Developer API & Webhook Center

API KEY SECURITY MODEL

API keys are shown once at creation. Only a hash is stored thereafter. Never store retrievable plaintext keys. Execution scopes (orders:execute) are not granted automatically — require explicit authorization.