OpenMM Exchange Setup

Interactive guide for configuring exchange API credentials in OpenMM.

When to Use

Use this skill when:

• - Setting up OpenMM for the first time
• Adding a new exchange
• Troubleshooting connection issues

Supported Exchanges

Setup Workflow

Step 1: Create API Keys

Guide user to the exchange's API management page:

CODEBLOCK0

Step 2: Configure Permissions

Required permissions for each exchange:

MEXC:

• - Enable Spot Trading
• Enable Reading
• Disable Withdrawals (safety)
• IP whitelist recommended

Gate.io:

• - Spot Trade
• Spot Read
• No Withdraw permission
• IP whitelist recommended

Kraken:

• - Query Funds
• Query Open Orders & Trades
• Create & Modify Orders
• No Withdraw permission

Bitget:

• - Trade
• Read Only
• No Transfer permission
• Note the Passphrase — it is set when creating the API key

Step 3: Set Environment Variables

OpenMM uses environment variables for credentials. Add them to your .env file or export in your shell:

CODEBLOCK1

Or create a .env file in the project root:

CODEBLOCK2

Step 4: Verify Connection

Test that credentials work by checking balances:

CODEBLOCK3

Step 5: Test Market Data

Confirm market data access:

CODEBLOCK4

MCP Server Setup

To use OpenMM as an MCP server, add to your MCP client config:

CODEBLOCK5

Only include env vars for exchanges you want to use.

Troubleshooting

"credentials not found"

• - Verify environment variables are set: INLINECODE2
• Check .env file is in the correct directory
• Ensure variable names match exactly (e.g. MEXC_SECRET not MEXC_SECRET_KEY)

"credentials validation failed" (Bitget)

• - Verify all three vars: BITGET_API_KEY, BITGET_SECRET, INLINECODE8
• The passphrase is set when creating the API key on Bitget

"authentication failed" (Kraken)

• - Verify KRAKEN_API_KEY and INLINECODE10
• Check key permissions on Kraken API settings page

"Timestamp Error"

• - System clock may be out of sync
• Run: INLINECODE11

"Rate Limited"

• - Reduce request frequency
• Check exchange's rate limit docs

Security Best Practices

1. 1. Never enable withdrawals — trading doesn't need it
2. Use IP whitelisting — restrict to your server's IP
3. Never commit .env files — add .env to INLINECODE14
4. Rotate keys periodically — every 90 days recommended
5. Use separate keys for testing — don't mix testnet/mainnet