Tria AI Agents Trade Perpetuals on Hyperliquid With Restricted Keys

Tria announced a feature on October 30 that allows AI agents to open and close perpetual futures positions from a user’s account on Hyperliquid and Decibel. The system uses dedicated keys that authorize trading actions without granting permission to withdraw assets.

Restricted Keys and Venue Support

The new feature supports trading on Hyperliquid and Decibel. According to the announcement, users can limit the duration for which a trading key remains active or revoke it entirely. Whether an agent requires approval for a specific trade depends on the connected tool and its configuration settings.

Tria’s API documentation states that both supported venues trade on mainnet and that there is no testnet target. The documentation clarifies that the available environment setting changes where builder or treasury fees are routed, rather than switching trades into a simulated market. This distinction means that a configuration appearing as a development setting may still authorize actual financial transactions on live markets.

The documentation also describes access to orders, fills, positions, and margin information. These records provide a basis for establishing what the system executed, offering more accountability than conversational responses that merely confirm an order was placed.

Operational Controls and Risk Management

While separating trading authority from withdrawal permissions prevents an agent from sending account assets to an unrelated wallet, the agent retains the ability to change the owner’s financial position. An incorrectly sized trade, repeated order, or unintended exposure can result in financial loss without any withdrawal taking place.

Revoking a key ends an agent’s ability to submit further authorized actions. However, revocation does not cancel every earlier order or close every existing position. Access control and the state of the trading account are distinct operational questions. A well-designed process must distinguish between stopping automation, cancelling outstanding orders, and closing exposure, as each action has different effects on market risk.

Monitoring must cover the sequence from instruction to execution. A tool may encounter a rejection or partial completion when attempting an order. The economically relevant result is the position and balance that remain, not merely the initial request. Permissions, trade size, approval settings, and reviewable records serve different purposes within a broader control system.