# Copy-trading infrastructure for Spot, Perps and Polymarket

For wallets, terminals and trading apps: your users copy vetted traders inside your product, you earn on every copied fill. Five API calls, non-custodial, free to integrate. A new revenue stream, live in days.

- [Try it free](https://www.unhosted.ai/partners): self-serve sandbox key in minutes, no invite
- [Read the docs](https://docs.unhosted.com/copy-trading) · [Complete integration instructions in one Markdown file](https://www.unhosted.ai/integrate.md) · [Developer portal](https://www.unhosted.ai/developers)

## The integration — five calls

```ts
// the whole integration, no venue branches
const venues = await client.listVenues()
const leaders = await client.listLeaders({ venue }) // graded, clean by default
const { agentId } = await client.createAgent({
  venue, leaderWalletAddress: leaders[0].address,
  riskConfig: { maxUsd: '500', copyPercent: 10 },
})
await client.activate(agentId, signer) // every venue
const { executions } = await client.listExecutions(agentId)
```

SDK: `npm install copytrading` (typed client + wallet orchestration).

## Venues, one handshake

- **Spot · EVM** (live): ERC-7579 smart session — spend cap, hard expiry.
- **Perps · Hyperliquid** (live): agent key the user approves and can revoke.
- **Predictions · Polymarket** (validating): session scoped to order signing, nothing else.

## The problem it removes

Building copy trading costs a year: four venue integrations with their own credential handshakes, expiry rules and failure modes; a custody model security has to sign off on; a grading engine that tells a profitable trader from a market maker; then permanent maintenance and monitoring. Meanwhile fee revenue is capped by attention — a manual trader fills orders in the minutes they watch the chart, a copy agent mirrors its leader around the clock. That build already exists here, running in production.

## Why partners add it

- **Earning from day one**: every mirror carries a builder fee inside the execution path — no pricing model to design, no billing to build. Partners keep 70% of the venue fees their flow generates (perps 0.10% Hyperliquid builder fee, spot 0.87% swap fee, live rates; Polymarket ~1% copy fee once the venue leaves sandbox). The exact split is set on your key.
- **Zero custody exposure**: you never hold user funds and neither do we. Withdrawing is impossible by construction, not by policy.
- **Months of venue work, skipped**: credential handshakes, expiry semantics and execution quirks are unified behind one adapter.

## Running in production

Our own products run on exactly the API you integrate: the Alpha terminal (unhosted.ai/alpha), copy trading and Unhosted Wallet. 5 calls to integrate · 4 venues, one handshake · 31+ intelligence endpoints · 0 critical audit findings.

## The intelligence layer ships with it

Your partner key also unlocks the Intelligence API — the engine that grades leaders, sizes copies and blocks trades that would lose your users money. Derived scores and verdicts over live on-chain data, served from a warm cache in ~10 ms (`/v1/wallet-overview`, `/v1/copy-decision`, `/v1/copy-simulate`, `/v1/smart-money-flow`, `/v1/token-risk`, `/v1/token-signal`, `/v1/wallet-health` and more — see the [OpenAPI spec](https://www.unhosted.ai/openapi.json)). Where AI is used it writes the rationale: one plain sentence over signals the engine already computed; it never invents a number and never sees raw provider data.

## Custody, by construction

The backend can submit trades on venues the user approved, mirror a leader within the user's risk caps, and skip a copy that would be worse than not trading (logged with a machine-readable reason). It can never withdraw or transfer funds out, exceed the session's spend cap or expiry, or act after the user revokes — sessions and agent keys die in the user's own wallet. 0 critical findings across every published audit; a 2025 independent security review and pentest of the backend services with every finding resolved; full reports public, including the separately audited smart-account contracts — [read the audit reports](https://docs.unhosted.com/wallet-sdk/audits). Partner keys are hashed at rest and shown exactly once; every user action is wallet-signed and replay-proof.

## The build you skip

Done for you: venue credential handshakes ×4, leader grading and copyability gates, execution engine with per-user risk caps, slippage and edge protection (skips, with reasons), credential-expiry lifecycle and renewal, gateway auth, metering and rate limits, sandbox with paper-mode execution. You build the UI.

## Free to integrate. Earning from your first fill.

1. **Sign up**: self-serve, no invite — key and partner console ready in minutes at [/partners](https://www.unhosted.ai/partners).
2. **Build in paper mode**: a scoped key against the sandbox — real leader data and the full activation flow, zero funds at risk.
3. **Go live**: flip to live execution when your flows are proven; metering, entitlements and your fee share are already on the key.

Prefer to talk first? [Book an integration call](https://calendly.com/unhosted/intro-call). Non-custodial by construction · typed SDK · REST · webhooks. © 2026 Unhosted.