Connect an Exchange
Published Jun 22, 2026 · Updated Jul 26, 2026
Alphafox is non-custodial: you connect exchange API keys with read + trade permission only (never withdrawal), and funds stay on your exchange—Alphafox only trades through the API keys you authorize. Strategies need a trading connection; the entry is Live Management → Trading accounts in the sidebar.
Three kinds, pick by need
| You want | Use | Requires |
|---|---|---|
| Risk-free practice | Paper Trading | just an initial balance |
| Binance testnet practice | Binance Demo | a Binance Demo API key |
| Real trading | Exchange API | an API key from OKX / Binance / Hyperliquid / Aster / Bitget / Bybit / Gate |
Add the paper exchange (recommended first)
Add
Click Add exchange, pick Paper Trading.
Name and balance
Something like practice and 1000.
Test and save
Test connection, then Save connection. Done.
Add a real exchange
Create the API key on the exchange
Follow the tutorial link next to each exchange. While creating:
- Tick read and trade only;
- If the exchange wants an IP whitelist, copy the whitelist IP from the dialog (copy button provided).
Enter the credentials in Alphafox
Pick the exchange, paste Key and Secret (OKX and Bitget also need the Passphrase). Everything is stored encrypted.
Test the connection
Permissions are checked and the balance is read. Only a passing test can be saved.
Save
The connection appears in the list, ready for strategies.
Never grant withdrawal permission. If the key leaks, withdrawal permission means assets can be moved. Alphafox shows a red warning when it detects one.
Hyperliquid is different
No API key—wallet signatures instead:
- Make sure your main wallet has deposited on Hyperliquid (holds USDC);
- Click Connect wallet and authorize with MetaMask / Rabby;
- Confirm both signatures (Agent + Builder Fee).
Your private key never leaves the wallet.
Manage existing connections
The list shows status, balance, and the bound strategy per connection:
- On sync errors, open the health panel for the reason and hit Retry sync;
- One connection binds one strategy; occupied ones must be freed before deletion.
Problems?
Failing tests: check key completeness, permissions, whitelist IP, passphrase. More in Exchange Connection Failed.