API Key Permissions

When creating an API key, you select which operations the key is allowed to perform. Always use the minimum permissions necessary for your use case.

Permission Levels

Read (always enabled)

Allows the API key to view account information, balances, and transaction history.

Trade

Allows the API key to place and cancel orders on spot and futures markets.

Recommended Settings by Use Case

Use Case	Permissions	IP Allowlist?
Trading bot	Read + Trade	Yes (recommended)
Portfolio tracker	Read Only	Optional
Grid/DCA bot	Read + Trade	Yes (recommended)

WARNING

Never grant more permissions than needed. A compromised API key with Trade permission could place unwanted trades on your account.