Session Keys and One-Click Perpetual Trading Permissions

Why normal Papertrade trading does not require a wallet popup for every position action.

Official Papertrade documentation · Updated November 5, 2026 · Canonical domain: papertrade.finance

Why one signature is enough

The app registers a scoped session key after the user signs with the connected wallet. That session key can then sign supported intents for a limited period.

What a session key can do

The supplied docs describe session-key use for opening and closing positions, position-related balance actions and PAPER staking flows.

What it cannot do

A session key cannot withdraw funds to an external destination without the user real wallet signature. The docs position this as a key boundary of the delegated session.

Expiry and revocation

The documentation describes seven-day session-key expiry and user-controlled revocation from the main wallet.

Session-key permission boundary

A session key is intended to reduce repeated wallet prompts for supported trading actions, but it should not be treated as a replacement for the wallet itself. The delegated key is constrained by the protocol's authorization model and is separate from withdrawal authority.

Operational security

Use session keys only from the official Papertrade domain and revoke or renew them when appropriate. A compromised browser session can still create trading risk even if the key cannot directly withdraw funds, because authorized trading actions can change positions, margin exposure and realised PnL.