Exchange API Keys

What are API Keys

API keys are special access keys that allow the platform to interact with your cryptocurrency exchange account to execute trading operations on your behalf.

Why API Keys are Needed

API keys are necessary for:

• Getting balance information on the exchange
• Placing trading orders
• Monitoring positions and trades
• Automated trading management

Supported Exchanges

The platform supports the following cryptocurrency exchanges:

• Bybit
• Binance
• OKX
• BingX
• Bitget
• HTX (Huobi)
• Gate.io

And other exchanges (list may expand).

Creating API Key on Exchange

General Steps

The process of creating an API key is similar for all exchanges:

1. Log into your exchange account
2. Go to API settings section
3. Create a new API key
4. Configure access permissions
5. Save the API key and secret key

Required Permissions

The API key must have the following permissions:

• Read — to get balance, position, and order information
• Trading — to place and cancel orders
• Futures (if planning futures trading) — for working with futures contracts

Important: Do not grant withdrawal permissions. The platform does not require this permission to work.

IP Addresses (if required)

Some exchanges allow restricting API key access by IP addresses. If your exchange supports this feature, add the platform server IP addresses (check with support).

Connecting API Key on Platform

Step 1: Go to API Keys Section

1. Log into your account
2. Go to "API Keys" section (Account → API Keys)

Step 2: Add New Key

1. Click "Add API Key" or "Connect Exchange"
2. Select exchange from list
3. Enter the following data:
   • Name — arbitrary name for identification (e.g., "Bybit Main")
   • API Key — public API key from exchange
   • Secret Key — secret key (will be encrypted)
   • Passphrase (if required by exchange) — passphrase
4. Click "Connect"

Step 3: Verify Connection

After connecting, the platform will verify:

• Key correctness
• Presence of required permissions
• Exchange availability

On successful connection, the exchange will appear in the connected list.

Managing API Keys

View List

The "API Keys" section displays:

• Connection name
• Exchange
• Status (active/inactive)
• Creation date
• Last usage

Editing

You can change:

• Connection name
• API key and secret key (if needed)

Note: When changing keys, all bots using this connection will be temporarily stopped until new keys are verified.

Deletion

To delete an API key:

1. Find the needed connection in the list
2. Click "Delete"
3. Confirm deletion

Warning: After deleting an API key, all bots using this connection will be stopped. Make sure you want to delete the key.

API Key Security

Security Recommendations

• Never share keys with third parties — only you should know your keys
• Use minimally necessary permissions — don't grant withdrawal permissions
• Regularly check activity — monitor key usage
• Use IP restrictions (if available) — restrict access by IP addresses
• Create separate keys — use different keys for different purposes
• Delete unused keys — regularly clean up the key list

What to Do if Compromised

If you suspect your API keys are compromised:

1. Immediately delete the key on the platform
2. Revoke the key on exchange — delete it in exchange settings
3. Check activity — review operation history on exchange
4. Create new key — if everything is fine, create a new key
5. Contact support — if unauthorized access is suspected

Limitations and Blocks

Exchange Blocks

Some exchanges may block API keys when:

• Suspicious activity detected
• Request limits exceeded
• API usage rules violated

In such cases:

1. Check key status on exchange
2. Contact exchange support if needed
3. Create new key after resolving the issue

Request Limits

Each exchange has limits on the number of API requests per unit of time. The platform accounts for these limits and optimizes requests, but with many bots temporary restrictions may occur.

Frequently Asked Questions

Can I use one key for multiple bots?

Yes, one API key can be used for multiple bots on one exchange.

Are withdrawal permissions needed?

No, the platform does not require withdrawal permissions. Read and trading permissions are sufficient.

What if exchange is not supported?

Contact platform support to request adding a new exchange.

Can I use test keys?

For demo mode, you can use test keys (if exchange provides them), but real keys are needed for real trading.

How to verify key works correctly?

After connecting, the platform will automatically verify the key. You can also create a test bot in demo mode for verification.