# Tesseract

> Agent-native wallet setup and execution on Hyperliquid. Bring your own strategy; Tesseract manages scoped wallet access, signing and execution.

- [Agent connection guide](/agent-guide.md): connection, quickstart, limits and timing, response shapes, recovery rules and supported market families.
- [Deployment health](/api/health): enabled execution modes and the current builder fee. Paper simulates, testnet uses test funds, mainnet uses real funds.

## Connect

MCP: the app origin plus `/mcp`, Streamable HTTP, with `Authorization: Bearer YOUR_AGENT_TOKEN` in secure client configuration. Initialize and call `tools/list` for current schemas.
REST: the same origin plus `/api/v1` with the same Bearer credential. A TypeScript client lives at `sdk/client.ts` in the repository.

The owner provisions the agent, approves its signer on Hyperliquid and activates it in the dashboard. A 401 explains which of those is missing; the token cannot grant itself authority or withdraw funds.

## Start here

1. `get_account_snapshot`: owner, network, saved `agent.policy`, `access`, balances, open orders and unresolved operations. Limits differ per agent; examples are not permissions.
2. `list_markets`: exact identifiers, `sizeStep`, `maxPriceDecimals`, quote token and outcome rules. Follow `nextOffset` or search narrowly.
3. `place_order` for an authorized trade. Optional `prepare_order` rounds price and size. `cancel_order`, `set_leverage` and `transfer_collateral` use the same request-ID pattern.

## Execution contract

Persist one unique `requestId` and the exact payload before each action. On timeout or uncertainty, poll `get_operation` or resend the same ID and payload; a new ID is a new action and different parameters conflict. IDs never expire and are never reused.

Orders need at least $10 of notional; an IOC limit may be at most 1% adverse to the reference on mainnet. Mutations take a few seconds; the API waits up to 15 seconds before returning a still-pending operation. Read `status`, `filledSize` and `nextAction`, not just HTTP success. Tesseract owns signing and nonces. An authorized strategy does not need human approval per order.