SoarSoar
Return to dashboard
Broker setup

Connect Kraken Pro

7 steps2 fields

Kraken doesn't offer practice mode. Your bot will trade with real money — you can pause it anytime from the dashboard.

Step by step

Getting your Kraken Pro API keys

  1. 1
    Open Kraken Pro and sign in
    This is Kraken Pro — not the regular Kraken site. The steps are different.
  2. 2
    Open Settings → API
    Tap the person icon in the top-right corner, choose "Settings", then switch to the "API" tab.
  3. 3
    Tap "Create API key" and name it
    Use a name like "Soar Bot". Names must be unique across all keys on your account.
    Soar Bot
  4. 4
    Turn ON these 6 permissions ONLY
    • Query Funds
    • Query Open Orders & Trades
    • Query Closed Orders & Trades
    • Modify Orders
    • Cancel/Close Orders
    • WebSocket interface
  5. 5
    Leave Withdraw Funds OFF
    NEVER turn on "Withdraw Funds". Your bot does not need it. Turning it on creates a security risk if the key ever leaks.
  6. 6
    Skip the IP restriction
    Leave "IP restriction" off — Soar bots use many different network addresses, and turning it on would block them.
  7. 7
    Tap "Generate key" and copy both values
    Kraken shows the API Key and the Private Key. The private key is a long string ending in "==". Copy both right away — they are shown ONCE only.
Permissions

What to enable — and what to leave OFF

✓Enable these
  • Query Funds
  • Query Open Orders & Trades
  • Modify Orders
  • Cancel/Close Orders
✕Never enable these
  • Withdraw Funds (NEVER turn on — Soar never withdraws)
Why this matters: Soar only ever needs read + place-order permissions. If you give a key withdraw or transfer access, anyone with that key could move funds — including a security risk if your machine is ever compromised. Disabling withdraw on the key itself means even a worst-case leak can't drain your account.
What you paste

The fields Soar asks for

  • API Key
    paste API key
    A long random string of letters/numbers from Kraken.
  • Private Key
    paste private key
    A long random string ending with "==". Only shown once when you create the key.
Security & trust

Where your keys live

Soar passes your Kraken Prokeys straight from your browser into YOUR Cloudflare Worker. Soar's servers see them once during the ~30-second deploy window, then never again.

The bot that talks to Kraken Pro runs on the free Cloudflare Workers tier in your own Cloudflare account. You see + control everything from your Cloudflare dashboard. You can rotate the keys, pause the bot, or destroy the Worker at any time — Soar has zero ability to undo that.

Read the full security model
See also

Related help topics