Connect Your Binance API Key
GridFlow needs a Binance API key to place orders on your behalf. Your key never leaves your server — it's stored encrypted in your local database.
1. Create an API key on Binance
- Log in to binance.com
- Click your profile icon → API Management
- Click Create API
- Choose System generated
- Give it a label, e.g.
GridFlow - Complete 2FA verification
2. Set the correct permissions
On the API key settings page, enable only these permissions:
| Permission | Required | Why |
|---|---|---|
| Read Info | ✅ Yes | View balances and orders |
| Enable Spot & Margin Trading | ✅ Yes | Place and cancel orders |
| Enable Withdrawals | ❌ No | Never needed — disable for safety |
| Enable Futures | ❌ No | GridFlow is Spot only |
Never enable the withdrawal permission on a bot API key. If your server were ever compromised, an attacker with withdrawal permission could drain your account. Read + Spot trading is all GridFlow needs.
3. Restrict to your server's IP (recommended)
On the same API settings page, find IP access restrictions and select Restrict access to trusted IPs only. Enter your VPS IP address.
This means even if someone steals the API key, it won't work from any other IP.
4. Copy your API key and secret
Binance shows the Secret Key only once — copy it immediately and save it somewhere safe (like a password manager). The API Key is always visible in your API Management page if you need it again.
5. Add the key to GridFlow
- Open your GridFlow dashboard:
http://YOUR_SERVER_IP:8000/dashboard/ - If you haven't registered yet, create an account first
- Go to API Keys in the sidebar
- Click Add API Key
- Paste your API Key and Secret Key
- Toggle Testnet if you're using the Binance Testnet
- Click Save
GridFlow encrypts the key before storing it in the database. The raw key is never saved in plaintext.
Testnet mode
If you want to test without real funds:
- Go to testnet.binance.vision
- Log in with GitHub
- Generate a testnet API key
- Add it to GridFlow with Testnet toggled on
Testnet funds are fake. All bot behavior is identical to live trading.