How to apply for Bybit's API? What permissions can be set?

Bybit's API allows users to automate trading and access real-time data; apply by navigating to API management, creating a key, setting permissions, and testing the setup.

May 14, 2025 at 10:14 am

How to Apply for Bybit's API? What Permissions Can Be Set?

Bybit, a leading cryptocurrency exchange, offers an API (Application Programming Interface) that allows users to automate trading and access real-time data. Understanding how to apply for Bybit's API and what permissions can be set is crucial for users who wish to enhance their trading experience. This article will guide you through the process of applying for Bybit's API and detail the permissions that can be configured.

Navigating to the API Management Page

To begin the process of applying for Bybit's API, you need to navigate to the API management section on the Bybit platform. Here's how you can do it:

• Log in to your Bybit account. Ensure you are using a secure connection and that your account is fully verified.
• Go to the 'API Management' section. You can find this under the 'Account' or 'Settings' menu, depending on the interface layout.

Once you are on the API management page, you will see various options and settings related to API keys.

Creating a New API Key

Creating a new API key is the first step in applying for Bybit's API. Follow these steps:

• Click on the 'Create New API Key' button. This will prompt you to enter a name for your API key, which helps in organizing and identifying different keys.
• Enter a name for your API key. Choose a descriptive name that will help you remember the purpose of the key, such as 'Trading Bot' or 'Data Analysis'.
• Confirm the creation of the API key. You will be asked to enter your 2FA code to proceed, ensuring the security of your account.

After completing these steps, Bybit will generate a unique API key and a secret key. It is crucial to save both the API key and the secret key securely, as the secret key will not be displayed again for security reasons.

Setting API Permissions

Bybit allows users to set specific permissions for each API key, enabling fine-tuned control over what actions the key can perform. Here are the permissions you can set:

• Read Only: This permission allows the API key to access account information and market data but cannot perform any trading actions. It is ideal for data analysis and monitoring purposes.
• Read and Trade: This permission grants the API key the ability to access account information, market data, and execute trades. It is commonly used for automated trading strategies.
• Read, Trade, and Withdraw: This is the most permissive setting, allowing the API key to access account information, market data, execute trades, and withdraw funds. Use this setting with caution, as it poses a higher security risk.

To set the permissions, follow these steps:

• Select the desired permissions for your API key. You can choose from the options listed above.
• Confirm the permissions. You may be asked to enter your 2FA code again to finalize the settings.

Understanding IP Whitelisting

Bybit offers an additional layer of security through IP whitelisting, which restricts API access to specific IP addresses. This can help prevent unauthorized access to your account. To set up IP whitelisting:

• Navigate to the 'IP Access' section within the API management page.
• Enter the IP addresses you wish to whitelist. You can add multiple IP addresses if needed.
• Save the settings. Ensure you have access to the whitelisted IP addresses, as you will not be able to use the API from other IP addresses.

Testing and Verifying Your API Key

After setting up your API key and permissions, it is important to test and verify that everything is working correctly. Here's how you can do it:

• Use Bybit's API documentation to find example code and endpoints for testing. The documentation provides detailed instructions on how to use the API.
• Write a simple script to test the API key. For example, you can write a script to fetch the current market price or place a test order.
• Run the script and verify that it returns the expected results. If you encounter any issues, double-check your API key, secret key, and permissions.

Managing and Revoking API Keys

It's essential to manage your API keys regularly to ensure the security of your account. Bybit provides options to view, edit, and revoke API keys:

• View your API keys: You can see all your active API keys and their permissions on the API management page.
• Edit permissions: If you need to change the permissions of an existing API key, you can do so by selecting the key and adjusting the settings.
• Revoke an API key: If you suspect any unauthorized activity or no longer need an API key, you can revoke it by selecting the key and confirming the action.

Frequently Asked Questions

Q: Can I have multiple API keys with different permissions on Bybit?

A: Yes, Bybit allows you to create multiple API keys, each with different permissions. This enables you to manage different aspects of your trading and data analysis separately.

Q: What should I do if I lose my API secret key?

A: If you lose your API secret key, you will need to create a new API key. Unfortunately, lost secret keys cannot be recovered, so it's crucial to store them securely.

Q: Is it possible to use Bybit's API without enabling withdrawals?

A: Yes, you can set your API key to 'Read Only' or 'Read and Trade' permissions, which do not allow withdrawals. This is a safer option if you do not need to withdraw funds through the API.

Q: How often should I check and update my API keys?

A: It's a good practice to review your API keys and their permissions regularly, at least once a month. If you notice any suspicious activity or no longer need a key, revoke it immediately to maintain the security of your account.