Non-custodial trading automation: your keys, your exchange, no deposits

Key takeaways

1. 1Non-custodial means your funds stay on your own exchange account or wallet, never with the bot service.
2. 2The service only holds a restricted key that can trade but cannot withdraw.
3. 3It removes custody and commingling risk, not trading risk.

Two models of trading automation

TensorTrader is non-custodial. You never deposit anything with TensorTrader. Your money stays on Binance, Hyperliquid, Interactive Brokers or whichever venue you choose, in an account in your name, and TensorTrader places orders there with a key that can trade but cannot withdraw.

custodial

You deposit funds with the bot service or a pooled account; it trades them for you

non-custodial

Funds stay on your own exchange account or wallet; the service only sends orders with a restricted key

What non-custodial protects you from

1. 1The service going out of business with your funds.
2. 2A breach of the service turning into theft, because its keys cannot withdraw.
3. 3Commingling: your balance is never pooled with other users’ funds.
4. 4Lock-in: you can revoke the key and keep trading the account by hand at any time.

What it does not protect you from

Non-custodial is about who holds the money, not whether trades are good. A bad strategy loses money on your own account just as surely. The exchange itself remains a counterparty for centralized venues; decentralized venues replace that with smart-contract and chain risk. And the service still holds a key that can trade, so its security still matters. Non-custodial removes the largest risk; it does not remove every risk.

How it works in practice

On centralized exchanges you create a trade-only API key and paste it into Exchange Auth. On decentralized venues you approve an agent wallet with your own wallet; you never paste a seed. On Interactive Brokers you register an OAuth consumer. In every case, TensorTrader can place, amend and cancel orders and read balances and fills. It cannot move funds out, and it books every result from the venue's own fill records.

Checking a service is really non-custodial

1. 1You are never asked to deposit funds with the service.
2. 2The keys it asks for have no withdrawal permission.
3. 3On DEXs it asks for an agent approval, not your seed phrase.
4. 4You can see every order on the exchange’s own history.

Custody across venue types

In all three, the venue’s own statements are the record of truth. TensorTrader reconciles against them and books every closed trade from the venue’s fills, so you never have to trust a second ledger.

centralized exchange

Funds in your exchange account; TensorTrader holds a trade-only API key

decentralized exchange

Funds in your own wallet address; TensorTrader holds a restricted agent key

broker (IBKR, Alpaca)

Funds in your brokerage account; TensorTrader holds an OAuth consumer or paper API key

Questions to ask any automation service

1. 1Where exactly are my funds held, and in whose name?
2. 2Which permissions do your keys need, and why?
3. 3What happens to my open positions if your service goes down?
4. 4How do I revoke access in one step?

Frequently asked questions

Does TensorTrader ever hold my money?

No. Funds stay on your own exchange or wallet; TensorTrader only sends orders.

Can I stop using TensorTrader and keep my positions?

Yes. Revoke the key; positions stay on your exchange account and you manage them directly.

Is a centralized exchange account non-custodial?

No, the exchange holds your funds. The automation is non-custodial because TensorTrader never holds them; your trust in the exchange itself is a separate decision.

Is a DEX agent key the same as giving away my wallet?

No. The agent can trade for your address but cannot withdraw or transfer, and you can replace it at any time.

Keep reading

• Crypto trading automation, paper first: the complete guide

  How to automate crypto trading without losing your shirt: key safety, testnets, market regimes, DCA, leverage, fees, backtests versus forward tests, choosing a platform, and our own honest results.

• Trade-only API keys: which permissions to enable, and which never to enable

  A plain guide to exchange API key permissions for trading bots: what trade, read, transfer and withdraw mean, the passphrase exchanges, IP allow-lists and DEX agent keys.

• What is a Hyperliquid API (agent) wallet, and is it safe?

  A Hyperliquid API wallet is a separate key your main wallet authorizes to trade but never withdraw. Here is how it works, what it can and cannot do, and how TensorTrader creates one without ever seeing your seed phrase.

• Crypto trading bot security checklist: 15 checks before you go live

  A practical security checklist for automated crypto trading: keys, secrets, webhooks, leverage, monitoring and what a trustworthy bot service must never do.