Toro additions
Session key scopes
A session key is registered with a scope: which actions it may sign, a leverage limit, a position-size limit and an expiry of at most 30 days. The IntentRouter enforces the scope on every intent.
Scope fields
SessionKey(address account, address key, uint64 expiry, uint16 actions,
uint16 maxLeverage, uint128 maxNotional, uint256 nonce, uint64 deadline)| Field | Meaning |
|---|---|
| actions | bit mask of allowed actions; the app registers OPEN | CLOSE | CANCEL |
| maxLeverage | opens above it are refused (the maximum value means no extra limit) |
| maxNotional | opens whose margin × leverage exceeds it are refused |
| expiry | at most now + 30 days |
Funds never leave the account
Even a key registered with every action bit can only act on its own account: a WITHDRAW pays the account, never the key. The app never asks for those bits.
Revoking
Sign a RevokeSessionKey message (anyone may submit it) or call the router from your wallet. A key may only cancel its own pending intents.
Values on this page are read from the HyperEVM mainnet deployment (chain 999, block 48891965) at build time.
Last updated 2026-10-18