API Token Guide

Understanding Deriv API Tokens

An API (Application Programming Interface) token is a secure string of characters that acts as a digital key. It allows external applications, like CopyTrades, to interact with your Deriv account without requiring your username or password. The primary advantage of API tokens is the ability to grant granular, specific permissions, ensuring the highest level of security for your funds.

Required Permissions

When generating a token for CopyTrades, you must select the correct permissions to ensure the system functions correctly while maintaining absolute security.

  • Read (Required) Allows CopyTrades to view your account balance and open positions to synchronize trades accurately.
  • Trade (Required) Allows CopyTrades to open, modify, and close trading contracts on your behalf based on the Master's signals.
  • Payments (DO NOT SELECT) Grants the ability to withdraw or transfer funds. CopyTrades strictly forbids and blocks tokens with this permission.
  • Admin (DO NOT SELECT) Grants full account control, including changing passwords. Do not select this.

Step-by-Step Creation Guide

  1. Log in to your Deriv.com account.
  2. Click on your account profile icon in the top right corner and navigate to Manage Account Settings.
  3. In the left-hand menu, scroll down to the Security & Safety section and select API Token.
  4. Under the "Select scopes" section, check the boxes for Read and Trade. Ensure all other boxes remain unchecked.
  5. In the "Token name" field, type a memorable name such as CopyTrades_Bot.
  6. Click the Create button.
  7. Your new token will appear in the list below. Click the copy icon next to the token to copy it to your clipboard.
  8. Paste this token into the connection field on your CopyTrades dashboard.

Revoking Access

If you ever wish to instantly stop all copying activity and sever the connection between CopyTrades and your Deriv account, simply return to the API Token page on Deriv and click the delete (trash can) icon next to the token you created. This instantly revokes all access.