Getting started
What exactly is FortFi?
FortFi is the trading account for the AI era. Trade anything from one account: perps on crypto, stocks, commodities, and pre-IPO names, cross-chain swaps, and yield. Control it by voice, chat, or connect your own agents through MCP, the REST API, and SDKs.
Think of it as the online brokerage account you already know, rebuilt on crypto rails and AI native. One login, one portfolio, every market. The difference: you keep the keys.
What can I trade?
- Perps on Hyperliquid. Go long or short on crypto, plus perp markets that track stocks, commodities, and pre-IPO names where Hyperliquid lists them. These are perpetual futures that follow the price. You do not own the underlying shares.
- Swaps and bridges. Same-chain swaps and cross-chain routes across 11 supported networks, from one balance view.
- Yield. Deposit stablecoins and other assets into onchain lending vaults and withdraw when you want.
- Prediction markets where available in your region.
Who is FortFi for?
- Traders who want one account for perps, swaps, and yield instead of a CEX tab, a bridge tab, and a wallet tab.
- People who want AI help checking positions, drafting trades, and moving money by voice or chat, with every action reviewed before it runs.
- Builders running their own agents who want to plug them into a real trading account without handing over a private key.
Running a team or a platform? See For teams and builders below.
Is FortFi a broker?
No. FortFi feels like a brokerage account, but it is self-custodial software. FortFi is not a broker, bank, exchange, or custodian. Your assets sit in wallets you control on public blockchains, and trades settle onchain or on the venue you choose, such as Hyperliquid. Accounts are not SIPC or FDIC insured.
How do voice, chat, and agents work?
FortFi Assist lets you check balances and positions and draft trades, swaps, and sends by typing or speaking. You can also connect your own agents through MCP, the REST API, or SDKs with a scoped credential.
Either way, every money action becomes an intent that runs through your policy first: trusted recipients, spend caps, and co-sign rules. Agents never get your private keys.
What does "you keep the keys" mean?
FortFi is self-custody. There is no seed phrase to write down. You sign in with a passkey, and your wallet's signing keys are held in Turnkey's secure enclave (TEE) infrastructure, not on FortFi's app servers. Your wallet needs two approvals: your passkey (or a scoped credential you created) and FortFi's policy check. Neither can move funds alone. You can export your recovery phrase from Security while FortFi is running; export also needs FortFi's approval today, so keep an exported copy if you want a path that does not depend on FortFi.
How is it different from Coinbase, MetaMask, or Ledger?
- Coinbase and exchanges are custodial. They hold your keys. If the exchange is hacked, goes insolvent, or freezes your account, you have little recourse.
- MetaMask and browser wallets keep a seed phrase in a browser extension that every site you visit can prompt. Blind signing and malicious approvals are easy.
- Hardware wallets (Ledger, Trezor) are safer than a browser wallet, but still rely on one seed phrase with no limits, trusted recipients, or co-signers.
FortFi gives you the one-account experience of a brokerage with self-custody underneath: passkey sign-in, no seed phrase, trusted recipients, spend limits, optional co-signers, and a full activity log. Perps, swaps, and yield live in the same place instead of across five apps.
What happens if FortFi shuts down?
Your funds are on public blockchains and your signing keys are in Turnkey's TEE infrastructure, not in FortFi's custody. You can export your keys from Security and use them in any compatible wallet. See our continuity runbook for step-by-step recovery.
Why does funding ask for identity verification?
Identity verification (KYC) is required by FortFi's funding partners (Coinbase, Transak) to comply with financial regulations when enabling fiat deposits or crypto purchases. FortFi never sees or stores your ID documents; that process is handled entirely by the funding provider. Availability also varies by region; Coinbase and Transak determine which payment methods and countries are supported.
What is in the account?
One passkey login and wallets on Base, Ethereum, Solana, BNB Chain, Hyperliquid, Avalanche, Arbitrum, Optimism, and Polygon, and more, shown as a single portfolio. From there you can fund in and cash out, trade perps, swap and bridge, earn yield, and send to trusted recipients. Every money action is an ActionIntent: policy check, disclosed fees, your confirmation, execution, and an immutable audit trail.
See also our security model.
Trade, swap, and bridge under one security model
Trade Hyperliquid perps from the same account that holds your spot balances. Same-chain swaps via CoW (including limit orders, slippage controls, and GTC). Cross-chain via 1inch Fusion+ and deBridge, including routes to Hyperliquid and other networks most wallets do not offer natively. Every trade, swap, and bridge uses the same review-and-sign discipline as a send.
Long-tail tokens show up in search. Verified labels mark assets with stronger market-data signals; unverified picks require an explicit acknowledgment before you can quote, so you cannot accidentally swap into a look-alike scam without seeing it.
