Is a GMGN API key safe to use with third-party tools?
An API key is not your wallet key. Without trading permission it can only read data. What to check before pasting a GMGN API key into any extension or bot.
More and more GMGN extensions and bots ask for your GMGN API key. The first question should always be: can this get my wallet drained?
An API key is not a wallet key
Your wallet private key and seed phrase control your funds. Never paste them into any website, extension or bot. A GMGN API key is an access key whose power depends on the permissions you grant when you create it.
Do not enable trading permission
If a tool only needs to read your fills and positions, create the key without trading / swap permission. A key without trading permission cannot place orders or move funds, even if it leaks.
Check before you paste
- Does it ask for a private key, seed phrase or wallet signature? Then do not use it.
- Does it require trading permission? A read-only tool does not.
- Where is the key stored: only in your browser, or uploaded to someone's server?
- Which browser permissions does the extension request? Be wary of "read and change all your data on all websites".
- Does it rewrite links or swap referral codes on pages you open?
How TradeGuard handles it
The TradeGuard extension queries your wallets with your own GMGN API key over your own network. The key and the request-signing key (generated in your browser, not a wallet key) stay in your browser and are never sent to our server. The extension contains no trading code, refuses seed phrases and wallet keys, and has no access to the websites you browse beyond GMGN pages (paper trading) and the trading sites it pauses during a circuit breaker.