The one rule: give the key View permission only. Never enable Trade or Transfer for ZephirexULTRA.
- 1
Open the Coinbase Developer Platform
Go to portal.cdp.coinbase.com and sign in with the same Coinbase account you trade on. If this is your first visit, Coinbase asks you to create a project; any name works.
- 2
Start a new Secret API key
Open API Keys in the left menu, choose the Secret API Keys tab and click Create API key. Give it a nickname you will recognize, for example "ZephirexULTRA".
- 3
Choose the portfolio to analyze
In the key settings, pick the Coinbase portfolio you want ZEPH to coach you on. A key can only see the one portfolio it is created for, so choose the one you actually trade from (usually "Default").
- 4
Give it View permission only
Under permissions, tick View and nothing else. Leave Trade and Transfer switched off. ZephirexULTRA checks every key when you add it and rejects any key that can trade or move funds.
- 5
Create the key and download the file
Click Create API key and complete Coinbase's 2FA check. Coinbase shows the key name and private key once. Click Download to save the .json key file, and keep it somewhere private, such as a password manager.
Either signature algorithm works with ZephirexULTRA (the default Ed25519 or ECDSA), so you can leave Advanced Settings as they are. You can also leave the IP allowlist empty.
- 6
Add it to ZephirexULTRA
Sign in, open the API Keys tab in your dashboard and click "Load from Coinbase key file (.json)". Pick the file you just downloaded; the key name and private key fill in automatically. Add a label and save.
Your live portfolio, positions and trade history replace the sample data within a few seconds, and ZEPH starts coaching you on your real trades.
Never share your private key with anyone, including ZephirexULTRA support. You only ever paste it into the API Keys tab of your own dashboard.
Common questions
Can ZephirexULTRA trade or withdraw with my key?
No. Only view-only keys are accepted. A key with Trade or Transfer permission is rejected before it is saved, so the app has no way to place orders or move funds.
How is my key stored?
The private key is encrypted at rest and is never shown again after you save it. You can delete it from the API Keys tab at any time, and you can also revoke it on the Coinbase Developer Platform.
Do I need two-factor authentication?
Yes, within 45 days of adding your first key. Even a read-only key exposes your balances and trade history, so we require 2FA to protect that data. Turn it on in the Security tab.
My numbers look empty or wrong. What happened?
The key most likely belongs to a different portfolio than the one you trade from. Create a new key for the right portfolio and replace the old one.
Not ready to connect a key yet?
Try the full dashboard and the AI coach on a sample portfolio first.