Skip to main content

Python CLI for Hyperliquid DEX

Project description

Hyperliquid CLI (Python)

Installation

Install from git and also set up Bash completion with make install:

git clone https://github.com/haturatu/hl.git
cd hl
make install

Install from source for local development:

cd hl
pip install -e .

Install from PyPI:

pip install hyperliquid-cli-python

After installation, the hl command is available:

hl --help

Bash Completion

hl can print a Bash completion script for top-level commands and subcommands.

Note: pip install -e . and pip install hyperliquid-cli-python install the hl command, but they do not automatically enable Bash completion.

Enable it for the current shell:

eval "$(hl completion bash)"

Persist it in ~/.bashrc:

echo 'eval "$(hl completion bash)"' >> ~/.bashrc

If you want the old helper flow that also edits ~/.bashrc, make install still exists.

To remove the package and any managed ~/.bashrc completion line:

make uninstall

Global Options

  • --json Output JSON
  • --testnet Use testnet

Supported Commands

  • hl account add|ls|set-default|remove
  • hl account positions|orders|balances|portfolio
  • hl order ls|limit|market|tpsl|twap|twap-cancel|cancel|cancel-all|set-leverage|configure
  • hl asset price|book|leverage
  • hl markets ls|search
  • hl referral set|status

Configuration

  • DB: ~/.hl/hl.db
  • Order config: ~/.hl/order-config.json

Environment variable fallback (when DB account is not configured):

  • HYPERLIQUID_PRIVATE_KEY
  • HYPERLIQUID_WALLET_ADDRESS

Security Notes

Account data stored in ~/.hl/hl.db is encrypted at rest for these fields:

  • user_address
  • api_wallet_public_key
  • api_wallet_private_key

The current implementation derives a 32-byte key as follows:

  1. Resolve the command path used to run hl
  2. Hash that path with SHA-256
  3. Use the resulting digest as the ChaCha20 key

Each stored value is encrypted independently with its own random nonce.

This means:

  • the same installed command path can transparently decrypt the saved values
  • changing the executable path can make existing saved account data undecryptable
  • this is path-bound encryption, not password-based encryption

Example:

$ which hl
/home/haturatu/.local/bin/hl

If hl is installed at a user-local path like /home/haturatu/.local/bin/hl, then the encryption key is effectively tied to that installed command path. In normal usage, that often behaves like "the user who has this hl on their path can decrypt the DB". So in practice it can look close to per-user decryption when each user has their own home directory and their own local install path.

Important limitation:

  • this mechanism does not prove OS user identity by itself
  • if another OS user can both read ~/.hl/hl.db and execute the same hl binary path, path-based derivation alone does not prevent that user from decrypting the data

So this mechanism is mainly useful as a coupling between the saved DB contents and the specific installed command path. It helps prevent casual reuse of the DB from a different binary location, but it is not a substitute for filesystem permissions or disk encryption.

Environment variable fallback still exists when DB account data is not configured:

  • HYPERLIQUID_PRIVATE_KEY
  • HYPERLIQUID_WALLET_ADDRESS

These environment variables are not stored in the encrypted DB. They are read as plain process environment values at runtime.

Practical guidance:

  • Use wallets or API keys that would not be catastrophic if leaked
  • Restrict which OS user can run this tool
  • If you need stronger protection, use disk encryption as the higher-level control

Run for Development

cd hl
PYTHONPATH=src python -m hl_cli.cli.argparse_main --help

JSON Pattern Tests

tests/ validates that every subcommand pattern produces parseable raw JSON output in --json mode.

cd hl
PYTHONPATH=src python -m unittest -v tests.test_json_patterns

TWAP Orders

hyperliquid-python-sdk does not provide a high-level TWAP method, so this CLI signs and submits the official exchange actions twapOrder / twapCancel.

# 30-minute native TWAP
hl order twap buy 1.0 BTC 30

# Derive total TWAP size from USD margin (stake * leverage)
hl order twap buy 0 BTC 30 --stake 5

# Compatibility format: 5,10 is sent as total 50 minutes
hl order twap sell 2.0 ETH 5,10 --randomize

# Cancel TWAP
hl order twap-cancel BTC 12345

Stake-Based Orders

--stake is used by the CLI to derive order size.

  • If you pass --stake 50 --leverage 20, the CLI derives size from about $1000 of notional (50 * 20).
  • If you pass --stake 50 without --leverage, the CLI derives size from about $50 of notional.

Important: omitting --leverage does not mean your account or position is forced to 1x. It only means the CLI does not multiply --stake by leverage when calculating the order size. If the exchange/account already has leverage set for that asset, the resulting position can still show that existing leverage in hl account positions.

