Account & Wallet

Sign-in, roles, CLOB keys, and sessions

Connecting your wallet

AntFlow uses your wallet only to prove who you are. You sign a standard Sign-In With Ethereum (SIWE) message with Phantom or MetaMask; AntFlow never sees your seed phrase or private key, and your wallet never signs a trade directly.

  1. Install the Phantom or MetaMask browser extension (or a mobile app with a supported in-app browser).
  2. Click Connect on the sign-in screen.
  3. Approve the connection, then sign the sign-in message when prompted. This is the only signature needed to log in.
  4. After a successful signature, the server issues a session cookie (JWT). You stay signed in on that browser until the session ends or you sign out.

Onboarding

New users go through a short guided wizard. Progress is saved so you can pick up where you left off after a refresh or re-login.

  1. Connect wallet — connect and sign in with SIWE to get a secure session.
  2. Trading wallet is created for you — AntFlow automatically provisions a Polymarket deposit wallet — a smart-contract wallet that holds your trading balance and places orders on your behalf. The signing key behind it is generated and encrypted server-side; you never handle it. You can export it later from Settings → Wallet if you want to.
  3. Fund your wallet — your deposit address is shown with a copy button. Send any USDC on Polygon (native USDC or USDC.e) to it — AntFlow auto-converts the deposit to pUSD and sets up the required Polymarket approvals for you. Balances are displayed with a refresh button; you can skip and fund later.
  4. Pick a profile — choose a strategy profile (Orbit, Voyager, or Nova) to seed your risk and sizing defaults, and choose whether to turn on automation (requires a founding or paid subscription).

Deposits & withdrawals

AntFlow accepts any flavour of USDC on Polygon: native USDC, USDC.e (bridged), or pUSD (Polymarket's wrapped collateral). Deposits are auto-converted to tradeable pUSD in the background — you never need to wrap manually.

  • Deposit — send any USDC on Polygon (native USDC or USDC.e) to your deposit address, shown in Settings → Wallet. The status indicator changes from “Deposit detected — converting…” to “Trading balance ready.” once conversion completes. No separate gas token is required to deposit.
  • Withdraw — go to Settings → Wallet and use the Withdraw panel to move free collateral back to your login wallet. Withdrawals are gasless (no POL needed) and are capped at your free balance — pUSD not currently reserved by open orders.
  • Destination — withdrawals always go to the wallet you sign in with. The destination cannot be changed (anti-theft safeguard).
  • Rate limits — 5 withdrawals per hour; 3 key exports per hour.

Tip

You can deposit and withdraw at any time — there is no lock-up period. Withdrawals usually confirm on Polygon within a minute.

Roles

Access is role-based. Your role is assigned by an administrator.

  • user — Standard trading: your own positions, orders, settings, automation, and topics.
  • admin — Broader operational access where your deployment grants it (for example tenant or support tasks).
  • super_admin — Full platform administration across users and policies.

Tip

Day-to-day trading only requires the user role. Admin and super_admin are for operators running the service.

How trading credentials work

The execution engine talks to Polymarket's exchange using API credentials tied to your deposit wallet. For the standard deposit-wallet flow, these are generated and stored encrypted by AntFlow automatically during onboarding — there is nothing for you to set up. This is what lets the engine trade on your behalf, and automated strategies keep running, even while you're offline.

Warning

Simulation (dry-run) mode always works, regardless of wallet setup: risk checks and exit rules run as normal and orders are logged with a SIM badge, but no real order is sent.

Session & auto-reconnect

After SIWE, the app keeps you authenticated with an HTTP-only JWT cookie. Refreshing the page or reopening the tab usually keeps you signed in until the token expires or you clear cookies.

  • If the session expires, connect again and sign a new challenge.
  • Important actions may be recorded in audit logs for security and compliance.