non-custodial execution layer · hyperliquid

The non-custodial execution layer your trading agent drives — on Hyperliquid.

brew install erickuhn19/tap/deliverator

go install github.com/erickuhn19/deliverator@latest

curl -fsSL https://deliverator.net/install.sh | sh

git clone https://github.com/erickuhn19/deliverator && cd deliverator && go build -o deliverator .

Go 1.25+ · macOS/Linux · no backend · no telemetry

A safe harness between your agent & the chain

Deliverator owns the hard, dangerous parts once — EIP-712 signing, nonce management, precision rounding, builder attach, risk caps, rate-limit pacing — and exposes them as a disciplined, machine-parseable CLI. Your agent decides what to trade; Deliverator makes sure the how is correct, bounded, and auditable.

Non-custodial by construction: it signs with an agent key that physically cannot withdraw. The worst a confused or compromised agent can do is place a bad trade — never move your funds.

Four steps to live

From zero to an agent trading your Hyperliquid account.

  1. 01

    Create your Hyperliquid account

    Sign up with the Deliverator referral — 4% off trading fees.

    Sign up for Hyperliquid
  2. 02

    Create an Agent API key

    In Hyperliquid: More → API → generate a wallet, then Authorize. (Or let deliverator onboard walk you through it.) The agent key trades but cannot withdraw.

    open the API page →
  3. 03

    Sign the builder code

    One signature in your own wallet authorizes Deliverator's tiny builder fee. No gas, no funds move — capped and revocable.

    sign the builder code →
  4. 04

    Install & trade

    Grab the binary, point your agent at deliverator tools, and go.

    install the CLI →

Built for an LLM, not a human

One JSON object per command. Branch on the exit code, never on prose. Hard risk caps live in core, before signing — a hallucination can't exceed them. The agent contract is the product.

Deterministic

One schema-v1 JSON envelope per command; NDJSON for streams; prices & sizes always strings.

Branchable

A documented exit code per outcome — 0 ok, 20 risk, 41 rate, 42 timeout, 50 reject…

Idempotent

Every write carries a client order id. The #1 way naive agents double-fill — closed.

Self-correcting

Errors are actionable text with concrete numbers, not stack traces.

Bounded

Hard risk caps + a dead-man's switch, halt, and panic. The agent key can't withdraw.

Self-describing

markets · schema · tools · version — capability discovered at runtime.

HUMAN MACHINE