API Keys

Security Best Practices

Keep keys safe.

• Store keys in a secret manager or environment variable, never in source code or front-end bundles.
• Give each app or assistant its own key so you can revoke one without affecting others.
• Use short expirations and rotate regularly.
• Never paste trading passwords or MFA codes into instructions. Sign in to platforms yourself in the Taken app.
• If a key leaks, revoke it immediately and email contact@taken.trade.