What the connection actually does
A trading bot does not need you to deposit coins into its own wallet. It needs a controlled route into the Bybit account so it can submit, amend and close orders. The balance remains on the exchange while the strategy sends instructions through the API.
That distinction prevents one misunderstanding but not every risk. Disabling withdrawals stops the key from transferring assets out. It does not stop an authorised algorithm from opening a bad trade. Custody risk, market risk and configuration risk are separate problems.
Quick connect versus a manual key
The Pifagor Trade interface shows both routes. Quick connect sends the user through a Bybit authorisation flow and removes several copy-and-paste steps. Manual setup means creating a key in the exchange settings and entering its credentials in the Mini App.
Quick setup is less fiddly. Manual setup gives an experienced user more time to inspect every permission. The meaningful question is not which button was used, but what permissions and account scope exist when the process is finished.
- Check the Bybit address before authorising anything.
- Never send an API secret through a chat or an unprotected note.
- Re-open the active API list after setup and inspect the final permissions.
The permissions a trading bot needs
The bot needs account data to understand balances and positions, plus trading access to submit orders. It does not need withdrawal permission. If an automated trading product asks for that permission, stop and establish exactly why.
Where the exchange allows it, scope the key to the markets used by the strategy. Narrow permissions reduce the damage available to a software error, a compromised credential or a simple mistake.
Main account or subaccount?
A dedicated subaccount draws a visible line around the experiment. It can hold only the capital assigned to the algorithm, away from long-term holdings and manual trades. That makes drawdown and performance easier to read.
A main account requires extra attention to margin mode. Under cross margin, available balance can support open positions. In a poor scenario, more money may be exposed than the number displayed beside one individual trade.
A five-minute pre-flight check
Begin with the loss boundary, not an earnings target. Know how the strategy stops, keep the first allocation small and compare Telegram reports against the actual orders inside Bybit.
- Two-factor authentication is active on the exchange account.
- The API key cannot withdraw funds.
- Only the pre-agreed trading capital sits in the account.
- Market type, leverage and margin mode are understood.
- You know how to stop the strategy and revoke the key.