Questions, answered straight.

Not yet. Guard is being built. Its risk engine, the sizing from the stop, the daily loss stop and the drawdown halt already run in Zunder's own trading system; the proxy that puts them in front of your bot is in progress. You can join the waitlist for early access.

On this site today: the backtest and the watch steps run in your browser, and the live market section shows how Guard judges trades. All three read Hyperliquid’s public data and judge it with Guard’s risk engine, compiled to WebAssembly, in your browser.

Planned: anything that can point its Hyperliquid client at a custom URL. Guard will speak Hyperliquid's own API on your machine (for example http://127.0.0.1:8547), so your bot changes a few settings (the URL, the key Guard gives it, isolated margin) and keeps its logic.

The plan covers ccxt and the bots built on it (such as Freqtrade), the official Hyperliquid Python and TypeScript SDKs, MCP clients, and your own scripts. Each integration gets a one-page guide once we have tested it. Until then, read this list as planned, not verified.

Keep the limits outside the agent, and give it tools that cannot break them. A prompt is not a limit: a model can misread a number, loop, or be talked out of an instruction.

The plan for Guard 1.0 is an MCP server (zunder-guard mcp). Its tools read the account and the limits, ask what Guard would allow for a trade, place, amend and close orders, and pull the kill switch. No tool can raise a limit, loosen a stop or resume after a halt, and every order the agent sends passes the same rules as any bot's. It is planned for MCP clients such as Claude Desktop, Claude Code and Cursor. None of it is released yet.

0.02% of each order’s value that Guard sends to Hyperliquid on mainnet, as a builder fee: $2 on a $10,000 order, win or lose. That is the default plan, Pay per order: open to anyone and anonymous, with no subscription, no sign-up, no account and no personal data. Paper trading and testnet are always free.

If your bot trades more than about $870k a month, a flat licence is cheaper: Pro €149 a month for up to 3 accounts, Fund €690 a month for up to 20 accounts with priority email support; a year costs ten months. Bot platforms can share the fee through their own builder code. A licence turns off the fee and nothing else, and when it ends, Guard falls back to the fee and keeps protecting you.

Licences are sold to businesses, self-service, paid in USDC: buy a licence. Guard itself comes with its first release; join the waitlist before Guard 1.0.0 and you get Pro free for 3 months. Plans and the calculator.

A builder fee is a per-order fee that Hyperliquid lets an app attach to the orders it sends for a user. The user approves a maximum fee once with their main wallet and can revoke the approval at any time. Hyperliquid collects the fee with the trade and credits it to the app's builder address. Hyperliquid caps builder fees at 0.1% on perps and 1% on spot.

Guard's fee is 0.02% of each order’s value that it sends to Hyperliquid, on mainnet. Hyperliquid collects it only after you have approved it once with your main wallet, and you can revoke that approval at any time. Without the approval, Guard opens no new positions and says why; closing orders always go. Zunder Labs never holds your funds. A busy bot can turn the fee off with a flat licence: see pricing.

No: source-available. Guard will be published under the Elastic License 2.0. You can read the code, run it and change it for your own trading. You may not offer it to others as a hosted service, or remove or work around the per-order fee, which is built in as licence-key functionality.

To run Guard without the fee, get a licence: see pricing.

Put the check outside the bot's own logic. A limit written into the strategy fails together with it: a restart resets counters kept in memory, and a bug can skip the check entirely.

A daily loss limit needs three things: the account's equity at the start of the UTC day, a check before every new order that refuses it once the day's loss reaches your limit, and a halt that survives restarts. A kill switch is the same mechanism pulled by hand: it refuses every new order at once.

That is what Guard is built to do in front of your bot (planned for Guard 1.0). It reads equity from Hyperliquid and from its own record and uses the riskier of the two, and refuses new entries once the day's loss reaches your daily loss stop (default 6%). A restart never resets a stop. The daily stop clears at the next UTC day; a drawdown halt (default 25% below the peak) waits for a human.

Until Guard ships, Watch can warn you in the browser when one of your bot's trades breaks a rule. It cannot block anything.

Safer than your main key, but not harmless. An API wallet is a separate key that your main wallet approves to trade for the account. It can place and cancel orders; it cannot withdraw or transfer funds.

So a leaked API wallet key cannot take your funds out directly, but whoever holds it can still trade your account into losses: open oversized positions, or buy an illiquid market at a bad price from themselves.

Keep it away from code you do not fully trust. With Guard (planned), the API wallet key stays inside Guard on your machine. Your bot gets a separate client key issued by Guard, which Hyperliquid does not accept on its own, and every order still has to pass your limits. If you think a key has leaked, replace that API wallet.

No. Guard runs on your machine or your own server, not ours. Your funds stay in your Hyperliquid account. The only key Guard uses is an API wallet key that you create and that cannot withdraw. It stays on your machine, and we never see it.

Zunder Labs runs no service that holds a key or can place an order. This website reads public data only: no wallet connection, no signature, no key. The one exception is the fee approval at /approve, which asks your main wallet to sign Hyperliquid's ApproveBuilderFee message (to approve the fee, or to withdraw the approval at 0%) and nothing else.

No. Guard is a risk tool. It enforces limits you set on orders your bot or agent has already decided to send: it sizes them, adds a missing stop or refuses them. It gives no signals, no investment advice, and promises no returns.

No. It is a what-if. It replays an address's trades twice: once as they happened, once behind your rules.

• Skipping or shrinking a trade can change what the bot would have done next; the replay cannot know that.
• Prices, fees and funding after a skipped trade are taken from the real history.
• Losses are capped at the stop only where the bot actually had one.
• Results include fees and funding as Hyperliquid recorded them.

Backtest replays the last 30, 90 or 180 days of an address (90 by default) from Hyperliquid’s public data and lists what the replay had to assume.

About 3 ms per order. Guard follows your account on Hyperliquid's live account stream, so it judges an order on your real positions without asking Hyperliquid first. Run it in Tokyo, next to Hyperliquid, and your order reaches the exchange in about 5 ms. What that covers and how it was measured: the latency benchmark.