How do I create a connection key without withdrawal permission?
On your exchange, create an API key with read and spot trading permissions only, never withdrawal or transfer, and restrict it to our server's IP address 34.153.222.181 alone. Then paste the key and its secret into SailoBot and test the connection. A key with withdrawal permission, or one that isn't restricted to that address alone, is refused.
Steps
- 1
Log in to your exchange and open its API management page.
- 2
Create a new API key and give it a name you'll recognize, like SailoBot.
Image: The exchange's create API key screen - 3
Turn on reading and spot trading only. Make sure withdrawal and every kind of transfer are turned off.
Image: Permissions with withdrawal turned off - 4
Restrict the key to our server's IP address, 34.153.222.181, and no other address. It's also shown in the linking window.
- 5
Copy the API key and the secret key. On KuCoin, also keep the key's passphrase.
- 6
In SailoBot, open Account › Linked exchanges, choose the exchange, paste the keys and test the connection.
On each exchange
Binance
Account › API Management › Create API (System generated). Turn on Enable Reading and Enable Spot & Margin Trading only. Choose "Restrict access to trusted IPs only" and enter 34.153.222.181. Keep USDT in your Spot wallet. Two fields: API key and secret key.
KuCoin
API Management › Create API. Permissions General and Spot only. Turn on the IP restriction and enter 34.153.222.181 only. Choose a passphrase. Keep USDT in your Trading account, not Main; the Classic account is supported. Three fields: API key, secret key and the passphrase.
BingX
API Management › Create API. Permissions Read and Spot Trading only. Add 34.153.222.181, and no other address, to the IP whitelist. Keep USDT in your Spot account. Two fields: API key and secret key.
MEXC
My API Key › Create. Account: View account details, and Spot trade: View order details and Place orders, only. Link the IP address 34.153.222.181 only. Leave all trading pairs allowed. Keep USDT in your Spot account. Two fields: API key and secret key.
Good to know
- Never share your secret key with anyone, including our support team or the support bot. We will never ask for it.
- After saving, the secret key is never shown in full again.
- Because the key works only from our server's address, nobody can use it from anywhere else, even if it leaked.