Agent Kit (beta)
In one paragraph. The Trion Agent Kit is a beta, deployed 2026-09-24 and open to any wallet since 2026-09-26, that lets a developer's code or an AI assistant trade the CMPT-USD perpetual inside limits the account owner sets. It ships as three pieces: a TypeScript SDK (@trion/sdk), a Python SDK (trion), and a remote MCP server at https://api.trion.market/mcp that Claude and ChatGPT connect to over OAuth 2.1. Every path is built on an agent grant: the owner's wallet signs once to authorize a separate agent key that can place orders but can never withdraw funds, and the owner can revoke it at any time. The CMPT-USD perpetual it trades is in open beta.
What it is
| Component | What it does | Who uses it |
|---|---|---|
TypeScript SDK (@trion/sdk) | Markets, books, trades, orders, positions, streams and agent grants from Node or Bun | Developers' own bots and scripts |
Python SDK (trion) | The same surface for Python 3.11+, with Decimal-only money | Python bots and research |
| MCP server | https://api.trion.market/mcp — an OAuth 2.1-protected MCP server exposing 11 read and trade tools | Claude, ChatGPT and other AI assistants |
The packages are not published yet: @trion/sdk is not on npm, and trion on PyPI is not this SDK. Publication is pending during the beta. The TypeScript SDK and Python SDK pages show the API so you can evaluate it; there is nothing to install yet.
Who it is for
- Traders who want an AI assistant (Claude, ChatGPT) to read the market and place orders on their behalf, inside limits they choose.
- Builders who want a typed SDK that handles order signing, epochs and settlement, so they write strategy instead of plumbing.
- Teams that want to delegate narrowly-scoped trading to a bot or a colleague without handing over withdrawal authority.
The security model
- Non-custodial agent keys. An agent key signs orders for the owner's account, but it is not the owner's wallet. Withdrawals are bound to the owner wallet on chain (
PerpetualV2.withdrawismsg.sender-bound), so an agent key can never move funds out. - Grant bounds. Every agent key is authorized by an EIP-712
AgentGrantsigned by the owner, with a max order size (maxOrderQty), a max position (maxPositionLots), a reduce-only flag, and an expiry of up to 180 days. The matcher enforces every bound on every order. - Revocable. The owner (or the agent itself) can revoke at any time; the agent's resting orders are cancelled at once and its access ends within ~30 s.
See Agent grants and limits for the full contract.
Verified on production (2026-09-24)
A scripted end-to-end run against https://api.trion.market (market CMPT-USD, mark $2.3543) exercised the whole kit. Highlights:
- MCP
tools/listreturned 11 tools —get_markets,get_orderbook,get_account,get_positions,get_open_orders,get_fills,get_grant,place_order,cancel_order,cancel_all,close_position. - Bounds hold. An order above the grant's max size was refused with
AGENT_LIMIT; a read-only token gotinsufficient_scopewhen it tried to trade. - Revocation works. Revoking a grant cancels the agent's orders at once and AI access ends within 30 s (token introspection cache).
Timings below are single-run lab numbers, not guarantees:
| Measurement | Value |
|---|---|
| TypeScript SDK full delegated round-trip (create → register → order → cancel → revoke) | ~1.1 s (lab, 2026-09-24) |
| Python SDK full delegated round-trip | ~1.6 s (lab, 2026-09-24) |
| OAuth token exchange | ~47 ms (lab, 2026-09-24) |
MCP place_order | ~100 ms (lab, 2026-09-24) |
The full trace is in docs/perf/runs/2026-09-24-agent-kit-e2e/README.md.
Status and how access works
- The Agent Kit is in beta: deployed to production on 2026-09-24 and, since 2026-09-26, open to any wallet. The OAuth connect page no longer keeps an invite list, so
NOT_INVITEDshould no longer occur. - The SDK path registers grants directly with the perp matcher (
POST /v1/agents), which has no invite list of its own; delegated trading only requires the matcher's agent grants to be enabled, which they are for the beta. - The CMPT-USD perpetual it trades is in open beta: operator-cleared, 0% fees and no funding. Choose sizing leverage from 1x to 20x in 0.1 steps. Margin is tiered by position size; see Margin and liquidation. New open interest across all users is admitted up to $500, with an on-chain hard cap of $1,000 and a $2,000 notional cap per account. Caps may change. At 20x, about a 1.5% adverse move from entry can bring the position to maintenance and trigger liquidation. Gaps can liquidate at worse prices. Trade at app.trion.market.
- Simplest way to try it without code: the desk's AI Chat button (Trion AI chat, sign in with OpenRouter) or the account menu's Use Trion in ChatGPT / Claude; see Connect an AI assistant (MCP).
- Questions: contact Trion on X: @TrionTrades.
Where to go next
- Connect an AI assistant (MCP) — wire Claude or ChatGPT to your account.
- TypeScript SDK and Python SDK — the two SDKs.
- Agent grants and limits — the grant contract and its enforcement.
- Deployment and launch status — what is live on chain.
Source trail: docs/developers/agent-access.md (design contract), docs/developers/ai-clients.md (client matrix), docs/perf/runs/2026-09-24-agent-kit-e2e/README.md (production verification), overdrive/exchange/sdk/README.md, overdrive/sdk-python/README.md, overdrive/exchange/mcp/README.md, overdrive/exchange/matcher/src/perp-routes.ts (/v1/agents, agentGrantsEnabled).
Repository-owned documentation · October 2026 · Educational material, not investment advice and not an audit.