Connect Binance Trade-Only API Keys to Breakflare Trading Agent

Breakflare’s core product is a daily hype-momentum tracker for CoinGecko ranks 51-200. Trading agent is an optional Plus layer that starts in paper by default. If you later enable live fills, treat Binance API keys as trade-only plumbing: Enable Spot & Margin & Stock Trading on, Enable Withdrawals off, and the trusted IP set to Breakflare’s trading server. Not your home IP, not a VPN address, and not a Supabase IP. Breakflare does not custody funds. Core research still does not place trades or publish price targets.

Key Takeaways

• Create an HMAC Binance key with spot trading on and withdrawals off, allowlisted to Breakflare’s server.
• Confirm paper mode still works with your written gates before any live toggle.
• Never reuse a withdraw-enabled admin key or paste keys into chat.
• Live fills use your keys plus PAYG credits; research scores remain attention tools, not order tickets.

Why do trade-only keys exist?

Exchange API keys are permission bundles. A key that can withdraw is a remote control for your funds. A trade-only key is narrower: it can place and manage spot orders the agent is allowed to send, and it cannot move assets off the exchange.

That split matters because Breakflare research (hype, 3d/7d momentum, Climb, Breakout Score™, confidence) never needs withdrawal rights. Even the agent only needs trading scope if you choose live mode. Paper mode needs no exchange key at all for simulation habits; live mode is a separate graduation.

Binance documents API key creation and permission controls in its own help center and Academy materials (Binance Academy, public education hub). Follow the exchange UI for the latest toggles. The desk rule is stable even when menus move: trading yes, withdrawals no.

Most key mistakes are social, not cryptographic. People reuse an old admin key “just to test,” screenshot a secret, or paste credentials into member chat. Trade-only policy fails if the secret handling is sloppy.

How do you create a Binance key with withdrawals disabled?

The create screen labels are stable enough to follow directly. Full click-path: Binance trade-only API key guide.

1. Open API management in your Binance account and create a new key. Do not recycle an old bot key.
2. The first screen is Choose API Key type, before any name field. Select System generated. That option uses HMAC and gives you an API Key plus a Secret Key. Breakflare signs requests with HMAC-SHA256 and needs both. Self-generated is Ed25519 or RSA (you upload your own public key) and will not connect.
3. When Binance asks for a name, type Breakflare. That label is how you recognize this key in your Binance list later. It is not a password, and you do not paste the name into Breakflare.
4. Choose Restrict access to trusted IPs only and add Breakflare’s trading server, 167.233.164.205. Do not add your own IP, a VPN address, or a Supabase IP. Your browser never calls Binance. Supabase only stores the encrypted key. The agent signs orders from that server.
5. Turn on Enable Reading and Enable Spot & Margin & Stock Trading. Binance will not enable the spot box until a trusted IP is saved. Leave Unrestricted off: Binance deletes a key that stays unrestricted once any permission other than Reading is on.
6. Leave off Enable Margin Loan, Repay & Transfer, Enable Futures, Permits Universal Transfer, Enable Withdrawals, Enable Alpha Withdrawals, Enable Prediction Trading, and Enable Symbol Whitelist.
7. Copy the API Key and Secret Key once into a password manager. Binance does not show the Secret Key in full again. Never put them in Notion, Telegram, email, or chat.

Do not enable universal transfer or withdrawals “in case we need it later.” If you are still validating process, stay in paper mode and skip key creation entirely.

Connecting the key in Settings, and closing or refilling a position from the app, calls Binance from 167.233.164.205. That is the only address to put on the key.

How do you paste the key in Settings and prove paper still runs?

Connect keys only after your paper log is boring in a good way: every fill explains itself from score floors, size, stops, and kill switch (score floors, guardrails).

Suggested sequence:

1. Keep Trading agent in paper.
2. Write gates that match your daily band workflow: Breakout Score™ floor, climb, confidence floor, size cap, stop, kill switch.
3. Run paper long enough that the activity log matches those gates (paper then live).
4. Only then paste the trade-only key in Settings.
5. Confirm the UI still shows paper as the active mode until you intentionally toggle live.
6. Do a tiny live rehearsal only after kill-switch practice (kill switch drill).

If paper behavior changes after key paste, stop. Fix settings before you blame the market. Keys are plumbing; gates are the product of your desk discipline.

What does Breakflare never hold?

Breakflare does not custody your coins. Research boards, whales tabs, alerts, and scoring history do not require exchange balances. For live agent fills, Breakflare uses the permissions you granted on Binance plus PAYG credits for billable live activity (credits explainer).

