documentation
HISS Docs
Turn market whispers into verified Coils — and compile them into Execution Capsules for your own agent on Robinhood’s official Trading MCP. Every page is tagged by who it is for: user, developer, or operator.
start here
Quickstart
userCoil your first playbook in about 60 seconds — whisper in, verified Coil out.
CoilOps
userThe product model: whisper → coil → validate → fuse → compile → receipt → share → run.
USDG Vaults
userPermissionless USDG creator vaults on Robinhood Chain: shares, fuses, receipts, deposit-readiness gates, and the full product path.
xHISS mechanics
developerThe xHISS share token field by field: convertToShares/convertToAssets, previewStake, the 24-hour reward drip, cooldown escrow, and what the Safe can and cannot do.
Robinhood Agentic Trading
userWhat Robinhood Agentic Trading is, the seven-platform MCP setup, and what HISS compiles for it.
Risk fuses
developerAll 15 fuse kinds, the required capsule set, bounds, and how fuses compile.
build on hiss
Execution Capsules
developerThe capsule schema field by field: execution modes, stop conditions, post-trade checks.
Agent tools API
developerThe /api/tools/* and /api/coil/* reference: request/response, examples, rate limits, error shapes.
MCP server
developerInstall the HISS CoilOps MCP server — Claude Code, Codex, generic clients — plus all ten tools.
x402 Cloud
operatorBankr x402 Cloud: bankr.x402.json anatomy, deploy prerequisites, pricing norms. Scaffolded, not deployed.
all sections
- OverviewTurn market whispers into verified Coils and Robinhood-MCP-ready Execution Capsules.
- QuickstartCoil your first playbook in about 60 seconds — whisper in, verified Coil out.
- ConceptsCoils, Capsules, Fuses, Traces, receipts, weights in bps, and the rest of the object glossary.
- FAQAffiliation, Stock Tokens, execution, the $HISS token, and other straight answers.
- Create a HissPrompt patterns that work, patterns that fail, and the manifest you get back.
- ForkingRemix any public Coil: lineage, reweighting, and credit to the original.
- AI StrategistHow a market whisper becomes a validated manifest, in readiness-check or Bankr mode.
- HISS ScoreThe original transparency heuristic — and Coil Health, its nine-component successor.
- Social kitCopy-paste launch posts, ten coil prompts, and share language — receipts included.
- Connect a walletWhat wallet connect is for — receipt ownership and Base-side x402 flows. Not a Robinhood connection.
- USDG VaultsPermissionless USDG creator vaults on Robinhood Chain: shares, fuses, receipts, deposit-readiness gates, and the full product path.
- Vault V2 — the 24/7 deposit vaultHissUsdGVaultV2 is the canonical vault for new deposits: instant bounded keeper-lane deposits, queued deposits and redemptions, in-kind redemption, live Price Mesh capacity, distinct preparation/submission/settlement receipts, and rebalancing inactive by policy. V1 is legacy.
- Vault feesCreation fee, creator performance fee above the high-water mark, HISS protocol share, routing fee, and lockup policy — no hidden fees.
- Creator economicsSkin-in-game floors, fee splits, strategy-change notice, subscriptions, verification, and placement — the creator side of the ledger.
- Depositor risksLoss of principal, oracle pauses, liquidity gaps, sequencer risk, creator conduct, issuer-side asset restrictions — stated plainly, with the depositor acknowledgment.
- Vault contract statusWhether HISS vault contracts are deployed on Robinhood Chain — machine-verified from chain reads — and what must happen before public deposits open.
- Deposit readinessHow the public deposit gate works — audit, disclosure, oracle, liquidity, and deployment readiness plus per-vault on-chain marking — and what each check covers.
- Vault monetizationHow HISS earns on vaults: creation fees, protocol share of performance fees, routing fees, verification, subscriptions, placements, and x402 services.
- Provider rewardsBankr-wallet-funded provider rewards: how claimed $HISS creator fees are split 30/70 on the HISS-token side, who is eligible, and how epochs are planned, gated, funded, and published.
- HISS fee routingWhere $HISS creator fees go: Bankr claim into the Bankr wallet, chain-verified import, the HISS-token-side provider split, and the WETH-side treasury path.
- Tokenized assetsThe source-verified vault asset universe: USDG, WETH, Stock Tokens, and tokenized ETFs — address is identity, policies attached.
