KuCoin API key permissions for a bot
KuCoin's docs home loaded as an app shell and did not include the permission article in the HTML. The rules below are the ones our check recorded from that docs site, with the date.
What loaded
kucoin.com/docs-new returned a page shell on 2026-10-27. The visible text was a menu (orders, transfers, withdrawals) and not the API-key permission article.
Recorded from KuCoin's docs
Our check of that docs site recorded this, and we could not re-read the sentences today. Permissions are chosen per key: General (read-only), Spot, Margin and Futures trading, Earn, Withdrawal, FlexTransfers and others. Withdrawal only works with IP Restriction on, and FlexTransfers also requires an IP filter. KuCoin warns that those permissions move money without email or Google verification. Since 2018, new keys default to read-only. The recorded note says the docs page did not state a key-expiry rule.
What that means for a bot
- General, plus the one trading permission the bot needs. Not Withdrawal, and not FlexTransfers.
- If a key must withdraw, the recorded rule says KuCoin forces an IP restriction. Bind only your server.
- Sub-accounts were not in the note we have.
- How to revoke was not in the text we could re-read. Delete the key in KuCoin's API management while signed in, and assume a Withdrawal key can move funds with no email prompt.
Worst case for your money, and the safe setup: KuCoin check.
Same rules, other exchanges: API key safety. Exchange directory: crypto exchanges for bots.
More in this set
Questions
Which KuCoin API permissions should a bot have?
General (read-only) plus the single trading permission it needs. Leave Withdrawal and FlexTransfers off. That split is from our recorded read of KuCoin's docs, which did not return the article HTML on 2026-10-27.
Does KuCoin require an IP restriction to withdraw by API?
The recorded docs say Withdrawal can only be used with IP Restriction enabled.