Last updated: July 2026
Security
Non-custody model
Trade4me never holds your crypto. Orders are placed on your connected exchange using your API keys.
API key guidance
Use trade-only keys with withdrawals disabled. Use a dedicated sub-account with limited funds when testing. CLI tokens (t4m_…) are revocable and stored locally on your machine.
Credential storage
Exchange secrets are encrypted at rest. List endpoints return masked keys only — not plaintext secrets. The CLI redacts sensitive fields in output.
AI trade gate
The gate uses glm-5.2 (z.ai) in two stages: a data-only check (bot config, candles, your algorithm history) and an optional web search for recent red flags. It reduces bad entries but does not eliminate risk.
Reporting issues
Report security concerns to security@trade4me.app. Include steps to reproduce and impact assessment.
Questions? Contact us.