1. Connect a venue
Last updated:
CRYPTON never asks for your seed phrase. What is stored is a delegated signing key: it places and cancels orders in your account, but cannot withdraw. You generate it on the venue and revoke it there whenever you want, without going through us.
| Venue | What it asks for | Worth knowing |
|---|---|---|
| Hyperliquid | API wallet — cannot withdraw | Has a public testnet: the best place to try a bot risking nothing. |
| Lighter | Account index + API key | Leverage is set per market before the bot is created. |
| Aster | EIP-712 API wallet — cannot withdraw | Position and margin mode must be set per market. |
The connection is verified before being saved, with a read-only call. If the credential does not work, it is not stored.
How the key is stored
With envelope encryption: each credential is encrypted with a unique data key, and that key with the server master key. A database dump without the master key cannot sign a single order. Decryption happens only in the memory of the process running your bot.