API key security: trade-only permissions, no withdrawals, control stays with you
Trader Pending works directly inside your exchange account, so security is not an add-on. This is how it works, as it is.
A bot that asks for withdrawal permission asks for more than it needs.
To send orders and read positions, Read and Trade permissions are enough. Withdrawal permission is not needed and must stay off. That is rule one when you create the key.
Step by step.
Minimum permissions
Read and Trade, Withdraw off. Some exchanges use an extra passphrase alongside the key and secret.
Restrict to the server IP
Recommended. The IP address to whitelist is shown inside the app, so it is always current.
Stored encrypted, isolated per account
Keys are stored encrypted. Your data and positions are isolated from other users.
Layered login
Two-factor authentication is required for trading actions, plus an active-session list and one-click logout on every device. Disabling 2FA needs the password and a code, and every session is signed out.
What you should know.
Can Trader Pending withdraw my funds?
No, as long as Withdraw is off as the guide requires. Non-custodial means we never hold funds.
What if I want to stop?
Revoke the key on the exchange at any time, and you can request account deletion from settings.
Is fund safety guaranteed?
Nobody can guarantee that. What is offered is control: you set the limits, the system enforces them, and everything is logged.