The wallet
Your wallet controls the account address and approves enrollment and on-chain value movement. Depending on how you enter Amethyst, the wallet may be embedded through Privy or connected through WalletConnect. Amethyst does not turn the wallet's signing key into a PERPL API credential.
The device trading key
Amethyst generates a separate Ed25519 key on the device. Your wallet signs a PERPL EIP-712 enrollment payload, and the device key signs a proof-of-possession. The enrolled key has read and trade scope. Its private key is stored in the iOS Keychain and is not sent to Amethyst's website or PERPL.
It can
- Authenticate signed PERPL account and history reads.
- Subscribe to authenticated trading updates.
- Place, cancel, and modify orders within the enrolled scope.
It cannot
- Withdraw or transfer funds through PERPL's API-key surface.
- Export or reveal the wallet's private key.
- Guarantee a fill, execution price, protocol response, or network outcome.
Funding and withdrawals
Account creation, token approvals, deposits, withdrawals, and wallet-to-wallet sends are explicit wallet-authorized transactions. Amethyst presents the transaction intent and follows on-chain receipts, but it cannot reverse finalized blockchain activity. The current TestFlight beta uses Monad mainnet, so these actions and their fees can have real value.
Local removal, server revocation, and a lost device
Removing the trading credential in Amethyst clears it from that device and restarts approval. It does not revoke or delete the corresponding server-side PERPL API key. Use PERPL API key management separately to review and revoke enrolled keys, including when the original device is lost or unavailable.
Infrastructure boundaries
Amethyst depends on PERPL APIs and exchange contracts, Monad RPC providers, wallet providers, Privy for hosted identity/embedded wallet paths, and Reown for WalletConnect paths. Outages, incompatible changes, congestion, and provider policy can affect availability. Amethyst does not operate PERPL or control its liquidity.
Report a security issue
Do not include private keys, seed phrases, signatures, API credentials, or unredacted balances. DM @theamethystapp on X with the app version, network, steps, and redacted evidence.