Hyperliquid: deposit and withdraw (perps margin)
FortFi Perps is margin trading only. Hyperliquid Spot inside the app is a staging rail (for example after card buy), not spot market trading.
Deposit to tradable balance is a guided two-step story: get USDC onto Hyperliquid (HyperEVM wallet or card into HL Spot), then activate it into perps margin with your passkey. HyperEVM may require approve plus deposit; HL Spot requires one internal transfer to margin.
Withdraw to HyperEVM reverses that path in two Hyperliquid steps: tradable margin USDC to HL Spot, then send to your same FortFi address on HyperEVM. There is no single signature shortcut on Hyperliquid for that path. FortFi does not use Arbitrum L1 withdraw for cash out.
FortFi's second passkey vote on money moves only applies to signing requests that match what the server prepared after policy checks. If anything differs, co-sign is denied and you start the flow again.
Fund in and cash out
On supported chains, tap Fund on any account. Coinbase Hosted Onramp opens in a secure flow: pull from your Coinbase balance (crypto you already hold, cash on Coinbase, or linked bank where available), or buy with debit card or Apple Pay when those rails are offered for your region. FortFi never holds your fiat. Settlement lands in your wallet on that chain.
When you are ready to exit, Cash out sends you through Coinbase Offramp: bank transfer (ACH), PayPal, or back to your Coinbase balance where available. Availability, limits, KYC, and fees follow Coinbase and your region, not FortFi.
See Legal: Funding and Legal: Cash out for the full disclaimer.
AI chat and voice: it works for you, never holds your keys
FortFi Assist can check balances, token holdings, and portfolio PnL; draft sends, swaps, and bridges; and help open accounts on supported chains via chat or voice. It creates intents only. Policies must pass and you approve with your passkey before anything settles.
Can I connect my own AI agents?
Yes. Connect any agent to your trading account over MCP, the REST API, or SDKs, and pay per call over x402 if you want. The agent authenticates with a scoped credential you create. It can read balances, holdings, and PnL, and propose trades, swaps, bridges, and sends to trusted recipients only. It never touches your signing keys.
Every agent action runs through the limits you set before execution: allowlists, per-transaction and daily caps, and co-signer thresholds. An agent cannot loosen a rule without a fresh signature from your wallet. A stolen API key can at worst spend within the budget you gave it, never rewrite the rules.
Is this just another agent wallet?
No. Most agent wallets hand the agent a private key. FortFi gives the agent access to your account with explicit limits: what it can trade, how much, to whom, and when a human has to approve.
What happens when an agent gets something wrong?
Agents operate inside caps and allowlists. Large or unusual moves require co-sign. Every action is logged. The agent can be wrong without draining your account.
See the REST API docs (Swagger UI), the Agents page for MCP and x402, and the security model for how agent permissions and signatures work.
How is FortFi like an online brokerage, but on crypto rails?
| Online brokerage account | FortFi |
|---|---|
| One login, one portfolio | Passkey login, wallets on every major chain, one portfolio view |
| Stocks, options, futures | Perps on crypto, stocks, commodities, and pre-IPO names; swaps; yield |
| Deposit / withdraw to bank | Fund from Coinbase balance, card, or Apple Pay; cash out via ACH (Coinbase Offramp) |
| Trading API | MCP, REST API, SDKs, and x402 for your own agents |
| Fraud alerts and limits | Policy engine, trusted recipients, co-signers |
| Broker holds your assets | Two approvals on every move: your passkey and FortFi's policy check (TEE signing, audit trail) |
FortFi is not a broker, bank, custodian, or licensed money transmitter. Not SIPC or FDIC insured. Alpha software; see Terms.
Keys, co-signers, and recovery
FortFi accounts are not hot wallets. Signing keys live in TEE enclaves via Turnkey and are never shown as seed phrases in the UI. If you lose a device, a backup passkey restores access, so there is no seed phrase to lose.
Want true multisig? Add one or more co-signers with configurable approval thresholds to your accounts and to your agents. No contracts to deploy.
Custody & signing
No seed phrases in the UX. Signing material runs in hardened TEE infrastructure via Turnkey; keys do not live on ordinary app servers used for browsing.
Dual authorization (new wallets): signing needs your passkey plus FortFi's co-signer key. In the app, FortFi runs policy checks (allowlist, limits, cooling-off on new recipients) before it asks you to sign. FortFi does not move funds from these wallets without your passkey, unless you enable agent access with a scoped API key.
Fees
FortFi has no monthly subscription for retail trading accounts. We earn disclosed fees when you trade, swap, or bridge. The exact amount is shown in Preview order before you sign.
