Binance API setup for Firefly: a trading-only key in 10 minutes.
Meta trades on Binance through a Spot API key with withdrawals switched off and access restricted to Firefly's IP. Crypto is unregulated in India; read the Meta page's risk notes before you create the key.
Screens change. This guide was checked in September 2026; the broker's own docs are linked below. Never share a key by chat or email — use the onboarding form.
- A verified Binance account (KYC complete) — for Indian residents, on the FIU-registered Binance entity
- Two-factor authentication enabled (authenticator app and/or passkey)
- The static IP address we give you on the onboarding call
Profile › API Management (or Account › API Management). Click Create API and choose System generated. Label it Firefly and complete the 2FA verification.
The API key and Secret key are shown once. Copy the secret now; if you lose it you delete the key and create a new one.
Edit restrictions. Under IP access restriction choose Restrict access to trusted IPs only and add the IP we gave you. Unrestricted keys expire on Binance and cannot be given trading rights beyond a short period.
Tick Enable Reading (on by default) and Enable Spot & Margin Trading. Leave Enable Withdrawals, Enable Futures and Enable Margin loans unticked. Save and confirm with 2FA. Check the key page once more: Withdrawals must show as disabled.
Permissions: what the key may and may not do
Grant
- Enable Reading
- Enable Spot & Margin Trading (spot orders only are used)
Never grant
- Enable Withdrawals — never
- Enable Futures
- Enable Margin loan, borrow and repay
- Universal transfer
Share securely
Paste the credentials into the onboarding form we send after the call (encrypted at rest, visible only to the onboarding engineer). We confirm connectivity on the call and you watch the first read-only calls succeed before any order is placed. Rotate the key at the broker at any time — Firefly stops the moment it is revoked.
Troubleshooting
Invalid API-key, IP, or permissions for action (-2015)
Almost always the IP restriction: the key is locked to an address other than Firefly's server. Edit restrictions and check the IP list.
Key stopped working after 90 days
Unrestricted keys are expired by Binance. Create a new key with IP restriction on, or add the IP to the existing one.
Timestamp for this request is outside the recvWindow
Server clock drift on our side, not yours — tell us and we re-sync.
Key created? Book the onboarding call.
Thirty minutes: we connect, set capital and risk limits, and you watch the first read-only calls succeed.