rebalioBefore you start
Use Kraken Pro in your browser and create a dedicated Spot API key. Rebalio connects to spot accounts, so choose the Spot API rather than the Derivatives API.
Keep withdrawals disabled. Every rebalance requires your approval in Rebalio, including proposals requested by an AI agent. Exchange screens can change; screenshots illustrate where to find settings.
Exchange permissions
| Setting | Monitoring | Approved rebalancing |
|---|---|---|
| Funds → Query (Query Funds) | On | On |
| Query open orders & trades; Query closed orders & trades | On | On |
| Create & modify orders; Cancel & close orders | Off | On |
| Deposit, Withdraw, Earn and Export data | Off | Off |
1.Open the API settings
In Kraken Pro, open your profile menu → Settings → API. Select Create API key and name it Rebalio.
2.Choose your permissions
Enable Funds → Query and queries for open and closed orders. Trading also needs Create & modify orders and Cancel & close orders. Keep Withdraw off. Use the table above; the example screenshot also selects Query ledger entries, which Rebalio does not require.
3.Set restrictions and generate the key
If you enable IP address restrictions, allow your Rebalio host’s outbound public IP. Choose Generate key. Copy the public API key and private key; paste the private key into Rebalio’s API secret field. Keep both values private.
4.Add the key to your private Rebalio workspace
Open Accounts in your installation and choose Connect an account. Select the exchange, give the account a name and paste both values into API key and API secret. Choose Test & connect. Once connected, check that your spot holdings appear. Your credentials are encrypted on your host; do not enter them into the public website or send them to support.
If something doesn’t connect
Permission denied
For balances, check Funds → Query. For order tracking, check queries for both open and closed orders. For approved execution, check create/modify and cancel/close permissions.
Invalid nonce
Use a dedicated key for this Rebalio installation rather than sharing it with another application. Another application’s requests can conflict with the sequence Kraken expects.
Invalid key or signature
Confirm this is a Spot API key, check IP restrictions and recopy the matching public and private keys in full.
Keep your connection secure
Use a dedicated key for each installation. Review its expiry and IP restrictions when moving your host. Revoke a key at the exchange if it is exposed. Replacing an API key does not move your funds or erase your portfolio data.
Checked on 6 October 2026 against Kraken’s API key guide. Screenshots are supplied by Kraken and loaded from its website. Rebalio is independent and is not endorsed by Kraken.