How to create a Bybit API key with spot trading permissions and connect it to TradingForge.
Bybit is a major derivatives and spot exchange supported by TradingForge. This guide covers creating a system-generated API key with the correct spot trading permissions and connecting it securely to TradingForge.
Never enable asset or withdrawal permissions on your Bybit API key. TradingForge only needs spot trading access. Enabling asset permissions creates unnecessary risk to your funds.
Creating Your Bybit API Key
1
Log in to Bybit
Go to bybit.com and log in to your account.
2
Navigate to API Management
Click on your profile icon in the top-right corner and select Account & Security. Scroll down and click on API Management.
3
Click "Create New Key"
On the API Management page, click the Create New Key button.
4
Select System-Generated API Keys
When prompted for the key type, select System-Generated API Keys. This is the standard type for automated trading tools.
5
Set a name for your API key
Enter a recognisable name such as TradingForge to identify this key among others in your account.
6
Set Spot Trading permissions
In the permissions section, find Spot Trading and enable it with both read and write (order placement) access. This allows TradingForge to fetch balances and place spot orders on your behalf.
7
Leave Asset permissions disabled
Ensure the Asset section (which includes withdrawals and transfers) remains fully disabled. TradingForge has no need for these permissions.
8
Set IP restriction (recommended)
For added security, enable IP restriction and enter your public IP address. This prevents the key from being used from any other location. Find your IP at whatismyip.com.
9
Complete verification
Bybit will ask you to complete a security verification step (email code or 2FA). Complete the verification to confirm key creation.
10
Copy the API Key and Secret Key
After creation, copy your API Key and Secret Key and store them securely. The Secret Key is only shown once — losing it means you must delete this key and generate a replacement.
11
Add credentials to TradingForge
In TradingForge, go to Settings → Exchange. Select Bybit from the exchange dropdown. Paste your API Key and Secret Key into the respective fields and click Save.
Required Permissions
Permission
Required
Notes
Read
Yes
Required for balance and position data
Spot Trading (Write)
Yes
Required to place and cancel spot orders
Derivatives / Futures
No
Not required unless using futures strategies
Asset (Withdrawals)
NEVER
Never enable — TradingForge does not require it
IP restriction is strongly recommended. Adding your home or server IP to the Bybit API allowed list means the key is useless to anyone who might obtain it from another location.
Verifying the Connection
After saving your Bybit credentials in TradingForge, check the exchange status indicator on the dashboard. A green badge confirms TradingForge is successfully connected. If the badge is red, verify that Spot Trading read and write permissions are both enabled on the Bybit API key, and that the API Key and Secret Key were copied without any errors.
