Coinbase DCA Bot - Secure API Setup Tutorial

Connect Coinbase to dca.bot (Spot Trading via Restricted API Key)

This guide shows how to connect your Coinbase (spot) account to dca.bot using a tightly restricted API key. You’ll name the key dcabot, grant only the minimal read and trade permissions, lock it to a single IP allowlist for security, and paste the credentials into dca.bot. A short YouTube walkthrough is embedded below for those who prefer a visual guide.

Before you start

You need a verified Coinbase account for spot trading and an active dca.bot account. Keep Coinbase open in one tab and dca.bot open in another under Connect Exchange → Coinbase. This process does not require withdrawal permissions; dca.bot only reads balances and places/manages spot orders in your account—your funds always remain on Coinbase.

Video Tutorial Coinbase DCA Bot Setup

Create and restrict your Coinbase API key

In Coinbase, open API Management from your account’s settings/security area. Click Create API key, and configure it as follows:

• API key nickname: dcabot

• Permissions: enable View and Trade under Funds/Trading permissions (no withdrawals).

• IP allowlist / whitelist: add the single address used by dca.bot: 3.74.82.155

Click Create & download, then complete 2-factor authentication if prompted. Coinbase will show your API Key and Secret (and in some accounts, a Passphrase). Copy these now—secrets are shown only once.

Connect the API keys in dca.bot

1. Go to Connect Exchange in dca.bot and choose Coinbase.

2. Paste your API Key into the API key field and your Secret into the Secret field.

3. Click Connect. On success, dca.bot will show Coinbase as connected and display your spot balances for supported trading pairs.

Coinbase API Setup (Quick Steps)

1. Go to Coinbase API Management

2. Click “Create API key”

3. Type “dcabot” in the “API key nickname” field

4. Select “View” and “Trade” under “Funds permissions”

5. Add 3.74.82.155 to the “IP whitelist” field

6. Click “Create & download”

7. Enter your 2FA code (if required)

Security best practices

• Never enable withdrawals for third-party tools.

• Keep the IP allowlist to one address: 3.74.82.155 (this ensures the key only works from dca.bot).

Troubleshooting without guesswork

“Invalid key” or “invalid signature” — Re-paste the API Key/Secret (and Passphrase, if applicable) carefully without spaces or line breaks. If needed, create a fresh key.

“Permission denied” — Confirm the key has View and Trade enabled. Withdrawals should remain off.

“IP not allowed” — Make sure IP allowlisting is enabled and that the allowlist contains exactly 3.74.82.155.

Balances not showing — Verify you’re on Coinbase spot, that funds exist in the relevant wallet/portfolio, and that you connected the correct account.

FAQ

Does dca.bot support withdrawals?
No. dca.bot does not move funds; it reads balances and places/manages spot orders only.

Can I add multiple IPs to the allowlist?
For maximum security, use a single IP: 3.74.82.155.

Next steps

With Coinbase connected, create or edit a DCA strategy in dca.bot and select Coinbase as your exchange. Define your pair, schedule, and optional multiplier logic—then let dca.bot automate your Bitcoin DCA on spot.