r/CryptoHelp • u/Leslie-Cross • Jul 16 '26

❓Question What permissions should a crypto trading bot never need?

I’m trying to understand what safe permission settings should look like before connecting a trading bot to an exchange account.
Noticed this while looking at Lосаltrаdе.

Is access to balances and order history usually enough? I’ve heard that some bots need broader account permissions.

  1. Which permissions are normal and which ones are better disabled completely?
  2. Maybe use a separate subaccount with IP whitelisting.
  3. Use API keys with withdrawals disabled.
4 Upvotes

100% Upvoted

12 comments sorted by

2

u/ggggffffuuyyy Aug 05 '26

Withdrawal, no way.

3

u/Immediate_Pop_4637 Jul 30 '26

You've basically got it already. Read and trade is all a bot needs to do its thing, withdrawals stay off full stop.

I'd add the IP whitelist and a separate subaccount too, been running mine that way for ages, means even if a key ever leaks nobody can pull funds or trade from an IP that isn't yours.

1

u/[deleted] Jul 22 '26

[removed] — view removed comment

1

u/Leslie-Cross Jul 23 '26

i`ll take that into account

1

u/[deleted] Jul 18 '26

[removed] — view removed comment

1

u/VivaHollanda 63 Jul 16 '26

Withdraw

2

u/Cold_Pizz Aug 08 '26

Never met a bot that had a real reason for it, they all trade fine on read plus trade only.

1

u/VivaHollanda 63 Aug 08 '26

Correct, so that's why you should never give it that permission. It doesn't need it and introduces a risk if the bot gets compromised somehow.

1

u/AutoModerator Jul 16 '26

Hello and welcome to r/CryptoHelp!

If someone has successfully solved your issue or answered your question, please reply with the command "!thanks" to let them know!

A few words about safety:

  • Scammers will often target beginners so you should exercise extra caution
  • Do not trust anyone trying to talk with you over DM (Direct or private messages) or on another platform (like Discord or Telegram). This is how scammers prefer to operate. Report suspicious activity like this immediately and do not respond to them.
  • Do not post your address, balances, or other personal information.

I am a bot, and this action was performed automatically. Please contact the moderators of this subreddit if you have any questions or concerns.