Read-only API key guides
How to give a portfolio tracker read access to an exchange or broker, and nothing more. Each guide names the exact permissions to turn on and the ones to keep off.
Last updated: 5 November 2026
A read-only key lets an app see your balances. It cannot trade, transfer or withdraw, because the exchange refuses those requests for that key. Restrict the key to the app's IP address too: then a stolen key is of no use from anywhere else.
Key lifetimes differ. Bybit, KuCoin, OKX state that an IP-restricted read-only key does not expire. The other providers publish an expiry, or no rule at all.
Guides
| Provider | IP restriction | Key lifetime | Checked |
|---|---|---|---|
| Binance | Yes | No expiry date published | 2026-09-25 |
| Bitfinex | Yes | No expiry, as long as “Expiry date” is left empty | 2026-09-25 |
| Bitget | Yes | No published expiry rule | 2026-09-25 |
| Bitstamp | Yes | No published expiry rule | 2026-09-25 |
| Bitvavo | Yes | No published expiry rule | 2026-09-25 |
| Bybit | Yes | Never expires with an IP restriction | 2026-09-25 |
| Coinbase | Yes | No expiry date | 2026-09-25 |
| Crypto.com Exchange | Yes | No published expiry rule | 2026-09-25 |
| DEGIRO | No API | No key | 2026-09-25 |
| Deribit | Yes | No published expiry rule (keys have no expiry setting) | 2026-09-25 |
| Gate.io | Yes | No fixed expiry | 2026-09-25 |
| Gemini | Yes | Expires after 180 days without use | 2026-09-25 |
| Interactive Brokers | Yes | Up to 1 year — the IP lock doesn't extend it | 2026-09-23 |
| Kraken | Yes | No expiry date, as long as “Key Expiration” stays off | 2026-11-05 |
| KuCoin | Yes | Never expires with an IP restriction | 2026-09-25 |
| MEXC | Yes | Not confirmed by MEXC — check “Remaining Validity (Days)” in “My API Key” | 2026-09-25 |
| OKX | Yes | Never expires with an IP restriction | 2026-09-25 |
| Robinhood | No | Robinhood publishes no expiry for API credentials | 2026-10-22 |
| Trading 212 | Yes | No published expiry rule | 2026-09-25 |
| WOO X | Yes | No published expiry rule | 2026-09-25 |
We check each guide against the provider's own documentation and list those pages as sources. A provider can change a label at any time; the permission names stay the best guide.