SHARKRULE / Learn

Kraken API setup: access, permissions and security

Understand Kraken account access before connecting any automation. These instructions explain the provider’s setup process; a SharkRule connection for this exchange is planned.

SharkRule · Reviewed

1. Check access before creating a key

Kraken is on SharkRule’s roadmap and is not available in the current dashboard. This guide explains the provider’s access and permissions. Wait until your dashboard offers the connection before creating or sharing credentials.

2. Create your key on desktop or phone

Open Kraken Pro in your browser. In the account menu, choose Settings, API, then Create API key. Name the key SharkRule so you can identify it later.

On a phone, open the same official Kraken Pro website in a browser. If the API controls are missing in the app or narrow layout, use the browser’s desktop view or a computer. This guide does not assume that the mobile app can create keys.

Keep the API key and its API private key available for the connection form. Kraken’s API private key goes in SharkRule’s API secret field. It is not a wallet recovery phrase. Use a dedicated key instead of sharing one key with several bots.

3. Select permissions and restrict access

Enable Query Funds, Query Open Orders & Trades, Query Closed Orders & Trades, and Modify Orders. Leave Withdraw Funds, withdrawal-address management and other unnecessary permissions disabled. The current one-time IOC rule does not ask SharkRule to cancel orders separately. Set IP Address Restriction to the server IP shown by SharkRule. Keep your account sign-in 2FA enabled; this connector does not accept a separate API-key 2FA code.

When the connection becomes available

Your dashboard will show the supported account type, credential fields and server IP when this connection is available. Follow those instructions then. Verifying a connection and approving a trading strategy are separate steps; reading this guide never activates trading.

If the connection does not work

Authentication failures can mean an incomplete key, a mismatched IP restriction, or API-key 2FA that this connector cannot supply. Preserve account sign-in security while checking the dedicated API key.

Invalid nonce errors can occur when separate programs reuse a key. Give SharkRule its own key and report the time and a redacted error, without credentials or a key QR code.

For a balance or minimum-order error, check the available USDC balance and reviewed amount. If an order remains uncertain, let the existing rule be checked instead of starting a replacement.

Remove access at the provider

Review active orders directly at Kraken. Delete the dedicated API key or revoke the API-wallet approval through its official settings to remove that access. Revocation does not sell holdings or undo orders already accepted. If credentials are exposed, revoke promptly and review the account’s activity.

Frequently asked questions

Does connecting start trading?

No. Connecting checks access. Starting a strategy requires a separate review and explicit approval.

Do I need to leave my phone or computer on?

Monitoring runs on SharkRule’s server after you approve a rule. Closing the browser does not pause it; use the dashboard’s pause or disconnect controls and review their effects.

Official documentation and references

Prepared with AI assistance from the linked official documentation. Examples are hypothetical; no live account tests or return comparisons were performed.