Crypto API Keys in India: Which Exchanges Offer API Trading
CoinDCX, Delta Exchange India, Pi42, CoinSwitch, ZebPay, WazirX and Mudrex all offer API keys. Compare permissions, IP rules and ccxt support.
Most large Indian crypto exchanges registered with FIU-IND now offer API keys for automated trading: CoinDCX, Delta Exchange India, Pi42, CoinSwitch PRO, ZebPay, WazirX and Giottus have documented trading APIs, Mudrex has a futures-only API and Unocoin offers a simpler API token. You create the key in your account settings, give it trading permission only, bind it to a fixed IP address and store the secret like a password.
Key takeaways
- CoinDCX (spot and futures), Delta Exchange India (futures and options), Pi42 (futures), CoinSwitch PRO (spot and futures), ZebPay (spot and futures), WazirX (spot and futures), Giottus (spot) and Mudrex (futures) all publish API documentation.
- A key has two or three parts: the public API key, a secret that most exchanges show only once, and on some platforms, such as KuCoin, a passphrase you choose.
- Give a bot key trading permission only. Never enable withdrawals, and bind the key to fixed IP addresses. Delta Exchange India makes IP whitelisting mandatory for trading keys.
- The ccxt coding library supports only a few Indian exchanges (Mudrex, ZebPay, Bitbns, and Delta with extra setup). CoinDCX, CoinSwitch, Pi42, WazirX and Giottus need code written from their own docs.
- Every spot sell a bot makes on an INR pair has 1% TDS deducted, and 18% GST is added to trading fees.
What is a crypto exchange API key?
An API (application programming interface) key lets a program, such as a trading bot or portfolio tracker, use your exchange account without you logging in. The key is tied to your KYC-verified account, so everything the program does counts as you doing it.
| Part | What it is | Who should see it |
|---|---|---|
| API key | A public identifier sent with every request, often in a header such as X-AUTH-APIKEY | Only your own bot or tool |
| Secret key | Used to sign each request so the exchange knows it really came from you. CoinDCX, Delta, Pi42, Binance, Bybit and others show it only once | Nobody. Store it like a password |
| Passphrase | An extra password you set when creating the key. KuCoin requires one with every request | Nobody |
| IP whitelist | The list of IP addresses allowed to use the key | You set it when creating the key |
With most exchanges the secret never travels over the internet. Your program uses it to compute a signature (usually HMAC-SHA256) of the request, and the exchange recomputes that signature to check it. If the secret is lost, the exchanges covered here cannot show it again; you delete the key and create a new one.
Read, trade and withdraw: the permission levels
Exchanges that offer permission choices let you decide what a key can do. The safest bot key is one that can trade but can never move money out.
| Permission | What it allows | Does a bot need it? |
|---|---|---|
| Read | View balances, open orders and trade history | Yes. It is enough on its own for trackers and tax tools |
| Spot trade | Place and cancel spot orders | Only for a spot bot |
| Futures trade | Open and close leveraged positions, change leverage and margin | Only for a futures bot. WazirX, for example, keeps its futures permission off by default |
| Transfer | Move funds between your own wallets or sub-accounts | Rarely |
| Withdraw | Send crypto out of the exchange | Never |
Not every exchange offers this menu. Delta Exchange India has just two permissions, "Read Data" and "Trading", with no withdrawal option at all. CoinDCX's official API docs say it has no read-only keys and that all API users get the same permissions, so check whether your key screen offers any choice before you rely on one.
Which Indian exchanges offer API keys?
This is what each platform offered through its API when we checked on 1 October 2026. "Not documented" means the exchange's public docs do not say, so check the key screen in your account.
| Exchange | API products | IP whitelist | Withdrawal via API | ccxt support |
|---|---|---|---|---|
| CoinDCX | Spot; futures (USDT and INR margined) | Optional | No withdrawal endpoint in the docs | No |
| Delta Exchange India | Futures and options, INR settled | Mandatory for trading keys | Not offered | Listed, but set up for Delta Global by default |
| Pi42 | Futures (USDT and INR perpetuals) | Supported | None found in the docs | No |
| CoinSwitch PRO | Spot (INR and USDT); USDT futures; options in private beta | Not documented | Not documented | No |
| ZebPay | Spot and futures | Optional | Not documented | Yes |
| WazirX | Spot and futures | Recommended | Docs include a withdrawal endpoint | No (removed in February 2025) |
| Giottus | Spot | Supported | Withdrawal history only | No |
| Mudrex | Futures only (USDT or INR margin) | Not documented | Not part of the futures API | Yes |
| Unocoin | Place and cancel orders with an API token | Not documented | Not documented | No |
| Bitbns | Spot, but the official docs are no longer maintained | Not documented | Not documented | Yes |
A few points stand out. WazirX resumed trading in October 2025 after its 2024 hack and restructuring, and launched futures on 13 May 2026; its keys are read-only by default, and you switch on "SPOT Trade" or the separate "Futures Trade" permission yourself. CoinSwitch allows only one key pair at a time, so generating a new pair cancels the old one. Mudrex's version 1.0 allows one key per user and needs PAN and Aadhaar verification through DigiLocker plus TOTP two-factor authentication first. Bitbns still has an API, but its documentation repository says it is no longer maintained, so it is a poor choice for a new bot project.
