Varna povezava

Kako povezati borzo z BackFuture AI: API ključi, varnost in preverjanje povezave

BackFuture AI works through an borza povezava via API. This means that the uporabnik’s sredstva remain on the borza account, while sistem receives only the permissions that the uporabnik explicitly grants in the API ključ.

Main varnost rule: an API ključ for a trgovanje bot must not have dovoljenje za dvig. Only the permissions that are really needed for trgovanje and status reading should be enabled.

Supported borze

At the current stage, the platforma is focused on working with MEXC and KuCoin. In the future, the list of povezave can be expanded: Binance, OKX, Bitget, Gate.io, HTX, BingX, Coinbase, Bybit and other borze.

General povezava process

The uporabnik logs into their borza account.
Creates a new API ključ.
Disables dovoljenje za dvig.
Enables only the required permissions: balance reading, order reading and trgovanje.
Sets an IP restriction if the borza supports it.
Copies the API Key and Secret Key.
Adds the povezava in the BackFuture AI dashboard.
Runs a povezava test.
After a successful check, enables the required strategija or bot.

Required API permissions

Permission	Needed?	Zakaj
Read	✅ Yes	So sistem can see balances, orders, positions and status.
Trade	✅ Yes	So the bot can open, add to and close trgovanja.
Withdraw	❌ No	This permission must not be given to a trgovanje bot.
Futures	◐ If needed	Only for strategije that work with futures.
IP whitelist	✅ Recommended	Restricts key usage to approved server IP addresses.

Kako to name a povezava correctly

In the dashboard, it is better to use clear povezava names. This is especially pomembno if the uporabnik has several borze, sub-accounts or strategije.

MEXC Spot Main — main spot account on MEXC.
KuCoin Futures Conservative — futures account for a conservative strategija.
Recovery PRO Connection — separate povezava for Recovery/PRO logic.
BTC ETH New Groups — separate povezava for new BTC/ETH skupine.

Step-by-step primer

Step 1. Create an API ključ on the borza

In the borza account, open API Management or API Keys. Usually the borza asks for a key name and confirms the action through email, phone or 2FA.

Step 2. Set permissions

For a trgovanje povezava, read and trgovanje permissions are usually needed. Withdrawal must be disabled. If the borza offers separate permissions for spot and futures, enable only the trg you really plan to use.

Step 3. Add the key to BackFuture AI

In the dashboard, the uporabnik selects an borza, enters API Key and Secret Key, sets a povezava name and saves it. Secrets should not be displayed in full after saving.

Step 4. Test the povezava

Sistem checks the key, permissions, balance access and the ability to receive status. If everything is correct, the povezava receives an “Online” or “Connected” status.

Step 5. Enable a strategija

After the test, the uporabnik can select pairs, tveganje level, marža limit, dokup behavior, Recovery Mode and other nastavitve.

Typical povezava errors

Error	Cause	Kaj to do
Invalid key	API ključ or secret was copied incorrectly.	Create a new key or copy the values again.
No trgovanje permission	Trade permission is disabled.	Enable trgovanje permission, but keep withdrawal disabled.
IP not allowed	IP restriction does not include the server IP.	Add the correct server IP to the borza whitelist.
Exchange unavailable	The borza API is temporarily unavailable.	Wait and run the test again.

Security principles

Never enable dovoljenje za dvig for bot API ključi.
Use separate API ključi for different strategije.
Use IP restrictions kdaj possible.
Do not show API secrets in full after saving.
Delete old keys if they are no longer used.
Use 2FA on the borza account.

Zaključek

The safest model is kdaj sredstva remain on the uporabnik’s borza, and BackFuture AI works only through limited API permissions. This allows the platforma to automate trgovanje logic without direct access to withdrawals.