API permission scope

The set of actions an API key is allowed to perform — such as read, trade, or withdraw — which you choose when creating the key. For example, granting trade but not withdraw limits what any connected app can do. AlgoVesta only needs trade permissions, never withdrawal.