Nexora Beta

Nexora / How to create an API key

How to create an API key

An API key is permission to place orders in your name. It moves no money: you leave withdrawal off, and Nexora refuses a key that has it.

Three rules for every exchange

01

Spot trading — on

Without it the bot sees your balance but cannot place an order. Spot trading is all it needs: no futures, margin or transfers.

02

Withdrawals — off

Nexora checks a key’s permissions when you connect it and refuses one that may withdraw. A stolen key then cannot take money off the exchange.

03

IP binding — do it

Put the Nexora server address in the key. The app shows it on the Exchanges screen, with a Copy button. Without a binding Binance allows the key reading only, Bybit disables it after 90 days, OKX and BingX delete an idle one after 14 days — and a stolen key works from anywhere.

Before you start, turn on two-factor authentication in Nexora (Settings) — an exchange key cannot be connected without it. The exchange shows the secret part of a key once: copy it straight away.

BinanceBybitOKXBingX

Binance

Step by step

  1. Click the profile icon → Account → API Management → Create API.
  2. Pick System generated and give the key a label, such as Nexora.
  3. Confirm with your 2FA codes. Copy the API Key and Secret Key at once.
  4. Choose Edit restrictions.
  5. Pick “Restrict access to trusted IPs only (Recommended)”, paste the Nexora server address and choose Confirm.
  6. Tick “Enable Spot & Margin Trading”.
  7. Leave “Enable Withdrawals” off. Save.

Keep in mind

IP first, trading second: Binance allows a key with no IP binding reading only. To create a key at all, the account must have passed identity verification, have a deposit of any amount in the Spot Wallet, and have 2FA on.

Bybit

Step by step

  1. Use the Bybit website: a key cannot be created in the Bybit mobile app.
  2. Click the profile icon → API → Create New Key.
  3. Pick System-generated API Keys.
  4. Usage: API Transaction. Name it, for example, Nexora. Permissions: Read-Write.
  5. Under IP, pick the option that restricts the key to addresses (not “No IP restriction”) and paste the Nexora server address.
  6. Under permissions tick spot trading: SPOT → Trade. Leave Withdrawal unticked.
  7. Enter your Google Authenticator code and copy the API Key and API Secret.

Keep in mind

A key with no IP binding is valid for 90 days, then Bybit disables it. Bybit may not let a new account create keys for the first 48 hours after registration. A Read-Only key cannot trade.

OKX

Step by step

  1. Open Profile → API and connections → Create API key.
  2. API key name: for example, Nexora. Under Used for, choose trading through the API, not connecting a third-party app.
  3. Put the Nexora server address in IP address allowlist.
  4. Under Permissions tick Read and Trade. Leave Withdraw unticked.
  5. Choose a Passphrase and keep it: Nexora needs it along with the key, and the exchange cannot recover it.
  6. Confirm with your 2FA codes and copy the API key and Secret key.

Keep in mind

An OKX key has three parts: key, secret and passphrase. Without the passphrase the exchange refuses the key. OKX deletes a key that can trade and has no IP binding after 14 days without activity.

BingX

Step by step

  1. Click the profile icon → API Management → Create API.
  2. Name the key, for example Nexora.
  3. Under permissions tick Read and Spot Trading. Leave Withdraw unticked.
  4. Confirm with your 2FA code.
  5. Copy the API Key and Secret Key at once: the secret is shown only once.
  6. In the key’s settings bind it to an IP: enter the Nexora server address and save.

Keep in mind

BingX has no sandbox: the key trades real money from the start, so check your bot’s settings in paper mode first. BingX deletes a key that can trade and has no IP binding after 14 days without activity.

Connecting the key in Nexora

  1. Open the Exchanges screen and choose the exchange.
  2. Environment: Live is your real account. Binance, Bybit and OKX also have Testnet — the exchange’s sandbox with test money. It needs a key of its own, created inside the sandbox: a key from your real account will not work there.
  3. Name the key, paste the key and secret (and the passphrase for OKX) and choose Add key.
  4. Nexora checks the key’s permissions with the exchange. “Active” means it can trade.

If the key will not connect

“This key cannot trade”

Spot trading is not enabled on the key. Turn it on in the key’s settings on the exchange and choose Re-verify.

“The exchange refused this key”

Check that the key and secret were copied whole, that the key carries the Nexora server address, and for OKX that the passphrase is right.

The key was refused for having withdrawal

That is a safeguard and cannot be bypassed. Create a new key on the exchange without withdrawal and connect that one.

“The exchange did not answer”

The exchange is briefly unavailable. Nothing to do: Nexora checks the key again by itself within the hour.

Menu names are given as on the English version of each exchange’s site, checked against the exchanges’ own help pages on 1 October 2026. Exchanges rename them now and then. The meaning stays the same: spot trading yes, withdrawal no, IP — the Nexora server address.

🎁 Try Nexora for free

The first 3 days are free for new users. Start in paper mode: real prices, pretend money.

Download the app Open the Telegram bot