Add credential setup tools for all trading platforms (Binance, Bybit, Hyperliquid, MEXC, Betfair)

Users can now send their API keys via chat and the bot stores them encrypted.
Added proper TypeScript interfaces for each platform's credentials.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Author: alsk1992

package-lock.json

@@ -1,6 +1,6 @@
 {
   "name": "clodds",
-  "version": "1.7.4",
+  "version": "1.7.5",
   "description": "Open-source AI trading terminal. Trade Polymarket, Kalshi, Betfair, Binance, Bybit, Hyperliquid, Solana DEXs from Telegram, Discord, Slack or web. Arbitrage detection, whale tracking, copy trading, perpetual futures up to 200x, DeFi swaps, MEV protection. Self-hosted, 119 skills, powered by Claude.",
   "main": "dist/index.js",
   "bin": {

package.json

@@ -7499,6 +7499,66 @@ function buildTools(): ToolDefinition[] {
         required: ['api_key'],
       },
     },
+    {
+      name: 'setup_binance_credentials',
+      description: 'Set up Binance Futures trading credentials. Required before trading futures on Binance.',
+      input_schema: {
+        type: 'object',
+        properties: {
+          api_key: { type: 'string', description: 'Binance API key' },
+          api_secret: { type: 'string', description: 'Binance API secret' },
+        },
+        required: ['api_key', 'api_secret'],
+      },
+    },
+    {
+      name: 'setup_bybit_credentials',
+      description: 'Set up Bybit Futures trading credentials. Required before trading futures on Bybit.',
+      input_schema: {
+        type: 'object',
+        properties: {
+          api_key: { type: 'string', description: 'Bybit API key' },
+          api_secret: { type: 'string', description: 'Bybit API secret' },
+        },
+        required: ['api_key', 'api_secret'],
+      },
+    },
+    {
+      name: 'setup_hyperliquid_credentials',
+      description: 'Set up Hyperliquid trading credentials. Required before trading on Hyperliquid.',
+      input_schema: {
+        type: 'object',
+        properties: {
+          private_key: { type: 'string', description: 'Ethereum private key (0x...) for signing' },
+          wallet_address: { type: 'string', description: 'Wallet address (0x...)' },
+        },
+        required: ['private_key'],
+      },
+    },
+    {
+      name: 'setup_mexc_credentials',
+      description: 'Set up MEXC Futures trading credentials. Required before trading futures on MEXC.',
+      input_schema: {
+        type: 'object',
+        properties: {
+          api_key: { type: 'string', description: 'MEXC API key' },
+          api_secret: { type: 'string', description: 'MEXC API secret' },
+        },
+        required: ['api_key', 'api_secret'],
+      },
+    },
+    {
+      name: 'setup_betfair_credentials',
+      description: 'Set up Betfair trading credentials. Required before trading on Betfair.',
+      input_schema: {
+        type: 'object',
+        properties: {
+          app_key: { type: 'string', description: 'Betfair application key' },
+          session_token: { type: 'string', description: 'Betfair session token (SSOID)' },
+        },
+        required: ['app_key', 'session_token'],
+      },
+    },
     {
       name: 'list_trading_credentials',
       description: 'List which platforms the user has trading credentials set up for',
@@ -7516,7 +7576,7 @@ function buildTools(): ToolDefinition[] {
           platform: {
             type: 'string',
             description: 'Platform to delete credentials for',
-            enum: ['polymarket', 'kalshi', 'manifold'],
+            enum: ['polymarket', 'kalshi', 'manifold', 'binance', 'bybit', 'hyperliquid', 'mexc', 'betfair'],
           },
         },
         required: ['platform'],
@@ -9794,6 +9854,61 @@ async function executeTool(
         });
       }
 
+      case 'setup_binance_credentials': {
+        await context.credentials.setCredentials(userId, 'binance', {
+          apiKey: toolInput.api_key as string,
+          apiSecret: toolInput.api_secret as string,
+        });
+        return JSON.stringify({
+          result: 'Binance credentials saved! You can now trade futures on Binance.',
+          security_notice: 'Your credentials are encrypted with AES-256-GCM. Use IP-restricted API keys for maximum security.',
+        });
+      }
+
+      case 'setup_bybit_credentials': {
+        await context.credentials.setCredentials(userId, 'bybit', {
+          apiKey: toolInput.api_key as string,
+          apiSecret: toolInput.api_secret as string,
+        });
+        return JSON.stringify({
+          result: 'Bybit credentials saved! You can now trade futures on Bybit.',
+          security_notice: 'Your credentials are encrypted with AES-256-GCM. Use IP-restricted API keys for maximum security.',
+        });
+      }
+
+      case 'setup_hyperliquid_credentials': {
+        await context.credentials.setCredentials(userId, 'hyperliquid', {
+          privateKey: toolInput.private_key as string,
+          walletAddress: (toolInput.wallet_address as string) || '',
+        });
+        return JSON.stringify({
+          result: 'Hyperliquid credentials saved! You can now trade on Hyperliquid.',
+          security_notice: 'Your private key is encrypted with AES-256-GCM. Consider using a dedicated trading wallet.',
+        });
+      }
+
+      case 'setup_mexc_credentials': {
+        await context.credentials.setCredentials(userId, 'mexc', {
+          apiKey: toolInput.api_key as string,
+          apiSecret: toolInput.api_secret as string,
+        });
+        return JSON.stringify({
+          result: 'MEXC credentials saved! You can now trade futures on MEXC.',
+          security_notice: 'Your credentials are encrypted with AES-256-GCM. Use IP-restricted API keys for maximum security.',
+        });
+      }
+
+      case 'setup_betfair_credentials': {
+        await context.credentials.setCredentials(userId, 'betfair', {
+          appKey: toolInput.app_key as string,
+          sessionToken: toolInput.session_token as string,
+        });
+        return JSON.stringify({
+          result: 'Betfair credentials saved! You can now trade on Betfair.',
+          security_notice: 'Your credentials are encrypted with AES-256-GCM. Session tokens expire — you may need to refresh periodically.',
+        });
+      }
+
       case 'list_trading_credentials': {
         const platforms = await context.credentials.listUserPlatforms(userId);
 