What you should assume Breakflare never needs:

• Withdraw permission
• Your seed phrases
• Admin keys shared across unrelated bots
• Screenshots of a full Secret Key in support tickets or member chat

If a workflow asks for withdraw rights, it is the wrong workflow. Return to trade-only.

Also keep research and agent mental models separate. Breakout Score™ and confidence help you decide what is researchable. They are not automatic order tickets. Low-confidence skip still applies after keys are connected.

How should you rotate or revoke keys safely?

Keys are disposable credentials. Plan for rotation before you need emergency rotation.

Good practice:

1. Keep a written inventory: key label, created date, permissions, IP restriction status, last rotated date.
2. Rotate after any suspected exposure (screenshot, shared machine, accidental paste).
3. Rotate on a calendar even without incidents, especially if multiple operators can view Settings.
4. Revoke the old key in Binance before you delete the password-manager entry, and confirm paper/live modes behave as expected after the swap.
5. Never rotate by creating a “temporary” withdraw-enabled key “just for speed.”

If you leave a desk or pause Plus for a long stretch, revoke the Breakflare-labeled key rather than leaving trade permissions orphaned. Paper research does not require it. Live agent work can recreate a narrow key later.

Also separate human trading keys from agent keys. Mixing discretionary manual bots, other third-party tools, and Breakflare on one credential makes incident response guesswork. One job, one key, one permission set.

What operational checks belong next to the key?

A trade-only key is necessary, not sufficient. Put these checks on the same checklist page:

• Paper activity log matches score floors and size caps
• Kill switch location is known and rehearsed
• PAYG credit policy understood for live fills (credits)
• No low-confidence auto entries (skip habit)
• Dominance or risk-off tighten/pause triggers written (dominance rules)
• Research board still sorted independently of agent fills (daily workflow)

If any of those bullets is missing, keep the key disconnected. Plumbing without process is how “we only meant to test” becomes an unowned live session.

What does a first live day look like after keys are connected?

If you ever graduate beyond paper, make day one boring on purpose.

1. Confirm withdrawals still disabled on the Binance key.
2. Confirm the trusted IP is still Breakflare’s trading server, not a personal or VPN address.
3. Confirm PAYG credits and kill switch are understood.
4. Allow only the smallest size your rules permit.
5. Allow only names that clear the same Breakout Score™, climb, and confidence floors you used in paper.
6. Stop after the first clean session review, even if nothing exciting happened.

Exciting first live days are usually the ones people regret. Boring first live days are how trade-only plumbing stays trade-only plumbing. Keep research sorting on the band independent of whether a fill occurred. Scores remain attention tools; fills remain optional execution.

How do trade-only keys fit the rest of Plus onboarding?

Treat key connection as a late onboarding step, not a first-day trophy.

Suggested order for new Plus operators:

1. Learn the band sort and column language on the live board.
2. Build a tiny shortlist for a week without any agent ambition.
3. Run Trading agent in paper until fills are explainable.
4. Create the Binance trade-only key.
5. Connect the key while paper remains on.
6. Only then consider a tiny live rehearsal with kill switch ready.

Skipping straight to keys teaches the wrong lesson: that Breakflare is an exchange remote. It is not. It is a mid-cap attention research system with an optional agent layer. If onboarding pressure makes people paste keys early, slow the checklist down in writing and share it with the teammate before Settings is opened.

Want the live rank 51-200 board, whales, alerts, and paper Trading agent? Start a 14-day Plus trial at app.breakflare.com (Plus is $399/mo or $3990/yr).

Key connection checklist

Frequently asked questions

Does Breakflare custody funds?
No. Live agent fills, when enabled, go through your Binance account with the permissions on your API key.

Can the recommended key withdraw?
It should not. Leave Enable Withdrawals and Enable Alpha Withdrawals off.

Which exchange is supported for live agent fills?
Live Trading agent fills are designed around Binance trade-only keys. Paper mode does not require exchange keys.

What happens at $0 credits?
Live billable agent activity depends on PAYG credits. Paper research and the attention board remain separate from credit balance. See the credits guide.

Should I reuse an old trading-bot key?
No. Create a dedicated key with the narrowest permissions and rotate it if it was ever exposed.

Do research scores need API keys?
No. Hype, momentum, Climb, Breakout Score™, and confidence for the rank 51-200 board do not require Binance keys.

Related reading

• Introducing Breakflare Trading agent
• Paper mode first
• Guardrails before you go live
• How live Trading agent credits work