🔑 Exchange API Setup

Korvyth Bot only needs Spot trading permission. Never enable withdrawals — we will never ask for that permission.

0 — Security summary

🔐 API keys are stored with AES encryption — not visible even in admin panels.
🚫 Withdraw permission must stay OFF.
🏦 Bot only places Spot buy/sell orders — no futures, margin loans, or transfers.
🌐 Each user's data is isolated — accounts never mix.

1 — Binance API Management

Go to Binance → API Management.
Click Create API → choose system-generated key.
Label: KorvythBot or Gridbot
Complete 2FA verification.

Binance API Management — Create API button — Step 1 — Click Create API on the API Management page.

2 — Permissions (critical)

✅ Enable Reading — ON
✅ Enable Spot & Margin Trading — ON
❌ Enable Withdrawals — MUST STAY OFF
❌ Futures / margin borrow / universal transfer — OFF

Binance API permissions and IP restriction — Step 2 — Withdrawals off; Spot trading on; Restrict access to trusted IPs selected with Korvyth server IP added.

3 — IP restriction (required)

Korvyth runs on our cloud server — orders are sent from our IP, not your home computer.

Select Restrict access to trusted IPs and add the Korvyth server IP:

Loading…

Without this IP, Binance returns -2015 Invalid API-key, IP, or permissions and the bot cannot trade.

4 — Paste into Korvyth (Binance)

Dashboard → Settings → Exchange API → exchange: binance
Paste API Key and Secret → Test → Save
Click Start — the bot validates the connection.

5 — OKX create API

Open OKX → API.
Create API key → label: KorvythBot
Used for: API trading (not third-party app)
Account: Main account
Save the Passphrase you set — required in the Korvyth panel for OKX.

OKX Create API keys — Read, Trade and Trusted IP — OKX — API trading; permissions Read + Trade; Trusted IP on with Korvyth server IP.

6 — OKX permissions & IP (critical)

✅ Read — ON (required)
✅ Trade — ON
❌ Withdraw — MUST STAY OFF
🌐 Trusted IP access — ON; add the Korvyth server IP (box above)

Without an IP, OKX may delete Trade-enabled keys after 14 days of inactivity.

OKX API key created — Read, Trade, Trusted IP — OKX — key created: permissions Read, Trade; Trusted IP 62.171.132.121. Copy Key/Secret into the panel (do not share the QR).

7 — Paste into Korvyth (OKX)

Dashboard → Settings → Exchange API → exchange: okx
Paste API Key, Secret, and Passphrase → Test → Save

8 — Bybit API Management

Open Bybit → API Management.
Click the orange Create New Key button.
Keys without an IP expire in 3 months; the Secret is shown only once at creation.

Bybit API Management — Create New Key — Bybit — start with Create New Key.

9 — Bybit key type

Choose System-generated API Keys (HMAC). Do not use Self-generated / RSA — Korvyth expects Key + Secret.

Bybit Select Your API Key Type — System-generated — Bybit — select System-generated API Keys.

10 — Bybit permissions & IP (critical)

API Transaction (not third-party apps)
Name: KorvythBot
Access: Read-Write
IP: only allowed IPs — add the Korvyth server IP (box above)
✅ Unified Trading → SPOT → Trade ON
❌ Contract / USDC / Earn — OFF
❌ Assets → Withdrawal — MUST STAY OFF

Bybit Create New Key — SPOT Trade and IP restrict — Bybit — SPOT Trade + IP restrict; futures/withdraw off. Then Submit.

11 — Copy Bybit keys

On the success screen, copy API Key and API Secret immediately — the Secret will not be shown again.

Permission summary should include SPOT - Trade (no Withdraw).

Bybit Key successfully added — Bybit — copy Key/Secret, then click Understood.

12 — Paste into Korvyth (Bybit)

Dashboard → Settings → Exchange API → exchange: bybit
Paste API Key and Secret → Test → Save

13 — Gate.io API Key Management

Open Gate.io → API Key Management.
Click Create API Key.
Keys without an IP may be disabled after 90 days; inactive keys can be deleted after 90 days.

Gate.io API Key Management — Create API Key — Gate.io — start with Create API Key.

14 — Gate.io account type

Choose Trading Account. Do not use Testnet or Third-Party App.

Gate.io Account Type — Trading Account — Gate.io — select Trading Account.

15 — Gate.io permissions & IP (critical)

Remark: KorvythBot
Bind IP — add the Korvyth server IP (box above)
API Key Type: API v4 Key
✅ Spot Trading — Read And Write
✅ Enable Wallets if shown (for balances)
❌ Futures / Margin / Loan — OFF
❌ Withdraw — MUST STAY OFF

Gate.io Create API Key — Spot Trading and Bind IP — Gate.io — Spot Trading + Bind IP; futures/withdraw off.

16 — Copy Gate.io keys

Copy Key and Secret immediately — Secret is shown only once. Permission summary should be Spot Trade, Wallet (no Withdraw).

Gate.io Key QR Code — Key and Secret — Gate.io — copy Key/Secret (do not share the QR) → Return to API List.

17 — Paste into Korvyth (Gate.io)

Dashboard → Settings → Exchange API → exchange: gate
Paste API Key and Secret → Test → Save