How to create a read-only WOO X API key

Open WOO X Subaccounts and API ↗

We checked these steps against WOO X's own documentation on 25 September 2026. WOO X can rename a button at any time. If a label differs, look for the same permission.

Before you start

• Google Authenticator must be linked to your WOO X account. WOO X will not create a key without it.
• WOO X may ask you to verify your account first, and that review can take some time.
• Main and each subaccount need their own key, so note which accounts hold your funds.

Permissions

Turn on only:

• Read

Keep these off:

• Enable Trading
• Enable Withdrawals
• Enable DMM Scope

Steps

Sovereign connects to WOO X from one fixed IP address. The connection form in Sovereign shows it next to these steps, with a copy button.

1. On a computer, log in to your WOO X main account with your normal login, not “Log in with Subaccount”.
2. After logging in, open “Subaccounts and API” from the person icon menu, or click the button above again.
3. In the “API List” section, click “Create API”.
4. In the “Create API Key” window, set “Account” to “Main”, or to the subaccount whose funds you want to track.
5. Under “Permissions”, keep “Read” ticked. Leave every other box unticked, such as “Enable Trading” and “Enable Withdrawals” (if shown).
6. Copy Sovereign's IP address and paste it into “Allowed IPs”. Do not type it by hand.
7. If the address stays in the box, click “Add”. Check that exactly one tag with the full address appears below it.
8. Enter the 6-digit code from your authenticator app in “Google Authenticator Code”, then click “Create API”.
9. In the “This information is shown only once” window, copy the “API Key” and paste it into API KEY in Sovereign. Don't click “Confirm” yet.
10. Copy the “API Secret”, paste it into API SECRET in Sovereign, and press “Connect & Sync”.

Where each value goes in Sovereign:

• API Key → API KEY
• API Secret → API SECRET

Does a WOO X API key expire?

• With an IP restriction: No published expiry rule.
• Without an IP restriction: No published expiry rule.

WOO X publishes no clear expiry rule. If the key stops working, Sovereign marks the connection as expired and asks for a new key.

Each key reads one account only: Main or one subaccount. If your funds sit in several accounts, create one key per account and add a separate WOO X connection in Sovereign for each.

If something goes wrong

• If “Two-Factor Authentication (2FA) Required” or “Account Verification Required” opens: finish “Bind” or “Verify”, then click “Create API” again.
• If a tag shows a shorter address (usually from typing it): remove it with its x and paste the full address again.
• If WOO X asks for your Trading Password: enter it, then continue.
• If you clicked “Confirm” before copying the “API Secret”: click “Delete” on that key in “API List” and create a new one.

Sources

• support.woox.io/hc/en-us/articles/4410291152793--API-creation
• docs.woox.io/#security
• support.woox.io/hc/article_attachments/44076848470425
• support.woox.io/hc/article_attachments/44114200984985