The golden rule of API keys
Give the system read + trade permissions only. Never enable withdrawal. Even if a key leaks, no one can move your funds off the exchange without the withdrawal permission.
Steps (general flow, same idea on every exchange)
- Log in to your exchange (Binance / Bybit / OKX) and open API Management.
- Create a new API key. Name it something like "TalixTrade".
- Enable permissions: Read and Spot/Futures Trade. Leave Withdraw OFF.
- Copy the API Key and Secret (the Secret is shown once — save it now).
- In TalixTrade → Exchanges → + Connect, pick the exchange, paste the key and secret, save.
IP whitelist (recommended)
Most exchanges let you restrict a key to specific IP addresses. If you whitelist, add TalixTrade's server IPs (shown in the connect dialog). This means a leaked key is useless from any other machine. On OKX a whitelist is effectively required for stable trading.
Futures systems: enable Hedge Mode
Hedging and many futures strategies need Hedge Mode (a.k.a. dual-side position) turned on in your exchange's futures settings *before* you start the system. See the dedicated exchange guide in Docs for exact clicks per exchange.
Common mistakes
- •Withdrawal permission enabled — disable it immediately.
- •Wrong account type — a Spot-only key can't run a futures system.
- •Secret lost — you can't recover it; just delete the key and create a new one.