What is oppen?
oppen is a local-first perpetual futures terminal built for agentic trading. AI agents are the primary traders: they connect through a built-in local MCP server and place orders, while the human operator supervises. A deterministic Rust core checks guardrails immediately before every order is signed, in code the model cannot reach or modify.
Is oppen an AI trading bot?
No. oppen ships no strategy, no signals and no default agent behaviour. It is the supervision layer an agent trades through, not the agent itself. You bring your own model or script, you write the guardrails, and oppen enforces them and logs every decision. Whether it makes money is entirely a function of the agent you bring.
Is oppen a DEX or an exchange?
No. oppen is a terminal that runs on your machine and routes orders to external venues. It operates no order book, matches no trades, and holds no funds. In v1 it connects to Hyperliquid, which is the decentralised exchange; oppen is the client, not the venue.
Can I use oppen with real money today?
No. oppen is pre-alpha and there is no public release. When it does ship, v1 targets Hyperliquid only and defaults to testnet, with mainnet as an explicit, persisted switch. The source opens at launch, Q4 2026.
How does oppen stop an AI agent from losing all my money?
Guardrails are deterministic checks evaluated in a Rust core over a fully constructed order, immediately before signing: a symbol allowlist, per-order and aggregate notional caps, an order rate limit, a maximum slippage bound, and a loss circuit breaker. If any check fails the order is not signed, and there is no override parameter or configuration surface the agent can reach. Evaluation fails closed, so stale market data or unreconciled state also blocks the order.
Does oppen hold my funds or my private keys?
No. Keys are generated on your machine and stored in your operating system's keychain. oppen never holds funds, never transmits a key, and has no backend to transmit one to. The key an agent signs with is a venue-level agent wallet that cannot withdraw, which is enforced by the venue's protocol rather than by oppen's own good behaviour.
What happens if the agent is jailbroken or prompt-injected?
The design assumption is that this will happen. A compromised agent can still only place orders that pass the guardrails, on the capital allocated to its own venue sub-account, and it cannot withdraw. The worst case is a bounded, attributable, fully logged trading loss rather than an open-ended one. That property depends on the venue protocol being correct, not on oppen being correct.
Can I connect Claude, ChatGPT or my own model?
Yes. oppen exposes a local MCP server, so any MCP-compatible client can connect, with Claude Code as the reference target. You can also run scripted strategies in Python or TypeScript against the local gateway. Your model provider API key stays on your device and is sent only to the provider you chose.
What does oppen not protect me from?
Three things, stated plainly. It does not protect a compromised host: an attacker with code execution and keychain access on your machine can trade within your guardrails. It does not remove venue risk, including oracle failure, forced deleveraging and protocol exploits. And it does not prevent loss: guardrails bound loss to the limits you set, so an operator who sets a 50% circuit breaker has authorised a 50% loss.
Does oppen collect any data about me?
No. There is no account, no backend, no telemetry, no crash reporting and no usage analytics. Your positions, orders, guardrails and decision ledger are stored locally on your own disk. Venue connections go directly from your machine to the venue, with oppen never in the path.
Which venues does oppen support?
Hyperliquid only in v1. Aster and Lighter are planned and the router abstraction is built for them, but neither is integrated and neither should be described as supported today.
What does oppen cost, and how is it licensed?
The software is free and licensed under Apache-2.0. Official builds attach a builder code to orders; that fee is small and bounded by a maximum rate you sign once during setup, which oppen cannot exceed without a new signature from your wallet. "oppen" is a trademark, so forks may be distributed freely under the licence but not under the oppen name.
Why is it called oppen?
After Oppenheimer. The team believes agents are going to reshape retail trading the way earlier technologies reshaped their fields, and treats that as a warning rather than a boast: the tools arrive whether or not anyone is careful with them. The position is that it is better to build the careful version, and better that the operator holds the keys.