Coinbase uses CDP keys (not the old HMAC keys). Create an Ed25519 key with Trade permission — you’ll get a key name and a private key.
Fomoed connects to Coinbase with a trade-only API key. The key can place trades but — with withdrawals disabled and IP-locking on — can never move money out of your Coinbase account. Credentials are encrypted with AES-256.
Open the Coinbase API page ↗
- Open the CDP portal. Go to the Coinbase Developer Platform API keys page (link above) and click Create API key.
- Choose Ed25519. Pick the Ed25519 key type (recommended — it’s a single-line secret). Give it a nickname like “Fomoed bot.”
If you use an EC key instead, its private key is multi-line (PEM) — paste it exactly, keeping the line breaks.
- Set permissions. Give the key Trade permission. Do not grant transfer/withdraw scopes.
Do NOT grant withdraw/transfer permission.
- Restrict the key to Fomoed’s IP addresses. Turn on IP access restriction and add Fomoed’s server IPs (below). This means the key only works from our servers — even if it leaked, nobody else could use it. Add all of them.
51.161.117.82, 51.79.107.144, 51.79.107.145, 51.79.107.166, 51.79.107.175, 51.79.107.193, 51.79.107.198
If you skip this, the key still works, but IP-locking is the single biggest safety upgrade — do it.
- Copy the key name and private key. Copy the key name (looks like
organizations/…/apiKeys/…) and the private key. The private key is shown only once.
- Save and paste into Fomoed. Back in Fomoed, select Coinbase, then paste your key name and private key. Fomoed validates the key immediately and confirms the trading permission (and IP lock) are correct.
Your funds stay safe. The key can place trades but — with withdrawals off and IP-locking on — can never move money out of your Coinbase account. Fomoed encrypts your credentials with AES-256 and never has withdrawal access.