How to create a read-only Bitvavo API key

Open Bitvavo API settings ↗

We checked these steps against Bitvavo's own documentation on 25 September 2026. Bitvavo can rename a button at any time. If a label differs, look for the same permission.

Before you start

• Your Bitvavo account is fully verified.
• Your account has a phone number and two-factor authentication (2FA) turned on. Bitvavo needs both before it creates API keys.
• Use Bitvavo's website. The Bitvavo app cannot create API keys.

Permissions

Turn on only:

• View access (or View information)

Keep these off:

• Trade digital assets (or Trade digital currencies)
• Withdraw digital assets (or Withdraw currencies)
• Include all subaccounts
• Internal Transfer
• Administrative

Steps

Sovereign connects to Bitvavo from one fixed IP address. The connection form in Sovereign shows it next to these steps, with a copy button.

1. Use the button above to open Bitvavo's API page, and log in if asked.
2. Click “Add new API key”.
3. In “Name”, type a name you will recognise, such as Sovereign.
4. Paste Sovereign's IP address (use its copy button) into “IP Whitelist”. Add nothing else.
5. Turn on only the view switch, labelled “View access” or “View information”.
6. Leave every other switch off, including trading and withdrawals.
7. Enter the 6-digit code from your authenticator app (and your password, if asked), then click “Confirm”.
8. Copy the API key and API secret Bitvavo shows before you close the page. The secret is shown only once.
9. Open Bitvavo's confirmation email and click its link to activate the key.
10. Paste the API key and API secret into the fields of Sovereign's connection form, then press “Connect & Sync”.

Where each value goes in Sovereign:

• API key → API KEY
• API secret → API SECRET

Does a Bitvavo API key expire?

• With an IP restriction: No published expiry rule.
• Without an IP restriction: No published expiry rule.

Bitvavo publishes no clear expiry rule. If the key stops working, Sovereign marks the connection as expired and asks for a new key.

Sovereign reads your main Bitvavo account's balances and the assets locked in fixed staking. Subaccount balances are not included.

If something goes wrong

• If the email arrives before the key is shown: click its link first, then copy the key and secret.
• If the key is not active: click the link in Bitvavo's confirmation email, or reactivate the key under “Settings” > “API”.
• If Sovereign reports an IP whitelist error: check that “IP Whitelist” includes Sovereign's IP address, typed exactly. If you can't edit it, delete the key and create a new one.
• If you lost the API secret: delete the key in Bitvavo and create a new one.

Sources

• support.bitvavo.com/hc/en-us/articles/4405059841809-What-are-API-keys-and-how-do-I-create-them
• docs.bitvavo.com/docs/get-started/
• docs.bitvavo.com/docs/errors/
• support.bitvavo.com/hc/en-us/articles/41947001763473-How-can-I-connect-my-Bitvavo-account-to-CoinTracking