Blog
Product··4 min read

Read-only API keys for trade import — what to enable

How to connect Binance or Bybit to a journal without granting trade or withdraw permissions — and why TradaxLab checks before saving.

Least privilege is the feature

Create an API key with read/history permissions only. Turn off spot/futures trading and withdrawals. IP-restrict if your exchange allows it.

TradaxLab probes key permissions before storing credentials and encrypts secrets server-side. If the key can trade, we reject it.

After the first sync

Tag imported fills with setup and playbook. Raw fills alone don’t improve process — the tags do.

Educational content about using TradaxLab and trading process. Not personalized investment advice. Markets involve risk of loss.