Create a secure 
OKX API key
Minimum configuration required to operate all three bots without ever granting TIYlab permission to withdraw your funds.
Optional step: verify the exchange
The free simulated trial starts without an API. After the first meaningful simulated decision, you may create a strictly read-only key to verify account compatibility; this step never resets the trial.
- Enable Read only.
- Keep Trade, Withdraw and every Earn permission disabled.
- Add the IP whitelist to avoid key expiry and use a dedicated key.
To switch to live mode later, TIYlab revokes this key and requires a new live key.
Live key: permissions to enable
- Read
- Trade (includes internal transfers)
Forbidden permissions
- Withdraw
Never enable withdrawal permissions, even temporarily.
Without IP whitelist, the key expires after 30 days.
Optional Macro lending: if you enable it, OKX may require an Earn / Simple Earn permission. Enable only that product permission if present, never Withdraw.
Exchange interfaces and labels may change. Review every permission before confirming the key. TIYlab is software, not financial advice.