SoarSoar
Broker setup

Connect AsterDEX

8 steps2 fields

AsterDEX makes a separate trading-only key that can trade but cannot move money out. Not available in the United States.

Step by step

Getting your AsterDEX API keys

  1. 1
    Open AsterDEX and connect your wallet
    AsterDEX is not available in the United States. Use Rabby, MetaMask, or another EVM wallet.
  2. 2
    Sign in (no gas)
    Your wallet pops up a verification message. Approve it — no gas fee required.
  3. 3
    Turn on trading for this wallet
    If the right-side order panel asks you to enable trading, tap to enable. One-time step per wallet.
  4. 4
    Tap "Create API Key" and name it
    Use "Soar" or any label of your choice.
    Soar
  5. 5
    Tap "Generate"
    AsterDEX creates a separate trading-only key. Your main wallet stays untouched.
  6. 6
    Set permissions and validity
    • Turn ON: Perps trading
    • Optional: Read access (for balance queries)
    • Validity: pick the maximum (365 days) for a real bot
  7. 7
    Authorize in your main wallet
    Tap "Authorize". Your main wallet pops up an on-chain confirmation. Tap to approve.
  8. 8
    Copy all three values
    AsterDEX returns: Main Wallet Address + Trading Key Address + API Secret. Copy all three — the secret is shown ONCE only. Max 30 keys per account.
Permissions

What to enable — and what to leave OFF

✓Enable these
  • Perps trading
  • Read access
✕Never enable these
  • (AsterDEX has no "withdraw" option — by design)
Why this matters:Soar only ever needs read + place-order permissions. If you give a key withdraw or transfer access, anyone with that key could move funds — including a security risk if your machine is ever compromised. Disabling withdraw on the key itself means even a worst-case leak can't drain your account.
What you paste

The fields Soar asks for

  • Trading Key Address
    0x...
    The trading-only address AsterDEX created (NOT your main wallet).
  • API Secret
    paste API secret
    Shown once when you created the trading-only key.
Security & trust

Where your keys live

Soar passes your AsterDEXkeys straight from your browser into YOUR Cloudflare Worker. Soar's servers see them once during the ~30-second deploy window, then never again.

The bot that talks to AsterDEX runs on the free Cloudflare Workers tier in your own Cloudflare account. You see + control everything from your Cloudflare dashboard. You can rotate the keys, pause the bot, or destroy the Worker at any time — Soar has zero ability to undo that.

Read the full security model →
See also

Related help topics