Bitkub · API key setup

How to create a Bitkub API key for automated trading

Four screens, about five minutes, and one setting that matters more than the rest: the key you create here cannot withdraw your coins. Screenshots are from Bitkub's own interface.

Start the walkthrough How we store it
You do not need an API key to try Vectixs. Every bot runs on a free mock wallet against real market prices first.
// BEFORE YOU START

Three things to settle first

The first two are Bitkub's rules and will stop you halfway through if you have not done them. The third is the one that protects you from everything else.

Two-factor authentication, switched on

Bitkub asks for a 6-digit Google Authenticator code at the moment you create the key. If 2FA is not set up on your Bitkub account, the create dialog cannot be completed at all.

A desktop browser

Bitkub only allows API keys to be created on its website, not in the mobile app. You can use the key from anywhere afterwards; it is only the creation step that is website-only.

Do this on bitkub.com directly

Type the address yourself rather than following a link someone sent you, including this one. An API key handed to a lookalike site is worth exactly as much as your password.

// THE WALKTHROUGH

Four screens, in order

The numbered markers in each screenshot match the numbers in the instructions above it.

STEP 01

Open the API page

Log in to Bitkub, click your profile icon in the top right, and choose API 1 from the menu. It sits between Setting and My Subscription.

You can also go straight to api.bitkub.com once you are logged in, which lands on the same page.

Bitkub profile menu with the API entry highlighted
Tap the image to open it full size
STEP 02

Create a new key

This page lists every key on your account and what each one is allowed to do. Click CREATE API KEY 2.

Bitkub allows up to 50 keys. Make a separate one for Vectixs rather than reusing a key you already gave to something else, so that revoking it later affects nothing but us.

Bitkub API Management page with the Create API Key button highlighted
Tap the image to open it full size
STEP 03

Name it, and confirm with 2FA

Give the key a name you will recognise in six months 3 — "Vectixs" does the job. Then enter the current 6-digit code from Google Authenticator 4 and confirm.

The next screen is the only time you will ever see the API Secret. Copy both the key and the secret somewhere safe before you close or refresh it. Bitkub cannot show you the secret again, and a key without its secret is useless — you would have to delete it and start over.

Bitkub Create API Key dialog with the name and 2FA fields highlighted
Tap the image to open it full size
STEP 04

Set the permissions

Once the key exists you can review it from the list. The secret is masked from here on 5, which is what that warning above was about.

Under Permission 6, leave Read and Spot-Trade ticked, and leave Deposit and Withdraw unticked. Read lets us see your balances and open orders, Spot-Trade lets us place and cancel them. That is the entire list of what a bot needs.

Leave Active IP empty, as it is in the screenshot. Restricting a key to particular servers is optional, we do not need it, and getting it wrong stops your bot trading.

Bitkub API key detail with the masked secret and the permission checkboxes highlighted
Tap the image to open it full size
// WHEN SOMETHING GOES WRONG

The four things that actually go wrong

I closed the window before copying the secret

Delete the key on Bitkub and create a new one. There is no way to recover or re-display a secret, for you or for us, and a key without it cannot be used.

My orders are rejected with an IP error

The whitelist does not include the server the request came from. Check that both addresses above are listed and that "IP Amount" reads 2 rather than 0. If it still fails, clear the whitelist so trading resumes, then contact us.

Can Vectixs withdraw my coins?

No, and not because we promise not to. A key created as above has no withdrawal permission, so the request would be refused by Bitkub regardless of who sent it. There is no withdrawal call anywhere in our codebase.

How do I revoke access?

Delete the key from the same API Management page. It takes effect immediately and needs nothing from us. Any bot using it simply stops being able to place orders.

Bitkub also publishes its own guide to API keys, which covers the exchange's side in more depth and is kept current by them: Bitkub Support — API →

// NEXT

Paste it into Vectixs

Once saved, your key is encrypted at rest and never returned to your browser again, not even masked. You can replace it at any time; you can never read it back.

Create an account Read the security page