Skip to content
USENAMI / SIGNER

AI agents can't leak
your keys.

Your CEX & DEX API keys stay inside an AWS Nitro Enclave. Every order is checked against your policy (venue, action, and size) before a signature ever exists. A prompt-injected or compromised agent can propose a trade; it can't sign one outside your policy or touch a withdrawal at all.

Testnet·Invite-based·Open source
hosted service — status
Signer: hosted service paused since 21 Sep 2026.
# code and verification tools are public → github.com/namixai/signer
AWS Nitro Enclave
Signer hosted service: paused since 21 Sep 2026Open source · Apache-2.0Verify before you trust — no signup
The problem

Today, your agent holds the API key.

Every AI-agent framework that touches an exchange loads the key into the agent process — env vars, packages, tool calls, shell history. Signer moves it out of reach.

Prompt injection
A poisoned page or tool output tells your agent to leak secrets. There is nothing to leak — the key is not in the agent's reachable memory.
Supply-chain attack
A malicious dependency reads whatever the agent process can read. That no longer includes your exchange credential.
Infostealer malware
Searches .env, shell history, and process memory on the agent's host. Finds nothing usable — the key lives in another VM.
How it works

The key stays in the enclave. Always.

01
Your agent proposes an order
It calls place_order over MCP — from Claude Desktop, Cursor, ElizaOS, or any MCP-aware client. It never touches a credential.
02
The enclave checks the policy
Allowed venues, deny-by-default. Provisioned policy-wrapped tokens are bounded further — per-asset and per-period caps, fixed at onboarding.
03
The enclave signs — the key never leaves
The signing secret is used inside an AWS Nitro Enclave and never leaves it. The running code's PCR0 is published — verify it against AWS's signed attestation.
BinanceHMACHyperliquidEIP-712OKXHMAC
How Signer works →
Free · No signup

The funding rate terminal
traders actually use.

Live funding rates and a cross-exchange arbitrage scanner across Major CEX + DEX perpetuals venues.

usenami.io/terminal
Funding rate heatmap
8H1DAPY
Asset
Binance
Bybit
OKX
dYdX
HL
BTC
ETH
SOL
ARB
HYPE
Launch terminal Live rates·Major CEX + DEX
For design partners

Early access, provisioned per partner.

Signer runs with early design partners on testnet. Tell us what you trade and which venues you need, and we set up a policy-bound token. Your agent connects from any MCP client:

{
  "mcpServers": {
    "signer": {
      "command": "npx",
      "args": ["-y", "@usenami/signer-mcp"],
      "env": { "SIGNER_API_TOKEN": "<provisioned at onboarding>" }
    }
  }
}
npm: @usenami/signer-mcpgithub.com/namixai/signerAPI docs
Request accessRead the threat model →
or email [email protected]

Building an AI trading agent?

Keep the keys out of it. Request testnet access and trade through a policy-bound token your agent can't leak.

Request Signer access

Just need funding data?

Live funding rates and arb scanner across Major CEX + DEX venues. Free, no signup required.

Launch terminal