> ## Documentation Index
> Fetch the complete documentation index at: https://docs.everstrike.io/llms.txt
> Use this file to discover all available pages before exploring further.

# API Keys: Create Keys, Scopes and Whitelists

> Create Everstrike API keys with Trading and Withdrawal scopes, restrict them with IP and withdrawal address whitelists, and keep the secret key safe.

API keys let your own programs trade and read your account. Manage them on the [API](https://app.everstrike.io/app/api) page.

## Create a key

**1. Label it**

Give the key a label that says what it's for.

**2. Choose its scopes**

Grant only what your integration needs:

* **Trading**: place and cancel orders.
* **Withdrawal**: submit withdrawals.

**3. Copy the secret key**

The **secret key is shown once**. Copy it and store it securely. It won't be shown again.

## Whitelists

Restrict where a key can be used:

* **IP Whitelist**: only requests from these IPv4 or IPv6 addresses are accepted.
* **Withdrawal Address Whitelist**: withdrawals can only go to these addresses.

Choose **Manage Whitelists** on a key to add or remove entries.

> [!TIP]
>
> A key with the Withdrawal scope should always have a withdrawal address whitelist. If the key leaks, funds can only go to your own addresses.

## Keeping keys safe

* Run signed requests on a **trusted server**. Never put your secret key in browser code.
* Give each integration its own key, so you can delete one without breaking the others.
* Delete keys you no longer use.

## Getting started with the API

The page has a quick start: check connectivity, read your orders, place a signed order and stream market updates, with links to the REST and WebSocket docs. See [API Usage Examples](https://docs.everstrike.io/api/usage-examples.md).

For read-only market data in AI tools, the [MCP server](https://docs.everstrike.io/ai/mcp.md) needs no API key at all.


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.