Updated: 2026-02-14
How to Create a Kraken API Key
Create a query-only API key in Kraken to connect your spot, margin, and futures trades to Tiltless. This guide covers key creation, permission scoping, and security best practices.
Create Your API Key
Log in to your Kraken account and navigate to Settings > API. Click 'Add Key' or 'Generate New Key.'
Kraken will show a permissions selection screen. Label the key descriptively (e.g., 'Tiltless Read-Only') before configuring permissions.
- •Open Settings > API in your Kraken account
- •Click 'Add Key' or 'Generate New Key'
- •Label the key (e.g., 'Tiltless Read-Only')
- •Configure permissions on the next screen (see below)
Set Query-Only Permissions
Kraken uses granular permission scopes. For Tiltless, enable only the query permissions needed to read your trade history.
Do not enable any permissions related to trading, withdrawals, funding, or account management. Query permissions can read data but cannot modify your account or execute trades.
- •Enable: 'Query Funds' — read account balances
- •Enable: 'Query Open Orders & Trades' — read active positions
- •Enable: 'Query Closed Orders & Trades' — read trade history
- •Disable: All trading, withdrawal, funding, and staking permissions
Copy and Store Your Credentials
After creating the key, Kraken shows your API key and private key. Copy both values immediately — Kraken will not show the private key again.
Paste the API key and private key into Tiltless under your integration settings. Tiltless encrypts both values at rest.
- •Copy the API key (public identifier)
- •Copy the Private key (shown only once — save it now)
- •Paste both into Tiltless to complete the connection
Security Best Practices
API keys are credentials. Treat them with the same care as a password.
- •Never share your private key outside of trusted integrations
- •Use query-only permissions — a journal should never have trade execution access
- •Revoke and replace any key you suspect has been compromised
- •Rotate keys periodically — delete the old key and create a fresh one
- •Do not store private keys in plain text, screenshots, or shared documents
- •Review your active API keys periodically under Settings > API
Connect to Tiltless
Once you have your query-only API key and private key, paste them into Tiltless. Your trades will begin syncing automatically — typically within a few minutes.
Tiltless pulls fills, fees, and order types from Kraken. You can disconnect at any time by revoking the key in Kraken.
Troubleshooting
If your connection fails after entering credentials, check these common issues.
- •Verify the private key was copied completely — it is long and easy to truncate
- •Confirm query permissions are enabled in Settings > API
- •Check for nonce errors — try increasing the nonce window in Kraken's API settings
- •Ensure the key has not been revoked
- •Try creating a new key if the existing one continues to fail
Related Resources
FAQ
?Where do I find API settings in Kraken?
Go to Settings > API in your Kraken account. You can also navigate via Security > API from the account menu.
?What permissions should I enable?
Enable only 'Query Funds', 'Query Open Orders & Trades', and 'Query Closed Orders & Trades.' Do not enable trading, withdrawal, or any other permissions.
?What is the nonce window setting?
Kraken uses a nonce (incrementing number) to prevent replay attacks on API requests. The default nonce window works for most integrations. If you see nonce-related errors, try increasing the nonce window in Kraken's API settings.
?Is it safe to share my Kraken API key with Tiltless?
Yes, when scoped to query-only permissions. A query-only key cannot execute trades, transfer funds, or modify your account. Tiltless encrypts your credentials at rest.
?What if my API key is leaked?
Revoke it immediately in Kraken under Settings > API. A query-only key cannot move funds, but you should still revoke and replace any compromised credential. Create a new key and update it in Tiltless.
?Does one API key cover spot, margin, and futures?
The query permissions cover spot and margin data. Kraken Futures may use a separate API depending on your account setup. Check Kraken's documentation for your specific account structure.
?How do I revoke a Kraken API key?
Go to Settings > API, find the key, and delete it. The key stops working immediately. Tiltless retains imported data but stops syncing new trades.
?Can I set an expiration on the API key?
Kraken API keys do not have a built-in expiration. They remain active until you manually delete them. Rotate keys periodically as a security practice.
Connect Kraken and start reviewing trades
Paste your query-only API key into Tiltless and your trades sync automatically. Under two minutes to set up.