Definition
Read-only API key
A read-only API key is an exchange or broker credential scoped to read account data only — it cannot place orders or move funds.
On exchanges where scope is verifiable (Binance, Bybit, Deribit) Chartping rejects a trade- or withdrawal-capable key at connect; elsewhere the key is accepted but hard-flagged, and Chartping exposes no order or withdrawal path either way. Keys are stored encrypted (AES-GCM).