware enclave
The agent can still make a bad trade inside those limits. Nothing caps how much one step moves unless you set a daily limit per token, and the app has no screen for that limit yet. A card or order may set a swap at most 1.5% below the market, but the enclave itself allows up to 3%. It also does not yet require proof that you asked for a run. Contract upgrades take effect at once on every network today, with no delay.Read Your account and your keys before you add money you would mind losing.

​
The rest of the docs

New operations are added over time. The catalogue is generated from the running system, so it is more current than this page.