Binance trade-only API keys

Prerequisites

• Core or Plus for paper and live spot fills. Compare plans on the pricing page.
• Credits topped up in the app for live orders (pay-as-you-go; live pauses at $0).
• Paper mode works without any exchange keys on Core and Plus (including the Plus trial).

Open Binance API Management

Sign in at accounts.binance.com (or your regional Binance host), then open Binance API Management directly: binance.com/en/my/settings/api-management . You can also reach it from your account menu → API Management. Create a new API key. Do not reuse a key you already share with other apps.

Choose System generated

The first screen is Choose API Key type. It appears before Binance asks for a name. Select System generated, then click Next.

System generated uses HMAC symmetric encryption. Binance gives you an API Key and a Secret Key. Breakflare signs every request with HMAC-SHA256 and needs both of those values.

Self-generated uses Ed25519 or RSA. Binance gives you an API Key only, and you upload a public key you created yourself. Breakflare cannot sign those requests, so that key will not connect.

Name it Breakflare

After you choose System generated, Binance asks for a name. Type Breakflare. That name is a label in your Binance account so you can tell this key apart from any others later, including if you need to turn it off. It is not a password, and you do not paste the name into Breakflare.

Which boxes to turn on

Binance shows the permissions after the key is created. Turn on these:

• Enable Reading (already checked; leave it on)
• Enable Spot & Margin & Stock Trading
• Enable Futures, if you want Plus (including a Plus trial) to trade USD-M perps for coins that are not on Binance spot. Leave it off if you only want spot. Core stays on spot even when this box is on.

Leave these off:

• Enable Margin Loan, Repay & Transfer
• Permits Universal Transfer
• Enable Withdrawals
• Enable Alpha Withdrawals
• Enable Prediction Trading
• Enable Symbol Whitelist (a whitelist blocks coins the agent is allowed to trade)

Binance will not let you turn on Enable Spot & Margin & Stock Trading until the key is limited to trusted IPs. The checkbox says you must apply the IP access restriction first. For the spot API reference, see developers.binance.com/docs/binance-spot-api-docs .

Allowlist Breakflare's trading server

Choose Restrict access to trusted IPs only. Do not leave Unrestricted selected. Binance deletes a key that stays unrestricted once any permission other than Reading is on.

Do not paste your own IP, a VPN address, or a Supabase IP. Your browser never calls Binance, and a VPN on your laptop does not change the address Binance sees. Supabase only stores the encrypted key. The agent signs orders from Breakflare's server.

Add this IPv4 address:

167.233.164.205

That host places the daily entries and runs the exit monitor. After it is saved, turn on Enable Spot & Margin & Stock Trading.

Connecting the key in Settings, and closing or refilling a position from the app, calls Binance from this same address. A key locked to `167.233.164.205` is what Connect expects.

Copy the API Key and Secret Key once

Binance shows both only on the create screen: copy the API Key and Secret Key before you leave. They are not shown in full again. Store them in a password manager. Never email them or put them in chat.

Paste into Breakflare Settings

In the app, open Settings → Trading agent , paste the API Key and Secret Key, and connect. Breakflare verifies the key is trade-only (Enable Withdrawals off, spot trading on) before storing it encrypted at rest.

What Breakflare rejects

At connect time, Breakflare checks Binance API restrictions. If Enable Withdrawals is on, connection fails: create a new trade-only key with that box left off and try again. A key without Enable Spot & Margin & Stock Trading is also rejected.

Safety notes

• Use a dedicated key for Breakflare. Revoke it anytime from Binance API Management if you stop using live mode.
• Never enable Enable Withdrawals, Enable Alpha Withdrawals, or Permits Universal Transfer on this key.
• Plus USD-M entries are 1x isolated longs only, and only when the coin has no Binance spot pair. The agent sets isolated margin and 1x before each entry and skips the coin if that does not stick. It closes with a reduce-only sell. It does not transfer USDT between the spot and futures wallets, so the futures wallet needs its own USDT.
• Do not raise leverage in the Binance app. A 1x isolated long can still lose the margin in that wallet: funding is charged about every 8 hours, a large mark move can liquidate the position, and a delisting can cash-settle it. This is not a purchase of the Binance Alpha token.
• Live trading can lose money. Paper mode is included and never places exchange orders.
• Breakflare never holds your balances. Orders route to your own Binance account within the rules you set.
• You are responsible for your own keys and trades.

After you connect

Set or review rules on the trading agent page (score floor, size, stop-loss, take-profit, kill switch), top up credits, then enable live only when you intend to. You can stay in paper forever.