# Exchange API key safety | TradingAgentStack

> API key permissions for a trading bot or AI agent on Binance, Bybit, OKX, Coinbase, Kraken, KuCoin, Bitget and Hyperliquid.

Canonical: https://tradingagentstack.com/exchange-api-key-safety/

1. [Home](https://tradingagentstack.com/)

2. API key safety

# Exchange API key safety for bots and AI agents

Which permissions a bot or AI agent needs on Binance, Bybit, OKX, Coinbase, Kraken, KuCoin, Bitget and Hyperliquid, why withdrawals stay off, and how IP allowlists and revocation work. Each page cites that exchange's own docs.

A key that can withdraw can empty the account from anywhere the allowlist permits. Trade permission is enough for a bot that places orders. Read-only is enough for a bot that only watches balances. Create the key on a sub-account or a separate portfolio when the exchange offers one, so a leak does not touch the rest of the funds.

The directory of exchanges, with safety scores, is [crypto exchanges for trading bots](https://tradingagentstack.com/crypto-exchanges-for-trading-bots/). Looking up a Telegram bot instead? [Official bot links](https://tradingagentstack.com/official-links/).

| Exchange | Check |
| --- | --- |
| [Binance](https://tradingagentstack.com/exchange-api-key-safety/binance/) | [Check](https://tradingagentstack.com/check/binance/) |
| [Bybit](https://tradingagentstack.com/exchange-api-key-safety/bybit/) | [Check](https://tradingagentstack.com/check/bybit/) |
| [OKX](https://tradingagentstack.com/exchange-api-key-safety/okx/) | [Check](https://tradingagentstack.com/check/okx/) |
| [Coinbase](https://tradingagentstack.com/exchange-api-key-safety/coinbase/) | [Check](https://tradingagentstack.com/check/coinbase-advanced/) |
| [Kraken](https://tradingagentstack.com/exchange-api-key-safety/kraken/) | [Check](https://tradingagentstack.com/check/kraken/) |
| [KuCoin](https://tradingagentstack.com/exchange-api-key-safety/kucoin/) | [Check](https://tradingagentstack.com/check/kucoin/) |
| [Bitget](https://tradingagentstack.com/exchange-api-key-safety/bitget/) | [Check](https://tradingagentstack.com/check/bitget/) |
| [Hyperliquid](https://tradingagentstack.com/exchange-api-key-safety/hyperliquid/) | [Check](https://tradingagentstack.com/check/hyperliquid/) |

## More in Markets & infrastructure
[Crypto exchanges](https://tradingagentstack.com/crypto-exchanges-for-trading-bots/)[Prediction markets](https://tradingagentstack.com/prediction-market-apis/)[Broker APIs](https://tradingagentstack.com/category/broker-api/)[Market data APIs](https://tradingagentstack.com/category/data-api/)[Backtesting](https://tradingagentstack.com/category/backtest-platform/)[VPS & hosting](https://tradingagentstack.com/vps-for-trading-bots/)[Best crypto exchanges for bots](https://tradingagentstack.com/best-crypto-exchanges-for-trading-bots/)[Best prediction market APIs](https://tradingagentstack.com/best-prediction-market-apis-for-ai-agents/)[Best free market data APIs](https://tradingagentstack.com/best-free-market-data-apis/)

Other paths: [Trade with a bot](https://tradingagentstack.com/trade-with-a-bot/) · [Build an AI agent](https://tradingagentstack.com/build-an-ai-agent/) · [Learn](https://tradingagentstack.com/learn-algorithmic-trading/) · [Search all tools](https://tradingagentstack.com/tools/)

## For agents

- [When to use this site, and the page index](https://tradingagentstack.com/llms.txt)
- [Sitemap](https://tradingagentstack.com/sitemap.xml)
- [Contact](https://tradingagentstack.com/contact/)
- [MCP server](https://tradingagentstack.com/mcp/)
- [MCP discovery](https://tradingagentstack.com/.well-known/mcp)