Exchange bot: Bybit Spot and Futures, API keys

An exchange bot is the link between Sync and your Bybit account: a market type plus a pair of API keys. Everything else — signal channels, manual trades, Grid and DCA bots — is created "inside" such a bot.

What this is

Trade type	What it is on Bybit	Specifics
Bybit Spot	Spot — buying and selling the actual coin	No leverage, LONG only
Bybit Futures	Perpetual futures settled in USDT	With leverage, LONG and SHORT; requires the One-Way position mode

Spot and futures need two different key pairs and, accordingly, two exchange bots: Bybit allows creating several keys on one account. The same key pair cannot be attached to two bots.

The money stays on the exchange. The bot only places and cancels orders — it does not need withdrawal permissions, and the keys are best created without them.

Where it is in the bot

Main menu → 🤖 Signal Bots → Create bot.

How to create one

1. “Choose an exchange” — Bybit is available for now.
2. “Choose a trade type” — the Bybit Spot or Bybit Futures button.
3. “Name your bot, for example: MY_FUTURES or MY_SPOT” — enter your own name or press the button with a ready-made one (MY-BYBIT-SPOT / MY-BYBIT-LINEAR). The name must be unique among your bots.
4. “Send API keys as text separated by a space” — in one message: the key first, then the secret. Example: AbCdEfGhIjKlMnOpQr 1a2b3c4d5e6f7g8h9i0j1k2l3m4n5o6p7q8r.
5. “Bot successfully created, now you need to connect it to signal channels” — the buttons Connect channels and Connect later.

What the bot checks when you send the keys:

• exactly two values separated by a space;
• the key length is 18 characters, the secret length is 36;
• this pair has not been added to Sync yet;
• the keys are valid and have the required permissions (which ones exactly — in API key permissions);
• the key does not belong to a copy-trading master account.

If the key was created without an IP restriction, the bot shows a warning with the server address once — this is a hint, not an error.

After creation

The bot card has four buttons: Trading settings, Connect channel, Bot settings and the Auto-trade switch. Inside Bot settings:

Button	What it does
Rename bot	Changes the displayed name
Update API keys	Replaces the key pair, for example after reissuing them on Bybit
Copy bot	Creates a copy together with the trading settings; a new key pair is required
Delete bot	With a confirmation; not possible while the bot has active trades

If you started the creation and did not send the keys, the record stays a draft and is deleted after 7 days — start again.

Limits and allowed values

Parameter	Value	Note
Exchange	Bybit	Spot and USDT perpetual futures
Key / secret length	18 / 36 characters	Copy from Bybit in full, without spaces
Key pair	Unique in Sync	One key — one bot
Spot and futures	Two different bots	Two different key pairs
Bot draft	Deleted after 7 days	Not an error
Deleting a bot	Only without active trades	Wait until they are finished

Common errors and what the bot says

• “Send exactly TWO values separated by a space: the API key first, then the secret key. You sent 1 part(s). Example: AbCdEfGhIjKlMnOpQr 1a2b3c4d5e6f7g8h9i0j1k2l3m4n5o6p7q8r” — send the key and the secret in one message, separated by a space.
• “Invalid API key length: 20 chars (must be 18). Copy the full key from Bybit, without extra spaces.” — the same for the secret: “Invalid secret key length: 30 chars (must be 36)…”.
• “The data you sent does not match the API key format” — the message contains extra characters or the wrong text.
• “This API key pair already exists in the system” — the keys are already attached to another bot (possibly yours). Create a new pair on Bybit.
• “API key is invalid” / “Failed to verify API keys” — the key was revoked, has expired or was copied with a mistake. See Key rejected or invalid.
• “API keys do not have the required permissions” — the key has no permission to trade on the chosen market. See “API keys do not have the required permissions”.
• “This API key belongs to a copy-trading master account. All your Grid/DCA orders would be automatically copied to your followers. Please use a regular account without copy-trading.”
• “The bot currently has active trades. To delete it, wait for them to complete or close them manually” — when you try to delete a bot with open trades.
• “❌ You don't have any connected API bots. First create a bot with exchange API keys.” — you went to create a DCA or Grid bot before the exchange bot.