Agents
Every action on Max Orion is signed. Signing each order by hand would put a wallet prompt between you and the book, so an agent signs on your behalf: a key generated and held by this browser, authorised once by your wallet.
Other venues call these API wallets. They are the same idea.
An agent can place, modify and close orders, and transfer USDT between your main wallet and your perpetual wallet.
An agent can also fetch your deposit address, which moves no money.
An agent cannot withdraw. Moving funds out of Max Orion always needs your own wallet.
Authorising an agent
Connecting MetaMask authorises one: it is the second of the two pop-ups in the connect dialog, shown as Step 2 of 2. You sign once; the agent signs from then on. See Quickstart.
An agent is valid for 30 days. Once it expires, an order cannot be signed with it, and a new one has to be authorised.
With MetaMask, if you skipped step 2 or your agent has expired, authorise one in either of these ways. Both ask for the same signature as step 2, and both appear only while you have no live agent: a second one in the same browser would add nothing.
- Open Agents and click Authorise agent.
- Click Establish connection in the order ticket.
With an email or Google wallet, the agent is authorised for you when you sign in, with no window to approve. If it expires while you are signed in, a new one is authorised just before your next order, so the order still goes through. The Agents page is not shown for those wallets, because there is nothing left to decide.
Disconnect does not throw the agent away. It stays on this device, so when you connect the same wallet again before the agent expires, the connect dialog asks for one signature instead of two.
Revoking an agent
Click Revoke on its row. The key stops being accepted immediately.
Agent states
| State | What it means |
|---|---|
| An expiry date | Live, and signing. The date is when it stops. |
| Unconfirmed | Approval was signed but never confirmed. It cannot sign. |
| Expired | Past its expiry. Authorise a new one. |
| Revoked | Ended by you. Nothing signed with it is accepted. |
The table lists the agents held by this browser. One you authorised on another device still works but is not listed here, which is why every row prints its full address — that is what you need to revoke it from wherever it was made.
The agent's private key never leaves this browser and is never displayed.