Skip to main content
API keys let your own programs trade and read your account. Manage them on the API page.

Create a key

1

Label it

Give the key a label that says what it’s for.
2

Choose its scopes

Grant only what your integration needs:
  • Trading: place and cancel orders.
  • Withdrawal: submit withdrawals.
3

Copy the secret key

The secret key is shown once. Copy it and store it securely. It won’t be shown again.

Whitelists

Restrict where a key can be used:
  • IP Whitelist: only requests from these IPv4 or IPv6 addresses are accepted.
  • Withdrawal Address Whitelist: withdrawals can only go to these addresses.
Choose Manage Whitelists on a key to add or remove entries.
A key with the Withdrawal scope should always have a withdrawal address whitelist. If the key leaks, funds can only go to your own addresses.

Keeping keys safe

  • Run signed requests on a trusted server. Never put your secret key in browser code.
  • Give each integration its own key, so you can delete one without breaking the others.
  • Delete keys you no longer use.

Getting started with the API

The page has a quick start: check connectivity, read your orders, place a signed order and stream market updates, with links to the REST and WebSocket docs. See API Usage Examples. For read-only market data in AI tools, the MCP server needs no API key at all.