- Robinhood Chain Stock TokensEconomic exposure, not direct ownership: issuer, U.S.-person restrictions, uiMultiplier corporate actions, and oracle behavior, source-verified.
- Stock-token trading via BankrTrade Robinhood Chain Stock Tokens with Bankr: the three command surfaces, USDG settlement, Bankr's console verification, and proof-only receipts.
- Bankr stock-token laneDeveloper reference for the Bankr trading lane: intent schema, canonical registry, command packs, the gated submit path, and receipt reconciliation.
- Bankrbot vault depositsUSDG deposits into HISS vaults via Bankrbot: the three modes, the deposit pack, depositWithAcks ack hashes, and the onchain completion rule.
- Vault source verificationEvery canonical address, oracle feed, and policy in the vault registry, with sources and last-verified dates.
- Stake $HISSThe staking guide: stake HISS to receive xHISS, fee-funded injections, the 72-hour cooldown and 2-day redeem window, and where to read the live staking state.
- xHISS mechanicsThe xHISS share token field by field: convertToShares/convertToAssets, previewStake, the 24-hour reward drip, cooldown escrow, and what the Safe can and cannot do.
- Staking risksThe eight xHISS staking risk disclosures, stated plainly: contract risk, no promised outcome, exit timing, price risk, pause scope, admin trust, review scope, self-custody.
- HISS reward flywheelHow verified HISS-token trading fees become xHISS injections: claim, classification, split, funding, and injection — planned is not funded, funded is not claimable.
- Reward split (50/15/15/10/10)The pinned V2 split of verified HISS trading fees: 50% xHISS stakers, 15% Vault Providers, 15% Vault Contributors, 10% treasury, 10% economic burn — WETH and creator vesting excluded; V1 (50/30/10/10) retained as historical.
- Reward methodologyHow verified HISS trading fees reward depositors and providers: time-weighted depositor participation, quality-weighted provider scoring, 30- and 90-day vesting, weekly checkpoints, the challenge window, and Safe-authorized funding.
- CoilOpsThe product model: whisper → coil → validate → fuse → compile → receipt → share → run.
- Coil examplesEducational example Coil structures — worked manifests with weights and fuses. Not user data, not live Coils, not investment advice.
- Robinhood Agentic TradingWhat Robinhood Agentic Trading is, the seven-platform MCP setup, and what HISS compiles for it.
- Bankrbot × Robinhood MCPThe autonomous trading path: Bankrbot as the agent interface, HISS as compiler and fuse verifier, Robinhood MCP as the user-authorized execution rail.
- Execution CapsulesThe capsule schema field by field: execution modes, stop conditions, post-trade checks.
- Risk fusesAll 15 fuse kinds, the required capsule set, bounds, and how fuses compile.
- Coil compilercompileCoil outputs, determinism guarantees, and versioning.
- Drift checksThe drift report schema. Proposals are previews that require human confirmation.
- Share cardsProof artifacts: payload fields and why a card is never a performance claim.
- Agent kitEverything an AI agent needs to coil, validate, score, and cite Coils over HTTP.
- Agent tools APIThe /api/tools/* and /api/coil/* reference: request/response, examples, rate limits, error shapes.
- MCP exportExport a plan to your own MCP agent. Plans only — never autotrade.
- MCP serverInstall the HISS CoilOps MCP server — Claude Code, Codex, generic clients — plus all ten tools.
- Bankr integrationConfigure the Bankr strategist brain: env vars, fallback, troubleshooting.
- HISS ConsoleThe read-and-prepare coordination shell over your HISS surfaces: the three capability levels (read, prepare, user-signs-each-action), the current code-deployed-but-disabled stage, and a map of every Console page.
- Console TodayThe L0 read model: an owner-scoped snapshot of portfolio, vault, stake, reward, and receipt state from GET /api/console/today — read-only, never a forecast.
- Command paletteHow a typed command becomes a candidate action: the deterministic resolver, POST /api/console/intents/resolve then POST /api/console/plans, and why the model never chooses chain, contract, selector, address, or amount.
- Plans & simulationsTyped plans: compilation, the frozen plan hash, idempotency key, 15-minute expiry, the run state machine, and the honest simulation lifecycle where no on-chain simulation runs while signing is disabled.
