A guardian that sees trouble hours ahead and steps in on its own, inside limits only you set, with every move reviewed by a verifiable AI. Or earn without liquidation risk at all.
Built from the assets, venues and primitives it runs on
Parry watches your leveraged positions, predicts where each is heading, and a guardian that can only protect steps in on its own.
Every protected position is read every few seconds and scored: health, the chance of liquidation within a day, and the hours left at today's pace.
Your trigger and target are sealed to the guardian's enclave before they leave your browser. Nobody watching the chain learns when you will be defended.
At the trigger the guardian plans one step and a verifiable model reviews it inside a TEE. The model's signature covers the exact plan.
Health 1.17 is under the owner's trigger of 1.18. Repaying 41.20 USDC from the reserve lands on the 1.45 target and stays inside the daily cap.
Your account contract checks the enclave's signature, the mandate's powers and caps, and acts. The review's hash goes on chain with the action.
Read straight from Rhea lending: every borrowing account's liquidation price, bucketed by how far NEAR would have to fall. Parry's cascade pressure is computed from this map.
The guardian's powers are written into your own account contract. It acts under your mandate, and you can revoke or override it at any moment.
A delta-neutral vault for NEAR. Your deposit is staked into LiNEAR, and the vault shorts the same NEAR on Hyperliquid, so a share holds its dollar value while it earns staking yield and funding. Nobody in it can be liquidated.
The fund pays only for named losses: a streak of negative funding, hedge slippage beyond the band, and Hyperliquid margin top-ups under stress. Its rules and every payout are on chain.
No rescue runs on the guardian's word alone. A verifiable model reviews each plan inside a TEE and signs its verdict; the hash rides on chain with the action. And a position's owner can prove its health to someone, without showing a single amount.
The latest executed rescue loads from the guardian's log.
The guardian enclave reads the position on chain at a given block and signs one sentence for one named reader: health is at least the threshold. No amounts, no collateral, no debt.
Each guarantee comes from a NEAR primitive, and each links to a transaction on testnet that shows it working.
every protected account is derived from one published code hash and created by the relayer
a protected account signs its Hyperliquid orders and its Aave repay, and the vault its hedge, each for its own derived address
the MPC network confirms the Aave repay landed on Base Sepolia
every rescue is reviewed, and the review's TEE signature is checked before acting
positions, repays and the atomic deleverage, on lending's exact mainnet code
each service signs on a prepaid gas key with parallel nonce lanes, and refills it itself
the treasury, which holds the most NEAR, signs with an ML-DSA-65 key
Real hourly NEAR prices from Binance's public market data, run through Parry's risk model, guardian and vault. Every number is computed by a script anyone can run, not claimed.
Everything a person sees, an agent can read through the MCP server: positions, risk, the guardian's log and its proofs, the vault. Write tools are capped and testnet only, and risk checks can be paid per call over x402 on NEAR.
$ claude mcp add parry -- npx -y @parry/mcpAdded stdio MCP server parry# ask the agent: is alice.near at risk?$ parry.risk_check({ account: "alice.near" })health 1.32 (caution), liquidation at $2.79liquidation in 24 h: 0.4 %, median time beyond 30 daysscore 11 of 100, Tremor index 98 % a year (stressed)$
What Parry can and cannot do, in a few lines each.
Parry runs on NEAR testnet. Open the app, or move the test oracle yourself and watch a live rescue.