Bybit trading bot and API key setup: connect Bybit safely
Run a Bybit trading bot on spot with a trade-only API key: what agents can automate, key setup, a security checklist, fees and troubleshooting.
Short answer
You can connect Bybit to TradeCorgi with a trade-only API key, so an agent can place spot orders on your own account but never withdraw. TradeCorgi rejects any key with withdrawal permission, asks you to limit the key to its server addresses, and checks your limits before every order.
What you can automate on Bybit
Describe a rule in plain words and an agent runs it on your Bybit spot account, checking the market at most once a minute.
Dip buys
Buy a set amount when a coin falls a set percentage within a window, such as 5% in 24 hours.
Recurring buys
Buy a fixed amount on a schedule, with a rule that pauses buying after a deep fall.
Take-profit and stop-loss
Sell at a set gain or a set loss from your buy price, on every position the agent opens.
Indicator rules
Act on indicator levels such as RSI, alone or combined with price moves and schedules.
On Copilot you get an alert with a link to Bybit instead, and you place the order yourself.
Create a trade-only Bybit API key
- Log in to Bybit on the website, since API keys cannot be created in the app, and open API Management from your account menu.
- Choose Create New Key, then System-generated API Keys, and name it something you will recognise, such as TradeCorgi.
- Choose read-write, then allow spot trading only. Leave withdrawals, transfers and derivatives off.
- Restrict the key to TradeCorgi's server IP addresses, shown in the app when you connect.
- Confirm with your Google Authenticator code, then copy the key and secret into TradeCorgi. We check the permissions before saving it.
What TradeCorgi checks when you connect Bybit
- The key can trade but cannot withdraw. A key with withdrawal permission is rejected.
- The key is limited to TradeCorgi’s server addresses, where Bybit supports it.
- The key works and can read your balances, so the agent knows what it may spend.
- The same checks run again every day. If one fails, your Bybit agents pause and you are told why.
Keys are encrypted with a key unique to you, and are decrypted only inside the service that places orders.
Security checklist for your Bybit key
- Create a separate key just for TradeCorgi, so you can delete it without affecting anything else.
- Allow spot trading only. Leave withdrawals and transfers off.
- Turn on IP whitelisting with the addresses shown in the app.
- Keep two-factor authentication on for your Bybit login.
- Never paste your key or secret into a chat, email or support form.
- Start with a small live budget; in its first week a live agent uses at most 20% of the amount you plan.
- Delete the key on Bybit if you stop using TradeCorgi.
Bybit fees
Every backtest and paper trade uses Bybit’s fee for your account tier and its minimum order size, so a rule that only works before fees never looks good. Your agent pays the same trading fees you would pay placing the orders by hand.
Fees checked on October 27, 2026. Bybit fee schedule
Why traders run agents on Bybit
Bybit is popular with bot traders and with traders who use derivatives. It is available in most countries outside the United States, including India.
Many Bybit users already know automation from the exchange's own grid and recurring-buy bots. TradeCorgi is the next step, for when you want an agent you can trust with more money: one that follows a rule you described in plain words, cannot lose more than your daily limit, and writes down why it traded.
Spot now, derivatives later
At launch TradeCorgi agents trade Bybit spot only. There is no leverage on any exchange, and an agent cannot average down beyond 2 entries. Bybit derivatives are planned for a later phase. Until then, create your key with spot trading only and leave derivatives permissions off; a key that can withdraw is rejected either way.
This matters because leverage changes what a stop-loss can protect. A spot agent that hits its stop-loss loses a set share of a set budget. A leveraged position can lose more than you planned before any rule gets a chance to act.
From settings-based bots to described rules
If you run a grid or recurring-buy bot on Bybit today, here is what changes on TradeCorgi:
- You describe the rule instead of filling in a form. Your Corgi asks only for what is missing, such as a stop rule.
- You see the backtest with Bybit's fees before anything runs, next to simply holding the coin, with the worst drop shown as large as the result.
- Limits are mandatory. No agent runs without a budget, a stop-loss, a daily loss limit and a maximum number of open positions.
- Every trade has a reason. The decision log names the rule behind each order and the price Bybit filled it at, and records the times the agent stayed out.
A worked example on Bybit
Say you want to buy ETH on weakness: "Buy $40 of ETH when it falls 6% in a day, at most 2 buys open, sell 5% above the buy, stop at 8% below, and stop for the day after $20 of losses." Your Corgi turns that into a strategy card, you confirm it, and the backtest runs on Bybit's ETH/USDT history with Bybit's fee for your tier and its minimum order size.
On paper, the agent uses live Bybit prices with virtual money. When you go live, it places spot orders on your Bybit account, and the $20 daily limit is checked before every order. This is an illustrative example, not a real result.
Who Bybit suits on TradeCorgi
- Traders outside the United States who already use Bybit and want limits and explanations on top of automation.
- Traders in India who want a second global exchange alongside Binance.
- Anyone moving from settings-based bots who wants to test a rule honestly before it trades.
Before you connect
Run your strategy on paper first. When you go live, the agent trades on your own Bybit account with the amount you allow, and in its first week it uses at most 20% of that amount. One tap pauses the agent; "Pause and close" also sells its open positions at market price on Bybit.
How a live agent behaves on Bybit
Paper first
Every strategy runs on paper with Bybit’s live prices before it can trade real money.
Limits before every order
Budget, stop-loss, daily loss limit and open positions are checked before each order reaches Bybit.
A reason for every trade
The decision log records the rule behind each order and the price Bybit actually filled it at.
One tap to stop
Pause an agent, or pause it and sell its open positions at market price on Bybit.
Troubleshooting
- The key was rejected when I connected it
- The key most likely has withdrawal permission, or no trading permission. Create a new key with spot trading only and try again.
- The connection fails after I added IP whitelisting
- Check that every address shown in the app is on the key exactly, with nothing else. A missing address blocks some requests.
- My agent paused and says the key failed
- The key was deleted, expired or changed on Bybit. Your funds and positions stay on Bybit. Connect a new key to resume.
- My agent paused during maintenance
- Agents pause when Bybit is under maintenance or prices are more than 2 minutes old, and tell you why. Check Bybit’s status page, then resume.
- My agent paused with a position mismatch
- The agent’s record no longer matches your Bybit account, for example after a trade placed by hand on the same coin. Review the positions, then resume.
- An order was skipped as too small
- Bybit sets a minimum order size for each market. Raise the amount per order in your strategy card.
Bybit questions
Can TradeCorgi withdraw from my Bybit account?
No. A key with withdrawal permission is rejected when you connect it and on every daily check. Your funds stay on your Bybit account.
Can agents trade Bybit derivatives?
Not at launch. Agents trade Bybit spot only, with no leverage. Derivatives on Bybit are planned for a later phase.
What happens if I delete the key on Bybit?
Your agents on Bybit pause and tell you the key failed. Your funds and open positions stay on your Bybit account.
Can I use Bybit from India with TradeCorgi?
Yes. Bybit is available to users in India, and TradeCorgi agents trade Bybit spot.
Is Bybit available in the United States?
No. Bybit does not serve US users, so TradeCorgi does not show it there. US users can connect Coinbase or Kraken.
I already use Bybit's built-in bots. Why switch?
Built-in bots are configured with settings. TradeCorgi lets you describe the rule in plain words, tests it with fees, enforces a daily loss limit before every order, and explains each trade.
Does TradeCorgi earn anything from Bybit?
Bybit may pay TradeCorgi a share of trading fees when you open an account through our links. It never changes your fees and never changes how your agents trade.