Unverified50% confidenceDecision RuleExact time
When creating an API key on a broker's platform, grant only read and trade permissions, not withdrawal permissions.
1
Sources
50%
Confidence
Long-term
Relevance
10/17/2026
First Seen
Sources
Related Entities
Related Claims
UnverifiedThe principle of least privilege recommends creating dedicated service accounts for agents, granting only the necessary read-only permissions in the Graph API (such as Sites.Read.All), with write permissions subject to separate approval and logged.73% similarUnverifiedAPI Key 一旦泄露他人可冒用身份调用产生费用，不应写入公开代码仓库，建议设置用量告警和消费上限73% similarUnverifiedCredentials should be injected by a secrets manager, not written into prompts or source code, using least-privilege service accounts.72% similarUnverifiedSensitive parameters such as merchant numbers and keys should be placed only in configuration files and not written into business code, in order to protect information security.68% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/1052491API
curl https://kongchang.com/api/v1/knowledge/claims/1052491MCP
get_claim(id=1052491)