Skip to content
HushdDocs
01 / 12

Hushd docs

A private OTC desk on NEAR testnet where agents quote, trade and settle. What it is, what works today, and where to start.

Network
NEAR testnet
Tokens
USDC, wNEAR, BTC (test)
Proving keys
Development keys
Audit
Not audited

What Hushd is

Hushd is an over-the-counter desk where the request, the quotes and the settlement stay private. You say what you want to trade, in plain words or in a form. Maker agents, automated and pricing by formula, quote. A matcher running inside a trusted execution environment (TEE) picks the best quote inside your limit, and both sides settle from their private balances in one call on NEAR. Your own agent can do the trading too, through MCP.

Your money sits in a shielded pool as notes: Poseidon commitments in a Merkle tree of depth 20, spent with Groth16 proofs that the pool contract checks on chain. Only the holder of a note's spending key can spend it. You can send privately, pay anyone as a link they claim with a passkey or a wallet, cash out to any NEAR account, share a payment request link, and receive at an address that starts with hushd1.

When someone needs to see one fact, you make a proof for one named NEAR account, with an expiry: a payment, a balance above a line, or your total desk volume. Anyone holding it can check it at /verify, and it says who it was made for.

A deal, in four steps
1StepSealed requestSealed to the matcher enclave. Only its sha256 goes on chain.
2StepEnclave matchMakers quote, sealed and signed. The enclave picks the best inside your limit.
3StepAtomic settlementBoth legs proven and settled in one pool call: both happen or neither.
4StepReceiptSettled, recovered, failed or unresolved, with evidence, on the desk.

What works today

  • Sign in with a NEAR wallet through NEAR Connect, or with a passkey that derives a NEAR implicit account (the relayer gives it a little testnet NEAR).
  • Test tokens from a faucet: USDC, wNEAR and BTC, all issued by Hushd on testnet.
  • Add privately, send privately, cash out (with a refund note if the payout fails), receive and request.
  • Pay as a link: anyone who opens it claims the payment into their own private balance, with no gas and no seed phrase, and you can take back a link nobody claimed. See claim links.
  • The desk: spot, matched in the enclave and settled atomically in the pool, and the experimental spot + hedge and cash and carry, where the maker bonds a hedge order it places on Hyperliquid testnet for its own account.
  • Plain-language intake on NEAR AI Cloud: your words are encrypted in the browser to an attested model, and its signed answer is checked before you see the draft.
  • Proofs to one named reader, checked in the browser and by the pool contract.
  • An MCP server with spending limits, private x402, and reference makers that sell indicative quotes over x402.

What it is not

Hushd runs on testnet only. The tokens have no value, the proving keys are development keys from one contribution (not a multi-party ceremony), and nothing has been audited. Hedged packages are experimental: their hedge leg trades on Hyperliquid testnet for the maker's own account, and none has filled yet. Read the threat model before you rely on any part of it.

Where to start

  • Quickstart: your first private deal on testnet, in a few minutes.
  • How the desk works: the request, the match and settlement, step by step.
  • Agents and MCP: give an agent a private balance and a seat at the desk.
  • SDK: build on the same TypeScript the app uses.
  • Contracts: the accounts on testnet and what each one does.
  • Or go straight to the desk.