rebalioBefore you start
Use the Bybit website and enable two-factor authentication. New accounts may need to wait 48 hours before creating a key. Rebalio reads spot holdings in a Unified Trading Account; Funding, Earn and derivatives are excluded.
Keep withdrawals disabled. Every rebalance requires your approval in Rebalio, including proposals requested by an AI agent. Exchange screens can change; screenshots illustrate where to find settings.
Exchange permissions
| Setting | Monitoring | Approved rebalancing |
|---|---|---|
| API key type / usage | System-generated / API Transaction | System-generated / API Transaction |
| API Key Permissions | Read-Only | Read-Write |
| Unified Trading → Spot → Trade | Read access | Read and trading access |
| Withdrawals, transfers and derivatives trading | Off | Off |
1.Open API Management
Sign in to Bybit. Open your profile menu → API, then select Create New Key on the API Management page.
2.Create a key for your own installation
Choose System-generated API Keys and API Transaction, then name the key Rebalio. Use the personal API connection for your self-hosted installation rather than a key bound to another third-party application.
3.Select spot permissions
For monitoring, choose Read-Only and spot query access. For approved trading, choose Read-Write and enable Unified Trading → Spot → Trade. Keep withdrawals, transfers and derivatives trading disabled. If you restrict access by IP, enter your host’s outbound public IP address.
4.Confirm and copy your credentials
Submit the settings and complete two-factor verification. Copy the API key and secret immediately; store them privately. If the secret is no longer available, create a replacement key.
5.Add the key to your private Rebalio workspace
Open Accounts in your installation and choose Connect an account. Select the exchange, give the account a name and paste both values into API key and API secret. Choose Test & connect. Once connected, check that your spot holdings appear. Your credentials are encrypted on your host; do not enter them into the public website or send them to support.
If something doesn’t connect
Holdings are missing
Check that your holdings are in the Unified Trading Account. Rebalio does not include Funding, Earn or derivatives balances.
Key creation is unavailable
Check two-factor authentication and account eligibility. Bybit may restrict API key creation during the first 48 hours after registration.
Connection or trading fails
Check expiry, host IP restrictions and spot permissions. Orders require your approval in Rebalio.
Keep your connection secure
Use a dedicated key for each installation. Review its expiry and IP restrictions when moving your host. Revoke a key at the exchange if it is exposed. Replacing an API key does not move your funds or erase your portfolio data.
Checked on 6 October 2026 against Bybit’s API key guide. Screenshots are supplied by Bybit and loaded from its website. Rebalio is independent and is not endorsed by Bybit.