- Approval inboxThe AWAITING_REVIEW pause: reviewing a prepared plan's resolved fields and hash before any wallet handoff, plus approve, reject, and cancel — with cancellation allowed only up to APPROVED_FOR_WALLET.
- Wallet handoff (A.2)The user-signs-each-action model: you sign in your own wallet, the HISS server signs nothing, and the handoff is gated behind the signing flag plus owner approval — currently disabled.
- Activity & receiptsThe unified owner-scoped ledger from GET /api/console/activity: runs, lifecycle events, and referenced canonical receipts — a pointer to the source of truth, never a competing one.
- Console securityThe deny-by-default kernel: canonical contract and asset allowlist, plan-hash integrity, no server keys, no arbitrary calldata, no session keys, no Safe module, the kill switch, tool-manifest drift detection, and the provenance barrier for action-critical fields.
- Console privacyOwner isolation: only the signed-in owner's data, no cross-wallet view, what is stored (address plus run and event metadata and receipt references), and no credentials ever.
- Feature stagesThe feature flags that gate each Console stage — enabled, read, prepare, signing plus its owner gate, and the kill switch — and the honest current state: code deployed, every stage disabled.
- Console troubleshootingThe responses you may see and what they mean: 404 when disabled, WALLET_AUTH_REQUIRED, RATE_LIMITED, expired plans, plan-hash mismatch, kernel blocks, and signing-disabled — all failing closed.
- x402 paymentsPay-per-request over HTTP 402: flow, live Bankr services on Base, and the Meridian Robinhood Chain lane.
- x402 payment architectureProviders, lanes, and the vault-chain vs payment-chain separation: Bankr on Base, Meridian on Robinhood Chain, self-hosted disabled.
- Robinhood Chain x402 laneHow x402 payments reach Robinhood Chain through the Meridian facilitator, while Bankr x402 Cloud stays Base-settled where configured.
- Meridian x402Meridian documents x402 facilitator support for Robinhood Chain with USDG — setup, env, honest status, and what HISS does and does not claim.
- x402 CloudBankr x402 Cloud: bankr.x402.json anatomy, deploy prerequisites, pricing norms. Scaffolded, not deployed.
- Robinhood Chain x402 (candidate)Historical research scaffold for a self-hosted facilitator — superseded by the Meridian lane for Robinhood Chain payments.
- FeesWhat HISS costs: the website and app are free, the SDK/CLI/MCP/skills are open-source and free, and you pay only blockchain gas plus disclosed onchain vault fees. No subscription, no HISS Credits, no website plan gating; x402 is a separate machine-to-machine payment rail.
- API referenceEndpoints, request/response envelopes, and copy-paste examples.
- Robinhood ChainThe Arbitrum-stack L2 HISS builds on: chain IDs, Stock Token semantics, feeds, finality, and what HISS does not do.
- Oracle healthThe eight health states, staleness rules, and the uiMultiplier trap.
- Asset registryThe 27 canonical Robinhood Chain assets. Address is identity, never ticker.
- ReceiptsPre-execution receipts: deterministic fingerprints for every manifest, validation, score, and capsule.
- ProvenanceEvery Coil is a public thesis object: trace timeline, fork lineage, and receipts explained.
- Autonomous trading safetyThe consent model in plain English: readiness checks by default, the live-readiness gate, LiveAutonomyAck, and the ten mandatory autonomy fuses.
- Production live autonomyWhat production-live means on the Bankrbot × Robinhood path: the exact HISS/Robinhood boundary, live-capable Robinhood MCP tools, the nine-boolean acknowledgment, and post-run audits.
- Wallet securityThe signed-session model: what HISS stores (address + timestamps), what it never asks for, and how to revoke.
- rh-wallet boundaryThe source-pending external Bankr rail for Robinhood Crypto accounts — what HISS never does on it: no vault execution, no credentials, no dependency.
- Launch notesWhat you can do on HISS today, what is gated behind deposit readiness, and what is pending external approval.
- Bankr projectHISS on Bankr: Agent Profile status, the five live x402 autonomy services with prices, discovery, and honest blockers.
- ChangelogReleases and known technical limitations, honestly stated.
Looking for interactive tools? The Tools directory has the capsule compiler, risk-fuse auditor, drift checker, and receipt verifier — all compile-only. Operator references stay reachable at their URLs but are not listed here.