API Key Permissions
Create a trading-only API key on your exchange — enable Futures/Derivatives trading only.
Do not enable withdrawals or transfers. Restrict the key to your IP address if your exchange supports it.
Your API keys are stored in Supabase (AES-256 encryption at rest) and are only accessed by the Finora listener bot to place orders.
Keys are never logged, displayed in plain text after saving, or accessible to other users.
You can update or revoke them at any time by returning to this page.