What works today, and what does not
Who holds what
See safety for what the enclave checks and what a breach on our side could and could not do.
What is different on demo
Binance’s demo exchange does not offer some of the safety checks that real Binance does. On demo:- No address lock. Demo API keys cannot be restricted to trusted IP addresses. On real money, a key without that lock is refused.
- Withdrawal flags are not checked. Demo does not report whether a key may withdraw or transfer. We cannot verify it. Leave those permissions off anyway.
- No options. Demo cannot trade European options, so you connect spot and futures only.
- Play money. Fills, prices and balances come from Binance’s demo exchange. They do not prove how a real account will behave.
When real-money trading starts
We switch real-money trading on ourselves. We give no date. When it starts:- Every check applies. The key must have an IP restriction on Binance. Binance enforces which addresses it allows. The key must have no withdrawal, universal transfer or internal transfer permission. The enclave refuses it otherwise.
- Options can be allowed. You can allow European options on a real-money key. The agent does not place options orders yet: no card or grant fires one.
- Your demo grants do not carry over. When real-money trading starts, the enclave refuses any grant signed before then, and the app shows that grant as invalid. Arm again by signing a new grant.
- Your lock does carry over. The markets and leverage ceiling you set on demo also apply to real money, so check them on the lock page before real-money trading starts.
- Start small. Real fills can lose real money inside your limits, as the caveats say.
In this section
Connecting
Make the key, set the lock, sign a grant.
Trading
Markets, order types, take-profit and stop-loss, balances.
Cards on Binance
A card that reads any data and trades on Binance.
Safety
What is enforced and how you take control back.
Under the hood
For readers who want the mechanism.- The enclave holds one sealed secret for Binance. It derives each Binance trading key from that secret, for your wallet, your account and a key number. No key is stored anywhere, inside or outside the enclave.
- Every request that uses your key is signed inside the enclave, and the secure connection ends inside it. Requests leave only through a fixed allow-list of Binance hosts.
- The enclave writes each decision to a log before it signs. If the log cannot be written, it signs nothing.
- The order id is derived from the grant and the run number, so a repeat is harmless.