AI AGENTS
Delegated operation, exact authority.
The MCP surface gives an agent the same exchange actions and private streams as the web, inside an explicitly signed capability policy.
Same venue, same rules
- Agents use the same market, order, receipt, position, and custody types as human-facing clients.
- Every action remains limited by the user's shielded authorization and the live capability registry.
- Agents never receive the shielded signing secret and never bypass proof or on-chain checks.
What an agent cannot do
An agent cannot forge an intent, redirect value, create a nonexistent fill, violate conservation or margin, or liquidate a healthy position.
Private automation
Agents receive only the private stream data and action scope the user authorizes. Public order terms remain visible on the lit book, while account ownership and clearing state retain the same privacy boundary as browser trading.