Deriv API Token: What It Is, How to Create One, Which Scopes to Choose and How to Stay Safe
What an API Token Can Do
| Scope (permission) | Allows | Give it to |
|---|---|---|
| Read | View balance, history and settings | Copy trading, trackers |
| Trade | Buy and sell contracts | Only bots you trust |
| Trading information | View trading history and statements | Journals and analytics |
| Payments | Withdraw and transfer money | Nobody |
| Admin | Change account settings and tokens | Nobody |
These are the classic Deriv token scopes. On the newer Deriv API dashboard, developers create a Personal Access Token and choose scopes such as trade or account management; the same rule applies: grant the minimum.
How to Create a Deriv API Token
- Log in to your Deriv account in the browser.
- Open account Settings → Security and safety → API token (developers: the API dashboard’s token section).
- Type a name you will recognise later, for example "copy-trading-read".
- Tick only the scopes you need.
- Create the token, copy it straight away and keep it in a password manager. It may not be shown again.
- Paste it only into the official app that asked for it.
How to Use It Safely
- One token per app, so you can delete one without breaking the others.
- Delete tokens you no longer use.
- Never send a token on WhatsApp or Telegram, and never to "support" who contacts you first.
- If a token leaks, delete it immediately and change your password.
- A token with Trade access can lose your money through bad trades, even without Payments access. Test bots on demo.
When You Actually Need a Token
Copy trading on Deriv options uses a read token from the trader you copy (see copy trading in Kenya). Some third-party bots ask for a trade token. Developers building their own app use the developer dashboard. Most traders using Deriv Trader, Deriv Bot or H-BOT do not need one.
Try It Free on a $10,000 Demo
Open a free Deriv account, connect it to H-BOT Africa and test bots, signals and digit tools on virtual money before risking a shilling.
Open a free Deriv account Open Deriv Bot Open H-BOT Ask on WhatsApp
Have an audience? Become a Deriv partner and earn commission on clients you refer.
Disclosure: some links on this page are Deriv partner links. If you open an account or become a partner through them, H-BOT Africa may earn a commission at no extra cost to you.
Frequently Asked Questions
What is a Deriv API token?
A key that lets an app access your Deriv account with only the permissions you choose.
How do I get a Deriv API token?
In Deriv account settings under Security and safety → API token, or the developer dashboard for apps.
Which scopes should I choose?
The minimum: Read for copy trading or tracking, Trade only for bots you trust. Never Payments or Admin.
Can someone withdraw my money with an API token?
Only if it has Payments access, so never grant that scope to anyone.
How do I delete an API token?
Open the API token page in settings and delete it; it stops working immediately.
Does H-BOT need my API token?
No. H-BOT uses Deriv’s official login, so you never paste a token or password.
Related Guides
Copy Trading in Kenya: How It Works on Deriv, cTrader and MT5, and How to Choose a Trader
How to Create a Deriv Bot Step by Step: Trade Parameters, Purchase Conditions and Restart Rules
How to Buy a Deriv Trading Bot Safely: What to Check, Fair Prices and Free Tests
NEWDeriv Login Problems: How to Fix Password, Two-Factor, Locked Account and App Login Errors