Before you start
Use your Binance account in a desktop browser. Complete identity verification, enable two-factor authentication and activate your Spot Wallet as required by Binance. Create a dedicated key named Rebalio.
Keep withdrawals disabled. Every rebalance requires your approval in Rebalio, including proposals requested by an AI agent. Exchange screens can change; screenshots illustrate where to find settings.
Exchange permissions
| Setting | Monitoring | Approved rebalancing |
|---|---|---|
| Enable Reading | On | On |
| Enable Spot & Margin Trading | Off | On — Rebalio submits spot orders only |
| Withdrawals, transfers, Futures and other trading access | Off | Off |
| Trusted IP addresses | Recommended | Required for this system-generated trading key |
1.Open API Management
Sign in, open your profile menu and select Account → API Management → Create API.

2.Choose a system-generated key
Select System generated to receive an API key and secret. Name it Rebalio and complete the security verification.

3.Set permissions and your host’s IP
Keep Enable Reading on. For approved trading, add your host’s public outbound IPv4 address under Restrict access to trusted IPs only, then enable Spot & Margin Trading. Leave withdrawals, transfers and Futures off. Save the restrictions. Keep Binance’s default security controls enabled.

4.Copy the key and secret
Copy both values privately before leaving the creation screen. Treat the secret like a password. If it is lost, create a replacement key.
5.Add the key to your private Rebalio workspace
Open Accounts in your installation and choose Connect an account. Select the exchange, give the account a name and paste both values into API key and API secret. Choose Test & connect. Once connected, check that your spot holdings appear. Your credentials are encrypted on your host; do not enter them into the public website or send them to support.
If something doesn’t connect
Trading permission is unavailable
Check that your host’s outbound IPv4 address is on the allowlist and that account verification is complete. Use the address of the host running Rebalio, which may differ from your browser’s address.
Connection fails after moving your host
Update the key’s trusted IP list when your host’s public address changes. Check that the key is active and that both copied values belong to the same key.
Keep your connection secure
Use a dedicated key for each installation. Review its expiry and IP restrictions when moving your host. Revoke a key at the exchange if it is exposed. Replacing an API key does not move your funds or erase your portfolio data.
Checked on 6 October 2026 against Binance’s API key guide. Screenshots are supplied by Binance and loaded from its website. Rebalio is independent and is not endorsed by Binance.