Link Your Exchange

Trade-only, by design

Aegis is non-custodial and never holds your funds. To trade on your behalf it needs an exchange API key that cannot withdraw. Aegis rejects any key that has withdrawals enabled — this is enforced, not a suggestion.

Binance is live today. Bybit and OKX are coming soon.

Create a Binance API key

1. Sign in to Binance and open API Management.
2. Create a new API key and label it (for example, aegis-trading).
3. Enable Spot trading permissions.
4. Disable withdrawals. Leave the withdrawal permission off. Aegis will refuse a key that can move funds off the exchange.
5. Optional but recommended: add an IP allowlist so the key only works from Aegis's servers.
6. Copy the API key and secret. Binance shows the secret only once.

Paste it into Aegis

1. In Aegis, go to Exchanges and choose Add Binance.
2. Paste the API key and secret and save.
3. Aegis validates the key and confirms that withdrawals are disabled. If the key can withdraw, it is rejected.

How your key is protected

• On arrival the secret is envelope-encrypted with a KMS (AWS KMS) — it is never stored in plaintext.
• The secret is never shown again and the API never returns it.
• Keys are isolated per tenant with PostgreSQL Row-Level Security as defense in depth.
• Every access is recorded in an immutable audit trail.

If you ever suspect a key is compromised, revoke it on Binance and add a fresh trade-only key.

Next: build your first strategy.