Connect an Exchange
Bring your own API keys, disable withdrawals, and keep live and testnet keys separate.
Connect an Exchange
CoTrading uses a bring-your-own-key (BYO) model. You create API keys on your exchange and add them to the app. Keys are stored locally on your machine, never entered into logs, and never uploaded.
Create keys with withdrawals disabled
When you generate an API key on your exchange, grant it only the permissions CoTrading needs — trading and market data. Do not enable withdrawal permission.
Always disable withdrawals
CoTrading validates that your live API key has withdrawals disabled before allowing live trading. Disabling withdrawals means that even in a worst case, no one can move funds off the exchange with this key.
Testnet first
Testnet is the default connection type. It lets you run the entire workflow — charts, AI analysis, plan approval, order placement — against a simulated environment with no real funds. Use it to build confidence before considering live trading.
Separate slots for live and testnet keys
CoTrading stores live keys and testnet keys in separate slots. They are never mixed. This keeps a testnet experiment from ever accidentally touching a live account, and makes it explicit which environment you are operating in.
Where keys live
- Stored on your machine, local-first.
- Never written to logs.
- Never uploaded to any server.
See Security & Privacy for the full data-handling model.
Next steps
- Markets Workspace — analyze the market once connected.
- Live Trading — the extra gates required to switch to real funds.
CoTrading Docs