src/agents/index.ts

@@ -466,8 +466,15 @@ export const CORE_TOOL_NAMES = new Set([
   'save_session_checkpoint',
   'restore_session_checkpoint',
 
-  // Credentials (3) — always available so bot can onboard users naturally
+  // Credentials (10) — always available so bot can onboard users naturally
   'setup_polymarket_credentials',
+  'setup_kalshi_credentials',
+  'setup_manifold_credentials',
+  'setup_binance_credentials',
+  'setup_bybit_credentials',
+  'setup_hyperliquid_credentials',
+  'setup_mexc_credentials',
+  'setup_betfair_credentials',
   'list_trading_credentials',
   'delete_trading_credentials',
 

src/agents/tool-registry.ts

@@ -17,6 +17,11 @@ import {
   PolymarketCredentials,
   KalshiCredentials,
   ManifoldCredentials,
+  BinanceCredentials,
+  BybitCredentials,
+  HyperliquidCredentials,
+  MexcCredentials,
+  BetfairCredentials,
 } from '../types.js';
 import { Database } from '../db/index.js';
 import { logger } from '../utils/logger.js';
@@ -103,7 +108,7 @@ export interface CredentialsManager {
   setCredentials: (
     userId: string,
     platform: Platform,
-    credentials: PolymarketCredentials | KalshiCredentials | ManifoldCredentials
+    credentials: PolymarketCredentials | KalshiCredentials | ManifoldCredentials | BinanceCredentials | BybitCredentials | HyperliquidCredentials | MexcCredentials | BetfairCredentials
   ) => Promise<void>;
 
   /**

src/credentials/index.ts

@@ -285,6 +285,42 @@ export interface ManifoldCredentials {
   apiKey: string;
 }
 
+/**
+ * Binance credentials (decrypted form)
+ */
+export interface BinanceCredentials {
+  apiKey: string;
+  apiSecret: string;
+  testnet?: boolean;
+}
+
+/**
+ * Bybit credentials (decrypted form)
+ */
+export interface BybitCredentials {
+  apiKey: string;
+  apiSecret: string;
+  testnet?: boolean;
+}
+
+/**
+ * Hyperliquid credentials (decrypted form)
+ */
+export interface HyperliquidCredentials {
+  privateKey: string;
+  walletAddress?: string;
+  vaultAddress?: string;
+  testnet?: boolean;
+}
+
+/**
+ * MEXC credentials (decrypted form)
+ */
+export interface MexcCredentials {
+  apiKey: string;
+  apiSecret: string;
+}
+
 /**
  * Betfair credentials (decrypted form)
  */
@@ -358,6 +394,10 @@ export type PlatformCredentials =
   | { platform: 'polymarket'; data: PolymarketCredentials }
   | { platform: 'kalshi'; data: KalshiCredentials }
   | { platform: 'manifold'; data: ManifoldCredentials }
+  | { platform: 'binance'; data: BinanceCredentials }
+  | { platform: 'bybit'; data: BybitCredentials }
+  | { platform: 'hyperliquid'; data: HyperliquidCredentials }
+  | { platform: 'mexc'; data: MexcCredentials }
   | { platform: 'betfair'; data: BetfairCredentials }
   | { platform: 'drift'; data: DriftCredentials }
   | { platform: 'smarkets'; data: SmarketsCredentials }
@@ -551,7 +591,7 @@ export interface CredentialsManager {
   setCredentials: (
     userId: string,
     platform: Platform,
-    credentials: PolymarketCredentials | KalshiCredentials | ManifoldCredentials
+    credentials: PolymarketCredentials | KalshiCredentials | ManifoldCredentials | BinanceCredentials | BybitCredentials | HyperliquidCredentials | MexcCredentials | BetfairCredentials
   ) => Promise<void>;
   getCredentials: <T>(userId: string, platform: Platform) => Promise<T | null>;
   hasCredentials: (userId: string, platform: Platform) => Promise<boolean>;