Updated: 2026-02-14
Create a read-only API key in OKX to connect your spot, perpetual swap, futures, and options trades to Tiltless. This guide covers key creation, the OKX passphrase, permission scoping, and security best practices.
Log in to your OKX account and navigate to Account > API. Click 'Create API Key.'
OKX will ask you to complete security verification and set a passphrase. The passphrase is required alongside the key and secret for all API requests — choose something strong and store it securely.
OKX offers granular permission scopes. Select only 'Read' permissions. Do not enable any trading, withdrawal, or transfer permissions.
A read-only key can access your trade history, positions, and account data — but cannot execute trades, move funds, or change account settings. This is the only permission scope Tiltless requires.
OKX is unique among exchanges in requiring a passphrase for API authentication. The passphrase acts as a third credential alongside the API key and secret.
When you connect OKX to Tiltless, you will need to provide all three values: API key, secret, and passphrase. Tiltless encrypts all three at rest. If you forget the passphrase, you will need to create a new API key — OKX does not allow passphrase recovery.
OKX allows you to bind API keys to specific IP addresses. This is optional but recommended — the key will only work from approved addresses.
Even with a read-only key and passphrase, IP binding adds defense-in-depth. If both the credentials and passphrase are compromised, IP restriction prevents unauthorized use from unknown locations.
After creating the key, OKX shows your API key and secret key. Copy both values immediately — OKX will not show the secret again after you leave this page. You should already have your passphrase saved from the creation step.
Paste all three values — API key, secret, and passphrase — into Tiltless under your integration settings.
API keys are credentials. Treat them — and the passphrase — with the same care as a password.
If your connection fails after entering credentials, check these common issues.
Go to Account > API in your OKX account. The API management page is under account settings or security settings depending on your interface version.
Enable only 'Read' permissions. Do not enable 'Trade', 'Withdraw', or any other permission. Tiltless only needs to read your trade history.
OKX requires a passphrase when creating an API key. This passphrase is needed alongside the API key and secret to authenticate requests. Choose a strong passphrase and store it securely — Tiltless encrypts it at rest.
Yes, when scoped to read-only. A read-only key cannot execute trades, transfer funds, or modify your account. Tiltless encrypts your key, secret, and passphrase at rest.
Revoke it immediately in OKX under Account > API. Even though a read-only key cannot move funds, you should revoke and replace any compromised credential. The passphrase requirement adds an extra barrier, but do not rely on it alone.
Yes. OKX supports IP binding for API keys. Adding your IP address ensures the key only works from approved addresses — even if the key and passphrase are compromised.
Yes. A single OKX API key with 'Read' permission covers Spot, Perpetual Swaps, Expiry Futures, and Options within your account.
Go to Account > API, find the key, and delete it. The key stops working immediately. Tiltless retains imported data but stops syncing new trades.
No. One API key covers your entire account regardless of whether you use OKX's Unified Account or Classic Account mode.
Paste your read-only API key, secret, and passphrase into Tiltless and your trades sync automatically.
