Trading tools connect to an exchange with an API key. The key decides what the tool can do with your account, so the permissions you give it matter more than any promise made about the tool.
Give only what is needed
- Trading: allowed, if the tool needs to place orders.
- Reading balances: allowed.
- Withdrawals: always off. A key without withdrawal permission cannot move funds out of your account, even if it leaks.
Extra protection
Most exchanges let you lock a key to fixed IP addresses, so it only works from one server. Use a separate key for each tool so you can switch one off without affecting the others, and delete keys you no longer use.
The Alpha Pride desk follows the same rule for its own account: its keys trade, and they cannot withdraw.