This means:

  • --stake 50 means the CLI sizes the order from about $50 of notional
  • --stake 50 --leverage 20 means about $1000 of position notional

So:

  • --leverage changes how --stake is converted into order size
  • existing leverage on the exchange can still affect margin usage and the leverage shown later in hl account positions
# No --leverage: CLI sizes the order from about $50 of BTC notional
hl order market buy BTC --stake 50

# No --leverage: CLI sizes the order from about $50 of ETH notional
hl order market buy ETH --stake 50

# With --leverage 20: CLI sizes the order from about $1,000 of BTC notional
hl order limit buy BTC 65000 --stake 50 --leverage 20 --cross

# With --leverage 20: CLI sizes the order from about $1,000 of BTC notional
hl order market buy BTC --stake 50 --leverage 20 --isolated

# Example:
# BTC at 69,000
# - --stake 50                 => about 0.000724 BTC of order size
# - --stake 50 --leverage 20   => about 0.01449 BTC
#
# ETH at 2,020
# - --stake 50                 => about 0.02475 ETH of order size
# - --stake 50 --leverage 20   => about 0.2475 ETH

# Set leverage and margin mode at order time
hl order limit buy BTC 65000 --stake 50 --leverage 20 --cross
hl order market buy BTC --stake 50 --leverage 20 --isolated

# Set leverage directly
hl order set-leverage BTC 20 --cross

# If leverage is invalid, show warning and retry with coin maxLeverage from /info type=meta
hl order set-leverage BTC 60

# Close full position by coin
hl order market close ETH
hl order market close xyz:TSLA

# Close 50% of a position
hl order market close ETH --ratio 0.5

# Set TP/SL trigger orders for an open position
hl order tpsl ETH --tp 1900 --sl 1800
hl order tpsl ETH --sl 1800 --ratio 0.5

Acknowledgments

This project is primarily a Python implementation of https://github.com/chrisling-dev/hyperliquid-cli. Some features, including the TWAP order implementation, are also based on ideas from https://github.com/ehfuzzz/hyperliquid-CLI.

This repository also includes changes such as expanded order subcommands, the --stake option, and additional market subcommand functionality.

At the moment, I am not fully sure how this should be handled from a licensing and attribution perspective, so this repository is being published under my BSD 2-Clause License as a temporary choice. If you have a better idea for the appropriate license notice or attribution, please open an issue.

Project details


Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Source Distribution

hyperliquid_cli_python-0.1.4.tar.gz (44.6 kB view details)

Uploaded Source

Built Distribution

If you're not sure about the file name format, learn more about wheel file names.

hyperliquid_cli_python-0.1.4-py3-none-any.whl (42.8 kB view details)

Uploaded Python 3

File details

Details for the file hyperliquid_cli_python-0.1.4.tar.gz.

File metadata

  • Download URL: hyperliquid_cli_python-0.1.4.tar.gz
  • Upload date:
  • Size: 44.6 kB
  • Tags: Source
  • Uploaded using Trusted Publishing? Yes
  • Uploaded via: twine/6.1.0 CPython/3.13.7

File hashes

Hashes for hyperliquid_cli_python-0.1.4.tar.gz
Algorithm Hash digest
SHA256 322e0e81bfaf4ff85ffcf8185fcf8882a125ddd1f0ec3839f207062bf94ca11d
MD5 e46cb22895ed4ed8cdee7035d44a3e22
BLAKE2b-256 355a6edaf8060a697939edc124a4112aff27ab085a8b0a46a3863923e2e751f9

See more details on using hashes here.

Provenance

The following attestation bundles were made for hyperliquid_cli_python-0.1.4.tar.gz:

Publisher: workflow.yml on haturatu/hl

Attestations: Values shown here reflect the state when the release was signed and may no longer be current.

File details

Details for the file hyperliquid_cli_python-0.1.4-py3-none-any.whl.

File metadata

File hashes

Hashes for hyperliquid_cli_python-0.1.4-py3-none-any.whl
Algorithm Hash digest
SHA256 e2ece7694fc23603f397ce9e8cf9883dbd6f472808f3619f2342b1b745a3917c
MD5 a65783d97be4630df28a19c1cc2c73f3
BLAKE2b-256 7d0f4fa70b7c2ce291cb47194c1817ac91787cf5faa559946d6ab856f9c9ad1d

See more details on using hashes here.

Provenance

The following attestation bundles were made for hyperliquid_cli_python-0.1.4-py3-none-any.whl:

Publisher: workflow.yml on haturatu/hl

Attestations: Values shown here reflect the state when the release was signed and may no longer be current.

Supported by

AWS Cloud computing and Security Sponsor Datadog Monitoring Depot Continuous Integration Fastly CDN Google Download Analytics Pingdom Monitoring Sentry Error logging StatusPage Status page