Understanding API Permissions

Learn exactly what permissions Rainbow needs and why. We only request the minimum permissions required for trading - never withdrawal access.

Our Permission Principles

Minimum Required

We only request permissions absolutely necessary for trading

Never Withdrawals

We never request withdrawal or transfer permissions

Your Funds Stay Safe

Your money always remains in your exchange account

🚫 What Rainbow NEVER Accesses

  • Withdrawal permissions
  • Transfer capabilities
  • Account settings changes
  • API key management
  • Security settings
  • Personal information

Required Permissions by Exchange

🟡

Binance

Spot & Margin Trading

REQUIRED
LOW RISK

Allows buying and selling cryptocurrencies in spot markets

What it allows:
  • •Place buy and sell orders
  • •Cancel existing orders
  • •View order history
  • •Access trading pairs
Why we need it:

Essential for automated trading strategies

Futures Trading

REQUIRED
MEDIUM RISK

Enables trading in futures and derivatives markets

What it allows:
  • •Trade perpetual futures
  • •Manage leverage positions
  • •Access advanced trading features
  • •Execute complex strategies
Why we need it:

Required for advanced bot strategies and higher returns

Read

REQUIRED
LOW RISK

Access to account information and balances

What it allows:
  • •View account balances
  • •Check trading history
  • •Monitor positions
  • •Access market data
Why we need it:

Necessary for bot to understand account status

Special Notes for Binance:

  • âš Never enable withdrawal permissions
  • âš IP whitelisting is mandatory for trading
  • âš Futures permission is required for all Rainbow strategies
🟠

Bybit

Contract Trading

REQUIRED
MEDIUM RISK

Trading derivatives and perpetual contracts

What it allows:
  • •Execute futures trades
  • •Manage contract positions
  • •Access leverage trading
  • •Use advanced order types
Why we need it:

Core functionality for Rainbow trading strategies

Spot Trading

REQUIRED
LOW RISK

Traditional cryptocurrency spot trading

What it allows:
  • •Buy and sell cryptocurrencies
  • •Place market and limit orders
  • •Access spot trading pairs
  • •Manage spot positions
Why we need it:

Required for diversified trading approaches

Wallet

REQUIRED
LOW RISK

Read access to wallet balances and information

What it allows:
  • •View wallet balances
  • •Check available funds
  • •Monitor position sizes
  • •Access trading history
Why we need it:

Essential for position sizing and risk management

Futures Trading

REQUIRED
MEDIUM RISK

Advanced futures and options trading capabilities

What it allows:
  • •Trade futures contracts
  • •Access options markets
  • •Use advanced strategies
  • •Manage complex positions
Why we need it:

Required for Rainbow's advanced trading algorithms

Special Notes for Bybit:

  • âš All four permissions are mandatory
  • âš Wallet permission does NOT allow withdrawals
  • âš Contract and Futures permissions work together
🔵

OKX

Trade

REQUIRED
MEDIUM RISK

General trading permission for all markets

What it allows:
  • •Execute all types of trades
  • •Access spot and futures markets
  • •Use margin trading
  • •Place complex orders
Why we need it:

Comprehensive trading access for all Rainbow strategies

Read

REQUIRED
LOW RISK

Access to account data and market information

What it allows:
  • •View account information
  • •Check balances and positions
  • •Access trading history
  • •Monitor market data
Why we need it:

Required for account monitoring and strategy execution

Futures Trading

REQUIRED
MEDIUM RISK

Specific access to futures and derivatives

What it allows:
  • •Trade perpetual swaps
  • •Access futures markets
  • •Use leverage trading
  • •Execute advanced strategies
Why we need it:

Essential for Rainbow's high-performance strategies

Special Notes for OKX:

  • âš Requires passphrase in addition to API key and secret
  • âš Trade permission is very broad on OKX
  • âš Never enable withdrawal permissions
🟢

Bitget

Spot Trading

REQUIRED
LOW RISK

Cryptocurrency spot market trading

What it allows:
  • •Trade spot markets
  • •Place buy/sell orders
  • •Access trading pairs
  • •Manage spot positions
Why we need it:

Foundation for all trading strategies

Futures Trading

REQUIRED
MEDIUM RISK

Derivatives and futures market access

What it allows:
  • •Trade futures contracts
  • •Use leverage trading
  • •Access derivatives
  • •Execute advanced strategies
Why we need it:

Required for Rainbow's advanced algorithms

Read Only

REQUIRED
LOW RISK

Account information and balance access

What it allows:
  • •View account details
  • •Check balances
  • •Monitor positions
  • •Access trade history
Why we need it:

Essential for account monitoring and risk management

Wallet

REQUIRED
LOW RISK

Wallet information and balance access

What it allows:
  • •View wallet balances
  • •Check available funds
  • •Monitor asset allocation
  • •Access transaction history
Why we need it:

Required for proper position sizing and fund management

Special Notes for Bitget:

  • âš All four permissions are required
  • âš Wallet permission is read-only (no withdrawals)
  • âš IP whitelisting is strongly recommended
🟣

Hyperliquid

Trading

REQUIRED
MEDIUM RISK

General trading access for DEX operations

What it allows:
  • •Execute trades on DEX
  • •Access perpetual markets
  • •Place and cancel orders
  • •Use advanced order types
Why we need it:

Core functionality for decentralized trading

Read

REQUIRED
LOW RISK

Access to account and market data

What it allows:
  • •View account information
  • •Check positions and balances
  • •Access trading history
  • •Monitor market conditions
Why we need it:

Essential for strategy execution and monitoring

Futures Trading

REQUIRED
MEDIUM RISK

Perpetual and futures trading on DEX

What it allows:
  • •Trade perpetual contracts
  • •Access leverage trading
  • •Use advanced strategies
  • •Manage complex positions
Why we need it:

Required for Rainbow's DeFi trading strategies

Special Notes for Hyperliquid:

  • âš Decentralized exchange with wallet-based authentication
  • âš IP whitelisting may not be available
  • âš Requires wallet signature for API creation

How Permissions Keep You Safe

Trading Permissions Only

  • Can execute buy and sell orders
  • Can read account balances and positions
  • Can access trading history for analysis

What's Protected

  • Cannot withdraw or transfer funds
  • Cannot change account settings
  • Cannot access personal information

Common Questions

Why does Rainbow need Futures Trading permissions?

Our advanced trading strategies (both Alpha Compounder and XPat Trader) use futures markets for better liquidity, lower fees, and access to leverage. This enables more profitable trading opportunities while maintaining risk management.

Can Rainbow access my funds with these permissions?

No. Trading permissions only allow us to buy and sell cryptocurrencies within your account. We cannot withdraw, transfer, or move funds out of your exchange account.

What if I accidentally enable withdrawal permissions?

If you accidentally enable withdrawal permissions, disable them immediately on your exchange. Rainbow's code is designed to never use withdrawal functions, but it's safer to not have them enabled at all.

Can I revoke permissions anytime?

Yes! You can disable or delete API keys anytime from your exchange settings. This will immediately stop Rainbow from trading on your account.

Learn More About Security

API Key Security Best Practices

Learn how to keep your API credentials safe

How Your Funds Stay Safe

Our complete security architecture

Ready to set up your API keys securely?

Exchange Connection Guide