Where to create the key and find the docs
Most exchanges let you create keys on the website; some also allow it in the app. Menu names change between versions, so the labels in your app may differ slightly from these.
| Exchange | Where to create a key | API docs (type into your browser) |
|---|---|---|
| CoinDCX | Web: "Profile", then "API Dashboard", then "Create A New One"; confirm with the OTP sent to your email and mobile | docs.coindcx.com |
| Delta Exchange India | Profile icon, "API Keys"; enter a name and your whitelisted IPs, tick "Trading", then "Create New Key" | docs.delta.exchange (India accounts use api.india.delta.exchange) |
| Pi42 | The API section of your account, then "Generate API Key" | docs.pi42.com |
| CoinSwitch PRO | Profile, "API Trading", then generate a new key pair | api-trading.coinswitch.co |
| ZebPay | Web: "API Trading" in the left menu, "Create New API Key", set permissions and IPs, confirm with a 6-digit OTP | ZebPay's API Services page |
| WazirX | Account settings, then the API keys section | docs.wazirx.com |
| Giottus | The Giottus API Management page | api.giottus.com/docs |
| Mudrex | The API section, after DigiLocker KYC and TOTP; name the key and click "Generate Key" | docs.trade.mudrex.com |
| Unocoin | Settings, "Wallet Utilities", "Enable Access API" | Unocoin's API page |
Step-by-step walkthroughs with screenshots of each field are in our guides to creating a CoinDCX API key and creating a Delta Exchange India API key. One Delta detail catches many people: the India platform has its own API address, and the docs warn that the Delta Global address cannot be used with India accounts.
Offshore exchanges registered with FIU-IND
Three large offshore exchanges have registered with FIU-IND after paying penalties, and all three offer API keys with stricter IP rules than most Indian platforms.
- Binance (registered in 2024 after a ₹18.82 crore penalty): create keys under [Account], [API Management], [Create API]. You can choose a "System-generated" HMAC key or a "Self-generated" Ed25519 or RSA key. Since 30 January 2023, a system-generated key with unrestricted IP access can only read; to trade with it you must add IP restrictions. Open your Futures account before creating the key, or the key cannot get futures permission. Full steps are in how to create a Binance API key in India.
- Bybit (registered in February 2025 after a ₹9.27 crore penalty): a key created without bound IP addresses expires after 90 days, and new accounts may be unable to create keys for their first 48 hours. Bybit says its built-in trading bots are not available to users in India.
- KuCoin (registered in March 2024 after a ₹34.5 lakh penalty): you set an API passphrase that must be sent with every request. Trading or withdrawal permissions need an IP whitelist, and trading keys without an IP lose trading permission or are deleted after 30 days of inactivity.
OKX is not an option: it told Indian users in March 2024 that it was no longer serving India and asked them to close positions and withdraw by 30 April 2024 (see is OKX available in India). FIU-IND has also named unregistered offshore platforms in three rounds, 9 in December 2023, 25 in October 2025 and 15 in September 2026, including the bot-focused exchange Pionex. Many bot tutorials default to these exchanges, so confirm a platform is on our list of exchanges registered with FIU-IND before you connect anything.
How exchanges check your requests
Most Indian exchanges, including CoinDCX, Delta, Pi42, WazirX and Giottus, use HMAC-SHA256 signatures. CoinSwitch PRO uses Ed25519, where the API key is a public key and the secret is the private key. Mudrex's version 1.0 does no signing at all: the secret itself is sent in a header, so it must only ever travel over HTTPS. Signed requests carry a timestamp, and the window is tight. A Delta signature is valid for only 5 seconds, and Giottus expects your clock within 5 seconds of its server by default, so a computer whose clock drifts will see its orders rejected. For the full journey of an order, from price data to signal to signed request to stop-loss, read how crypto trading bots place trades.
ccxt and open-source bots: what works with Indian exchanges
ccxt is a free, MIT-licensed library that lets one piece of code talk to more than 100 exchanges. Many open-source bots use it, so ccxt support decides whether a ready-made bot can connect to your exchange. On 1 October 2026 its Indian coverage was thin:
- Supported: Mudrex (futures only), ZebPay (spot and perpetuals) and Bitbns (spot). Delta is listed, but it points to Delta Global by default, so a Delta Exchange India account may need the address changed and has not been tested by us.
- Not supported: CoinDCX, Pi42, CoinSwitch, WazirX (removed in February 2025), Giottus and Unocoin.
The popular Freqtrade bot officially supports no Indian exchange. If you want to trade INR pairs, you will usually either write a small client from the exchange's own docs or use a built-in tool. Delta Exchange India, for example, has a native TradingView webhook bot in its "Algo" menu at no extra cost, according to Delta; our guide to webhooks in crypto trading explains how alerts become orders. Free options and their hidden costs are compared in free crypto trading bots in India.
