04 · SECURITY
Built like a vault.
Runs like a terminal.
Mos never holds your money. It trades through a key you control, on an exchange you already use — and treats that key like it matters.
YOU
Browser + authenticator
- One-time code on every launch
- Invite-only, per-user access
- Session ends when you sign out
MOS SERVER · TOKYO
The vault and the watchman
- API keys sealed with AWS KMS
- Hard stop engine, 24/7
- Every user isolated from every other
- Chat text never written to logs
BINANCE
Your account, your funds
- Trade-only API key
- Funds never leave the exchange
- Revoke the key any time
Keys sealed with AWS KMS
Your API keys are encrypted at rest. The master key lives in AWS and never leaves it.
Withdrawal keys refused
A key that can move funds off Binance is rejected before it's ever saved.
Authenticator on every launch
A one-time code from your authenticator app each time you open the terminal.
Invite-only access
The trading app isn't public. Every seat is granted by hand.
Users isolated by design
Accounts, keys, layouts and feeds are kept per user — tested end to end with real sessions side by side.
Read-only AI
MOS AI can read markets and your positions. It has no way to place, change or cancel an order.
Mos never
Some things are easier to promise as rules than as features.
- holds your funds
- accepts a key that can withdraw
- lets the AI place an order
- shows your data to another user
- writes your AI questions to its logs