Where your keys live
Trade stores exchange API keys on your server. They are not sent to ZML, and ZML has no login to your machine. Monitor uses its own read-only market data credentials and never asks for yours.
Security
What ZML can and cannot do, stated plainly.
No custody
ZML never holds your funds. Orders go from your server to the exchange under your own API keys.
How updates work
Trade is closed-source software that updates itself. Releases assigned to your instance are applied automatically; every release is signed, verified before install, backed up first and rolled back if it fails. You should know what this means: the software on your server is software we ship. Limit what any trading software could do with your keys.
What we recommend
- Create API keys without withdrawal permission.
- Restrict each key to your server's IP address.
- Use a sub-account with only the capital you intend to deploy.
- Keep server access to yourself. We will never ask for it.
What ZML receives from Trade
Instance identity, version and derived health figures for licensing and updates. Not your keys, balances, orders or positions.
Admins never message first
Nobody from ZML will contact you first on Telegram or ask for keys, passwords or funds. Treat any such message as fraud.
Who runs ZML
Z Market Lab is operated by an individual, not a company. We say so because you should weigh it.
See it with real data.
Open the live demo without an account. Install Trade when you are ready to execute on your own server.