Steps that apply on every exchange
- Pick an exchange registered with FIU-IND and complete KYC.
- Turn on two-factor authentication for the account. Mudrex, Binance and Delta's webhook feature require it.
- Open the API section in your account settings, usually on the website.
- Name the key after the bot or tool that will use it, so you know what to delete later.
- Tick read and trade permissions only. Add futures permission only for a futures bot. Never tick withdrawals.
- Enter the fixed (static) IP address of the computer or server that will run the bot.
- Confirm with the OTP or authenticator code.
- Copy the key and secret straight into a password manager. The secret is usually shown only once.
- Test with a harmless call, such as fetching your balance, before placing one tiny order.
- Delete keys you no longer use, and replace any key that may have been exposed.
Which exchange suits which kind of API trading?
| What you want to do | Exchanges worth checking | Keep in mind |
|---|---|---|
| Spot bot on INR pairs | CoinDCX, ZebPay, Giottus, WazirX, CoinSwitch PRO | 1% TDS on every qualifying sell |
| INR-settled futures bot | Delta Exchange India, Pi42, CoinDCX, Mudrex | Leverage and liquidation risk; tax treatment unsettled |
| TradingView alerts without coding | Delta Exchange India | Webhook alerts need a paid TradingView plan |
| Ready-made open-source code via ccxt | ZebPay, Mudrex | Test on small sizes first |
| Deep USDT markets offshore | Binance, Bybit, KuCoin | Strict IP rules; no INR settlement |
An API is only one factor. Fees, liquidity and how an exchange handles problems matter more over time; our CoinDCX review and Delta Exchange review cover those in detail.
Costs and tax for API trading in India
A bot trades far more often than a person, so small charges add up quickly.
- 1% TDS: on CoinDCX, for example, 1% is deducted on spot sells in INR pairs, nothing on spot buys in INR pairs, 1% on both sides of crypto-to-crypto trades and nothing on its futures. A spot bot that sells ₹5,000 of crypto 100 times in a month has ₹5,000 deducted (1% of ₹5,00,000). You get it back only as a credit or refund when you file your return, as our guide on claiming a crypto TDS refund explains.
- 30% tax on gains: gains are taxed at a flat 30% plus 4% cess under the rules introduced as Section 115BBH. Only the cost of acquisition is deductible, and losses cannot be set off against any other income or carried forward.
- Futures: the tax treatment is unsettled. The government has issued no specific clarification; the conservative view taxes profits at 30% under the VDA rules, while some tax experts and exchanges treat INR-settled contracts as business income. See crypto futures trading in India: legal and tax.
- GST: 18% is added to trading fees, so ₹1,000 of fees in a month really costs ₹1,180.
- Running costs: a bot that runs around the clock usually needs a rented server with a fixed IP address, which is also what you whitelist.
Security rules for every API key
- Never enable withdrawal permission on a key used by a bot or a third-party tool.
- Bind the key to fixed IP addresses wherever the exchange allows it.
- Store the secret like a password. Never paste it into Telegram, WhatsApp, a Google Form or any website you do not fully trust.
- Use a separate key for each bot, and delete keys you stop using.
- Anyone who promises guaranteed returns from a bot in exchange for your API key is running a scam.
Our guide to whether it is safe to give an API key to a trading bot covers scams and what to do if a key leaks. Before you automate anything, remember that most retail bots lose money after fees, backtests usually look better than live results, and a bot repeats your mistakes faster than you would. Start with the beginner's guide to crypto algo trading in India.
FAQ
Which Indian crypto exchange has an API?
CoinDCX, Delta Exchange India, Pi42, CoinSwitch PRO, ZebPay, WazirX and Giottus all publish trading APIs, and Mudrex offers a futures-only API. Unocoin has a simpler API token, and Bitbns has an API whose docs are no longer maintained.
Does CoinDCX have an API for futures trading?
Yes. CoinDCX's API docs include a futures section covering USDT-margined and INR-margined instruments, alongside spot trading.
Is API trading allowed in India?
No Indian law or regulator currently prohibits individuals from using an API or bot to trade crypto on an exchange registered with FIU-IND. Our guide on whether algo trading is legal in India for crypto explains the rules and tax.
Can I create an API key in the mobile app?
On some exchanges. Binance allows it in the Pro version of its app, while CoinDCX's docs describe the web platform and Bybit recommends its website, so use a browser if you cannot find the option in the app.
What happens if I lose my API secret?
It cannot be recovered on most exchanges, including CoinDCX, Delta, Pi42, Binance and KuCoin. Delete the old key and create a new one.
Does Delta Exchange India require IP whitelisting?
Yes, for any key with trading permission. You can add several IPv4 or IPv6 addresses and edit them later.
This article is AI-assisted, educational and general in nature. It is not financial advice and never a guarantee of profit. Every trade is at your own risk on your own exchange. See our risk disclosure and editorial policy.
