Exchange Connection Guides#
Anboto is non-custodial: it executes on your own venue accounts and never holds your funds. You connect each venue with a trade-only API key — read and trade permissions, never withdrawal — and restrict that key to Anboto's IP allowlist so it cannot be used from anywhere else.
Your IP allowlist is account-specific
The IP addresses to allowlist are unique to your Anboto account. Find them in the app under Settings → Linked Exchanges and use the Copy all button. Never copy IPs from a screenshot or another account — always take them from your own settings page.
For the general connection flow (tabs, IP allowlist, key security), see Connect Exchanges. The table below links to the step-by-step guide for each venue.
Venues#
| Venue | Class | Credentials needed | Sub-accounts |
|---|---|---|---|
| Binance | CEX | API key + secret | Yes |
| Bybit | CEX | API key + secret | Yes |
| OKX | CEX | API key + secret + passphrase | Yes |
| Gate.io | CEX | API key + secret | Yes |
| Bitget | CEX | API key + secret + passphrase | Yes |
| KuCoin | CEX | API key + secret + passphrase | Yes |
| MEXC | CEX | API key + secret | Yes |
| WOO X | CEX | API key + secret + application ID | Yes |
| Bullish | CEX | API key + secret + account ID | No |
| Coinbase Prime | CEX | API key + secret + passphrase + service account ID | No |
| Coinbase International | CEX | API key + secret + passphrase + service account ID | No |
| Hyperliquid | Perp-DEX | API wallet address + API wallet private key + main wallet address | No |
| Lighter | Perp-DEX | API key + secret + account index + API key index | Yes |
| Extended | Perp-DEX | API key + Stark private/public key + vault number | Yes |
| B2C2 | OTC | API key + secret (issued by B2C2) | Fixed pair |
Venues marked Yes for sub-accounts show an Add sub account button on their tile in Settings → Linked Exchanges, so you can link additional API keys for the venue's sub-accounts under the same connection. Sub-account names must not be main or Main — that name is reserved for the primary account. B2C2 is the exception: Anboto creates two fixed sub-accounts for it, SPOT and CFD, which cannot be added to or renamed.
Never enable withdrawal permission
Anboto only ever needs read and trade access. If a key is created with withdrawal (or transfer-out) permission, delete it and create a new one without it.
For which markets (spot / perps) each venue supports, see the venue support matrix. For how Anboto stores and protects your keys, see API Key Security.