How to Create a Bybit API Key and Set Permissions for Unified Trading

Bybit permissions are grouped by account type, so a key that “has trade permission” can still fail if the right Unified Trading boxes are not ticked. This guide creates a trade-only Bybit key, restricts it by IP, and connects it to Ninja Terminal. See also Bybit on Ninja Terminal.

What should you know first?

• Use the Bybit website. Ninja Terminal’s setup guide notes that API key creation is not available in the app.
• Ninja Terminal’s setup guide notes that new Bybit accounts can have a 48-hour waiting period.
• Bybit offers two key types. System-generated keys are an API key and a secret that Bybit creates. Self-generated keys use an RSA pair you create yourself. Ninja Terminal asks for the API key and secret, so choose system-generated.

How do you create the key?

1. Log in to Bybit on the website and open API Management.
2. Select Create New Key.
3. Choose System-generated API Keys.
4. Select API Transaction (not a third-party connection option).
5. Name the key, for example “Ninja Terminal”. Keep this window open.

How do you restrict the key to trusted IPs?

6. In Ninja Terminal, choose Bybit in the Add Account dialog. The setup shows an IP list with a copy button.
7. In Bybit, select the option that limits the key to approved addresses: Only IPs with permissions granted.
8. Paste every address. Ninja Terminal copies the list comma-separated.

The setup generates the list for the account you are adding. Copy it from that screen for each Bybit key.

Which permissions should you enable?

9. Select Read-Write. Trading needs write access.
10. Under Unified Trading, enable Orders, Positions, and Trade.
11. Leave every withdrawal permission off.
12. Submit, complete verification, and save the API key and secret.

Setting	Value	Why
Key type	System-generated	Gives an API key and secret
Purpose	API Transaction	Order placement
Access	Read-Write	Needed to place orders
Unified Trading	Orders, Positions, Trade	Order, position, and trade access
Withdrawal	Off	Not needed to trade

Bybit may label permission groups differently over time. If your screen differs, enable the equivalent order, position, and trade options for the account type you use, and nothing for withdrawal. For how Bybit’s unified account reports balances, see the Unified Trading Account entry.

Is Asset Transfer needed?

No. Ninja Terminal shows a note that the Funding balance requires the “Asset Transfer” API permission. That permission is optional. Skip it if you want the smallest permission set.

How do you connect the key to Ninja Terminal?

13. In Add Account, choose Bybit.
14. Paste the API key and secret. Add an optional nickname.
15. Select Test, then Connect.

Ninja Terminal encrypts the key with AES-256-GCM and stores it on your device. Orders execute on your own Bybit account. Read the API key security checklist for the full practice.

What if the connection fails?

• IP refusal: an address is missing from the key’s list. Add all listed addresses.
• Permission error on orders: re-open the key and check that Orders, Positions, and Trade are on under Unified Trading.
• Credential rejected: paste the key and secret again. Hidden characters from copy-paste can break them.