Linking your Polymarket account
How the Polymarket signer key onboarding works, what we store, and why you cannot lose funds through us.
Last updated July 28, 2026 · Read as markdown
The security model in one paragraph
Polymarket exposes a signer key — a separate credential from your main wallet — that authorises order placement and position reads, but NOT withdrawals. You paste this key into Polyterminus once. We encrypt it at rest with AES-256-GCM, key held in Google Secret Manager. Every order we send to Polymarket is signed with your key on-the-fly. If we vanished tonight, your funds and open positions on Polymarket would be exactly where you left them.
Step-by-step
- Open polymarket.com/profile and log in.
- Find the API keys / signer section (Polymarket changes location occasionally — search "API" in the settings).
- Create a new signer key. Save it somewhere safe.
- Return to app.polyterminus.com/app/onboarding.
- Paste the key. We show you the wallet address it maps to for confirmation.
What can Polyterminus do with the key?
- ✅ Place BUY / SELL orders
- ✅ Cancel orders
- ✅ Read your positions and balances
- ❌ Withdraw USDC or move funds off Polymarket
- ❌ Sign non-order transactions
What we store
- Your encrypted signer key (AES-256-GCM, key in Secret Manager)
- Your Polymarket wallet address (public — nothing sensitive)
- Order history that you generated through Polyterminus (for the ledger)
How to revoke
Rotate or delete the signer key on Polymarket's side. Instantly Polyterminus loses trading access. We also expose a "Disconnect" button in Account → Polymarket that deletes our copy of the encrypted key.