You always see network (gas) and protocol fees before you sign a swap or bridge. FortFi can sponsor network fees via Turnkey on Base, BNB Chain, Ethereum, Polygon, Arbitrum, Gnosis, and Solana mainnet so your first sends and swaps are not blocked for lack of native ETH, BNB, xDAI, or SOL. Sponsorship is a convenience perk during alpha; availability may vary by network and account.
Fee schedule
What's live vs coming next
Live in private alpha
- Vault accounts on major chains with passkey login, no seed phrase to expose
- Unified balances, accounts, and token holdings across chains (Explore)
- Fund from Coinbase, card, or Apple Pay; cash out to bank or PayPal where Coinbase supports your region
- Send only to allowlisted recipients, with limits and review before money moves
- Same-chain swaps and cross-chain bridges in-app, with unverified tokens flagged before you trade
- Yield on Morpho vaults (USDC/USDT) on Base, Ethereum, Arbitrum, Polygon, Optimism, and Hyperliquid, same policy engine as sends
- Sponsored gas on Base, Ethereum, Polygon, Arbitrum, Gnosis, and Solana (via Turnkey; availability may vary)
- Human co-signers and configurable approval thresholds on your accounts
- Backup passkey recovery if you lose a device, not a seed phrase
- FortFi Assist by chat (and voice when enabled on your deployment)
- Developer MCP for passkey accounts; autonomous agents via x402 onboarding, and you approve every move
- Immutable audit trail on security events and money actions
- Spend tab (Gnosis Pay virtual cards): early-access beta; partner onboarding and KYC required
Coming next
- Native trading: Perps and deeper flows on Hyperliquid and other supported networks, same vault security, richer markets (Trading tab preview in app).
- Prediction markets: Polymarket and similar venues inside FortFi, same vault and policy, without connecting a hot wallet to third-party sites.
- Business & team accounts: Shared treasuries, role-based seats, and multi-approver workflows built on the co-signer controls you already have.
Multichain
Balances are partitioned per account and chain. Controls apply per wallet. Supported today:
- Base
- Solana
- Hyperliquid
- Ethereum
- Polygon
- BNB Chain
- Avalanche
- MegaETH
- Robinhood Chain
- Optimism
- Arbitrum
Security first
- Passkeys: device-bound cryptography, not reused passwords from leaked databases.
- Allowlisted recipients: wire-style beneficiary controls, enforced before payouts route.
- Intent pipeline: no silent transfers; review, log, then execute.
- Dual authorization: passkey + FortFi co-approval on signing for new wallets.
- Ledger + audit trail: material state changes recorded together.
- Session timeout: automatic sign-out after inactivity, like a banking app. See Security.
For teams and builders
Can a team or platform run many accounts?
Yes. Create an account for each customer or desk (idempotent on customer ID), tag by product or region, and apply the same caps, allowlists, co-sign rules, and audit trail across all of them. Operators use the portal; your backend uses REST and MCP.
For fleet pricing and pilots, contact us.
Can I accept stablecoin payments?
Yes. Payment links, products, and merchant webhooks are available for businesses that take stablecoins, including from agents that pay over x402. Incoming funds land in the same account and follow the same policy and audit trail.
How is FortFi different from Safe or Fireblocks?
Safe is a free multisig primitive you assemble and maintain yourself. Fireblocks is enterprise custody that starts around $18K a year. FortFi sits between them: self-custody like Safe, governance discipline like Fireblocks, with passkey sign-in in minutes, multichain out of the box, co-signer approvals, and one policy engine for your team and your AI agents. No contracts to deploy, no enterprise contract to sign.
What is execution-time authorization?
FortFi does not only ask who has access. It checks whether this specific action is allowed right now: amount, recipient, asset, chain, actor, approval state, and policy. That matters for agents because a human may approve a budget once while the agent acts later. When an old approval quietly outlives its context, that is authorization drift; execution-time checks close it.
How does alpha access work?
Join the waitlist on the home page. We review submissions and invite in small cohorts. If approved, you receive an email with a private alpha code to unlock passkey sign-in.
That invite arrives from [email protected] (automated, no reply inbox). If it lands in spam, mark it as not spam once so future FortFi mail routes correctly.
Contact & email from FortFi
FortFi LLC operates FortFi. Questions, alpha issues, or security concerns: [email protected]. A human on the FortFi team reads that inbox.
Official support for FortFi LLC is [email protected]. Automated FortFi messages (alpha invites, co-signer alerts, security notices) are sent from [email protected] only. We never ask for your passkey, seed phrase, or transfer codes by email.