Trade with AI.
Never lose control.
git clone https://node.gitlawb.com/z6MksSLzbTjj4VQMQiUCsJ5Nhh3PTB3Y3Put2tUJLxe8wMo6/koyal.gitcd koyal && ./install.shbuilds from source · no prebuilt binaries · then koyal doctor
Open on gitlawbOne vision. Two surfaces.
Harness for control. App for command. Models propose — policies constrain — you arm live when ready.
Trading Harness
Zero-overhead Rust control plane. Prompt → draft → TradeGate → fleet. Shadow mode, OOB approvals, MCP gateway — single binary under 50MB.
AI Trading App
Multi-chain wallet, portfolio pulse, AI companion. Review proposals and steer the fleet without surrendering keys to a black box.
Full tick path. Zero signatures. Would-trade only.
Soul, memories, learnings composed every tick.
Priority routing, failover, encrypted credentials.
Twenty commands. Total control.
Every surface — chat, web, MCP agents — funnels into the same gated CLI pipeline. What you can type, you can audit.
Your fleet, in your pocket
The human surface on the harness — portfolio, chat, and approvals wherever you are.
Solana, ETH, Base, Arbitrum, HyperEVM — unified net worth.
Talk to your self-hosted gateway about positions and risk.
Every proposal surfaces for approve or reject.
Non-custodial surface. Policies live in the harness.
From idea to fleet — without black boxes
Every step is inspectable, reversible, and permissioned.
Strategy Desk
Describe your edge in natural language. The desk compiles venues, pairs, risk limits, and loop blueprints.
Draft bot
Bot lands as draft with wallet roles unset. Humans and MCP agents share the same gated pipeline.
TradeGate + Shadow
Size, slippage, exposure, and venue checks. Shadow mode dry-runs the full path with zero signatures.
Monitor · Halt
Tick health, PnL, per-bot controls, global kill switch. Approvals fail closed on live capital.
Autonomous ≠ unsupervised
AI speed with institutional guardrails. Capital only moves on explicit paths.
- ✓PermissionEngine: Agent → Bot → Wallet roles
- ✓TradeGate: size · slippage · exposure · venue/pair
- ✓OOB approvals + fill reconcile
- ✓Shadow mode: full path, zero signatures
- ✓Global halt — one command freezes everything
Eleven crates. One harness.
A trait-bound Rust workspace. Hover any crate to inspect its role in the pipeline.
CoreHarness + PermissionEngine v2 + tick loop + bible compose + RAG. Every run loads soul, memories, learnings, and bot-scoped loops.
Multi-chain by design
First-class adapters — not afterthoughts. Typed crates for every venue.
Jupiter v6 · pump.fun · Meteora · Raydium
alloy · Uniswap v3/v4 · multi-RPC
Perps · positions · leverage
CLOB · conditional tokens
Permission-gated AI is the only way institutions will let agents near capital.
Operator thesisControl planeShadow mode through production code paths beats paper trading in a sandbox.
Risk engineeringDry-run fidelityMCP agents should share the same TradeGate as the human desk — not a side door.
IntegrationMCP-readyLocal-first harness, mobile surface — speed without surrendering custody.
ProductDual surface
Control planes, compared
Black-box bots ask for your keys. Scripts give you no guardrails. Koyal is the middle path: AI speed, institutional constraints.
| Capability | koyal | Bot SaaS | Raw scripts |
|---|---|---|---|
| Self-hosted, local-first | |||
| Non-custodial by defaultdiy key handling | |||
| Permission-gated execution (TradeGate)size · slippage · exposure · venue | |||
| Shadow mode on production paths | |||
| MCP agents share the human pipeline | |||
| 55+ AI providers with failover | |||
| Multi-chain venues (SOL · EVM · HL · PM) | |||
| Global kill switch | |||
| Single auditable binary | |||
| Open source (MIT / Apache-2.0) |
Shipping relentlessly
Highlights from the v0.1.0 cycle — straight from the changelog.
Live execute path — OOB approvals + reconcile + shadow
- OOB approval on execute — ApprovalPlane oneshot, fail-closed 120s timeout
- Fill reconcile before journaling — unverified fills never book positions
- TradeMode::Shadow — full path, would-trade metrics, zero signatures
Prompt → bot → monitor, one pipeline
- compile_prompt: natural language → style, venues, pairs, risk, checklist
- Shared deploy_strategy_inner for HTTP and MCP setup_bot
- Fleet monitor: lifecycle, PnL, equity sparklines, per-bot halt
Trader harness hardening
- CAS loop claims — no double-fire of the same agent loop
- Gateway security headers + SSRF guard + protected fs paths
- Bot-scoped tools with venue fail-closed
Control-desk upgrades
- TradingDesk: quote → propose → approve/execute on home
- WS-driven ActivityFeed + sidebar status strip
- g-Key navigation + expanded ⌘K palette (tick / halt / flatten / doctor)
CoinGecko + DefiLlama tools
- Prices, markets, trending, history via CoinGecko
- Protocols, TVL, yields, fees via DefiLlama
- Keyless public endpoints; keys raise rate limits
Low-cost tx fees + custom RPC
- FeePreference economy default; EIP-1559 plans with L2 tip caps
- Jupiter auto priority + dynamic CU limits
- Per-chain custom RPC with Test / Save / Clear
Source of truth on a decentralized git network
Koyal lives on gitlawb — clone, install, and push without a central forge. Operators and coding agents share the same DID-native workflow.
Repo identity is a did:key. Pushes are Ed25519-signed — not a corporate SaaS username.
install.sh uses dist/bin/<target>/koyal when present. Apple Silicon installs in seconds.
Identity, register, PRs, and git-remote-gitlawb — same network for agents and humans.
Decentralized node, no single point of failure for the product distribution story.
git clone https://node.gitlawb.com/z6MksSLzbTjj4VQMQiUCsJ5Nhh3PTB3Y3Put2tUJLxe8wMo6/koyal.gitcd koyal && ./install.shthen: export PATH="$HOME/.koyal/bin:$PATH" · koyal doctor
Clone. Build. Tick.
Source on gitlawb — decentralized git, keypair identity, no single point of failure.
git clone https://node.gitlawb.com/z6MksSLzbTjj4VQMQiUCsJ5Nhh3PTB3Y3Put2tUJLxe8wMo6/koyal.gitcd koyal && ./install.shgitlawb · prebuilt arm64 when present, else cargo from source
verify: koyal doctor → {"status":"ok","harness":"rust"} · SHA256SUMS + CycloneDX SBOM per release
Read the manual
Operator-grade documentation for every layer of the harness.
11-crate workspace, trait hierarchy, permission model.
Doctor, gateway, connect, trade, halt — operator surface.
Light feature pages for product, system, and stack.
Decentralized source, DID identity, fast install path.
Clone + install.sh — prebuilt arm64 when available.
Permission-gated harness vs chat wrappers and paper sandboxes.
Solana, EVM, Hyperliquid, Polymarket, Robinhood Chain.
Decentralized git, keypair identity, MIT / Apache-2.0.
Questions, answered
Custody, safety rails, venues, and operations — the things traders actually ask before arming capital.
The thesis
AI should accelerate traders — not replace judgment.
Models propose. Policies constrain. You decide when capital moves.