Create a secure 
KuCoin API key
Minimum configuration required to operate all three bots without ever granting TIYlab permission to withdraw your funds.
Optional step: verify the exchange
The free simulated trial starts without an API. After the first meaningful simulated decision, you may create a strictly read-only key to verify account compatibility; this step never resets the trial.
- Keep General only, which provides account read access.
- Disable Spot Trading, Futures Trading, Margin, Unified Account, Allow Flexible Transfers, Transfer, Earn and Withdrawal.
- Add the TIYlab IP restriction and use a dedicated key for the simulated trial.
To switch to live mode later, TIYlab revokes this key and requires a new live key.
Live key: permissions to enable
- General (default)
- Spot Trading
- Futures Trading
- Unified Account
- Allow Flexible Transfers
Forbidden permissions
- Transfer (⚠️ KUCOIN TRAP: this checkbox = WITHDRAWAL of assets)
- Withdrawal
- Margin Trading
Never enable withdrawal permissions, even temporarily.
The permission you actually need is 'Allow Flexible Transfers', not 'Transfer'. IP whitelist is mandatory on KuCoin.
Optional Macro lending: if you enable it, KuCoin may require an Earn permission. Enable only that product permission if present, never Transfer or Withdrawal.
Exchange interfaces and labels may change. Review every permission before confirming the key. TIYlab is software, not financial advice.