Exchange Setup
Connect your exchange accounts to Capandex for live and paper trading. This guide covers supported exchanges, API key creation, security, and testnet support.
Supported Exchanges
Creating API Keys
Each exchange requires API credentials to allow Capandex to read market data and execute trades on your behalf. Follow the exchange-specific instructions below.
Binance
Testnet available- Log in to your Binance account and navigate to API Management.
- Click "Create API" and choose "System generated".
- Label the key (e.g., "Capandex") and complete 2FA verification.
- Enable "Enable Spot & Margin Trading" permission. Do NOT enable withdrawals.
- Restrict the API key to your IP address for maximum security.
- Copy the API Key and Secret Key. The secret is only shown once.
OKX
Testnet available- Log in to OKX and go to Settings > API.
- Click "Create V5 API key" and enter a name and passphrase.
- Set permissions to Trade only. Do not enable withdrawal.
- Optionally bind to your IP address.
- Copy the API Key, Secret Key, and Passphrase (you will need all three).
Bybit
Testnet available- Log in to Bybit and navigate to API Management under your profile.
- Click "Create New Key" and select "System-generated API Keys".
- Set permissions: enable Read and Trade, disable Withdraw.
- Optionally add IP restriction for security.
- Copy the API Key and Secret.
MEXC
- Log in to MEXC and go to API Management in your account settings.
- Click "Create API" and enter a label.
- Complete the security verification (email/2FA).
- Enable Spot Trading permission only.
- Copy the Access Key and Secret Key.
Coinbase
- Log in to Coinbase Advanced and navigate to Settings > API.
- Click "New API Key".
- Select the portfolio and set Trade permission.
- Copy the API Key and API Secret.
Kraken
- Log in to Kraken and go to Settings > API.
- Click "Create API Key".
- Give the key a descriptive name.
- Under Permissions, check "Create & Modify Orders" and "Query Open Orders & Trades".
- Do NOT enable withdrawal permissions.
- Copy the API Key and Private Key.
KuCoin
Testnet available- Log in to KuCoin and go to Account > API Management.
- Click "Create API" and enter a name and passphrase.
- Enable General (read) and Trade permissions. Do NOT enable withdrawal.
- Optionally restrict to specific IP addresses.
- Copy the API Key, Secret Key, and Passphrase (you will need all three).
Bitget
Testnet available- Log in to Bitget and go to Account > API Management.
- Click "Create API Key" and set a label and passphrase.
- Enable Read and Trade permissions. Do NOT enable withdrawal.
- Optionally bind to specific IP addresses.
- Copy the API Key, Secret Key, and Passphrase (you will need all three).
Bitfinex
- Log in to Bitfinex and go to API Keys settings.
- Click "Create New Key" and enter a label.
- Enable Account Info: Read and Orders: Read/Write permissions.
- Do NOT enable withdrawal permissions.
- Copy the API Key and API Key Secret.
HTX (Huobi)
- Log in to HTX and go to API Management.
- Click "Create API Key" and enter a note.
- Complete 2FA verification.
- Enable Read and Trade permissions. Do NOT enable withdrawal.
- Copy the Access Key and Secret Key.
Bithumb
- Log in to Bithumb and go to My Page > API Management.
- Click "Create API Key".
- Complete identity verification.
- Enable Account inquiry and Trade permissions. Do NOT enable withdrawal.
- Copy the Connect Key (API Key) and Secret Key.
Bitstamp
- Log in to Bitstamp and go to Settings > API Access.
- Click "New API Key" and configure permissions.
- Enable Account balance, Open orders, and Buy/Sell. Do NOT enable withdrawal.
- Complete 2FA verification and activate the key via confirmation email.
- Copy the API Key and Secret.
Gemini
Testnet available- Log in to Gemini and go to Account > Settings > API.
- Click "Create a New API Key" and select Primary scope.
- Enable Fund Management: Auditor and Trading permissions.
- Do NOT enable Master-level or Withdrawal permissions.
- Copy the API Key and API Secret (shown only once).
Gate.io
Testnet available- Log in to Gate.io and go to API Management.
- Click "Create API Key" and enter a label.
- Complete 2FA verification.
- Enable Spot Trade permission. Do NOT enable withdrawal.
- Optionally restrict to specific IP addresses.
- Copy the API Key and Secret Key.
CEX.IO
- Log in to CEX.IO and go to Profile > API Access.
- Click "Generate API Key".
- Enable Account Balance and Place Order permissions. Do NOT enable withdrawal.
- Complete identity verification.
- Copy the User ID, API Key, and API Secret.
BitMart
- Log in to BitMart and go to Account > API Management.
- Click "Create API Key" and enter a label.
- Complete 2FA verification.
- Enable Read and Trade permissions. Do NOT enable withdrawal.
- Copy the API Key, Secret Key, and Memo (if provided).
CoinEx
- Log in to CoinEx and go to Account > API Management.
- Click "Create API Key" and enter a remark.
- Complete 2FA verification.
- Enable Trade permission. Do NOT enable withdrawal.
- Copy the Access ID (API Key) and Secret Key.
WOO X
- Log in to WOO X and go to Account > API Management.
- Click "Create API Key" and enter a label.
- Complete verification.
- Enable Read and Trade permissions. Do NOT enable withdrawal.
- Copy the API Key and API Secret.
Adding Keys to Capandex
- Navigate to Settings > Exchanges in the Capandex dashboard.
- Click Add Exchange and select your exchange from the dropdown.
- Paste your API Key and Secret (and Passphrase for OKX, KuCoin, or Bitget).
- Click Validate to verify the credentials work correctly.
- Click Save to store the encrypted credentials.
Security
Your API keys are treated with the highest security standards:
- AES-256-GCM Encryption - All API keys and secrets are encrypted at rest using AES-256-GCM with a unique initialization vector per credential.
- Server-side only - Keys are never exposed to the browser. Decryption only happens on the server when executing trades.
- No withdrawal permissions - We strongly recommend only enabling trade permissions and never enabling withdrawal access on your API keys.
- IP whitelisting - Where supported, restrict your API key to specific IP addresses for an additional layer of protection.
Paper Trading Mode
Paper trading mode allows you to test strategies without connecting real API keys. When you create a flow and set the exchange mode to Paper, Capandex will:
- Use real-time market prices from the selected exchange
- Simulate order fills with configurable slippage (default 0.1%)
- Apply simulated trading fees (default 0.1%)
- Start with a default balance of $10,000
- Track all positions and PnL as if trading live
No API keys are required for paper trading. See the Paper Trading & Backtesting guide for full details.
Testnet Support
Some exchanges offer testnet (sandbox) environments with fake funds for testing. Capandex supports testnet connections for:
- Binance Testnet - Full spot and futures testnet with free test funds
- OKX Demo Trading - Demo environment with simulated balances
- Bybit Testnet - Complete testnet for spot and derivatives
- KuCoin Sandbox - Sandbox environment with virtual funds
- Bitget Demo - Demo trading environment for testing
- Gemini Sandbox - Sandbox environment with virtual funds
- Gate.io Testnet - Testnet API endpoints for testing
To use testnet, select the testnet variant when adding an exchange in Settings. You will need separate API keys from the testnet environment.