Bitcoin Forum

Other => Archival => Topic started by: subwoofer12 on December 13, 2013, 08:38:36 PM



Title: delete
Post by: subwoofer12 on December 13, 2013, 08:38:36 PM
delete


Title: Re: Safe to give out API key?
Post by: Automatic on December 13, 2013, 08:43:50 PM
Never used coinbase, but, they should have a developer page, it'll tell you all the permissions an API key can have.


Title: Re: Safe to give out API key?
Post by: crunchynut on December 13, 2013, 08:54:37 PM
 https://coinbase.com/docs/api/authentication

Quote
API key authentication grants full access to an account, so it should be used with caution (see security notes below).


Title: Re: Safe to give out API key?
Post by: DeathAndTaxes on December 13, 2013, 10:11:29 PM
I would create a new temporary account and give him that key.  Otherwise ensure that you can revoke the key and generate a new one.  Once the developer knows the key you can't make him unknow it.  He could simply wait until someday in the future when the account holds a thousand BTC and remove them instantly.