Connecting an exchange
Before fxyz can trade for you, it needs a trade-only credential at the venue. You give it that credential once; from then on, anything you build can place orders on your behalf.
The promise
fxyz can place trades. It cannot move your funds, on any venue.
This isn't a policy we have to enforce. It's a property of the venues' own protocols and our own code: withdrawal is not a capability fxyz has.
How that's enforced varies a little by exchange, because each one offers a different shape of credential. The summary:
| Venue | What you connect | What fxyz can do | Why funds stay yours |
|---|---|---|---|
| Hyperliquid | An on-chain "agent key" approved by your main wallet | Place, modify, cancel orders | The HL protocol restricts agents to trading. Withdrawals require your main wallet. |
| Lighter | An API key tied to your Lighter account | Place, modify, cancel orders | The Lighter L2 routes any withdrawal back to your registered L1 owner. |
| Pacifica | An API Agent Key bound to your Solana account | Place, modify, cancel orders | Pacifica's withdrawal endpoints have no destination field, so funds settle to your own Solana account. |
| Backpack | An API key generated in the Backpack UI | Place, modify, cancel orders | fxyz's client omits withdraw and transfer entirely. Set Backpack's withdrawal-address whitelist for a venue-side seal. |
| Binance | A restricted API key generated in Binance API Management | Place, modify, cancel orders on USDⓈ-M futures | The key must be IP-restricted and have withdrawals disabled. fxyz refuses to connect one that isn't. |
Backpack and Binance rely on how the key is restricted rather than on a protocol-level rule, so read per-exchange custody before connecting either.
You're in control
A few things to keep in mind regardless of which venue:
- Disconnect at any time. Each venue has a Disconnect button in fxyz, and clicking it drops our copy of the credential immediately. On Hyperliquid that's the whole job, because the disconnect signature turns the agent key off at the protocol level. On the API-key venues, also rotate or delete the key in the venue's own UI to kill the credential itself.
- Connecting one doesn't touch the others. Connecting Lighter doesn't change anything about your HL setup, and vice versa. Connect as many venues as you like.
- Connecting doesn't move money. No deposit is involved; you trade with whatever is already on the venue.
Walk-throughs
- Hyperliquid: on-chain agent-key approval.
- Lighter: paste an API key generated on Lighter.
- Pacifica: paste an agent key plus the Solana account it's bound to.
- Backpack: paste an API key generated on Backpack.
- Binance: create a restricted key in API Management, then paste it.
See Security for the bigger picture of how those credentials are stored.