出典確認済みリサーチ: Kraken / OKX

Decision Matrix

Source Map

• Kraken Support: Add Withdrawal Addresses - API Permission (s1)
• Kraken Support: API Key Security (s2)
• OKX: OKX API Agreement (s3)
• OKX: OKX API Guide (s4)
• KuCoin: Withdrawal Restrictions Guide and Security Tips (s5)

Control Notes

1. Address mutation scope

Address mutation scope is the part of the decision where the reader must turn a public source into an operating rule. In this package, it means Kraken exposes a named permission for adding and removing withdrawal addresses. The useful action is to separate address-management keys from trading and withdrawal keys. The unresolved edge is whether a specific user's existing key already has this permission enabled, so this article does not convert that uncertainty into a promise, ranking, reward, approval, safety claim or future-availability claim.

For an operator, address mutation scope should be recorded before funds, account access, wallet recovery, API order flow, whitelist changes, cross-chain transfers or tokenized-asset decisions become material. The record can stay simple: the official source URL, the date checked, the product or network under review, and a non-secret note describing why the next step is acceptable. Screenshots should avoid balances, identity documents, API keys, recovery phrases, private keys, passphrases, verification codes and support-ticket private data.

2. Combined-permission risk

Combined-permission risk is the part of the decision where the reader must turn a public source into an operating rule. In this package, it means the highest-risk case is address modification plus withdrawal ability on one credential. The useful action is to avoid keys that can both change destinations and move funds. The unresolved edge is whether an application silently requests a broader permission set than documented, so this article does not convert that uncertainty into a promise, ranking, reward, approval, safety claim or future-availability claim.

For an operator, combined-permission risk should be recorded before funds, account access, wallet recovery, API order flow, whitelist changes, cross-chain transfers or tokenized-asset decisions become material.

3. IP allowlisting

IP allowlisting is the part of the decision where the reader must turn a public source into an operating rule. In this package, it means both venues frame network restriction as a material control when available. The useful action is to bind production keys to stable outbound IPs and reject shifting consumer networks. The unresolved edge is whether the user's server, VPN or cloud runner has predictable egress, so this article does not convert that uncertainty into a promise, ranking, reward, approval, safety claim or future-availability claim.

For an operator, ip allowlisting should be recorded before funds, account access, wallet recovery, API order flow, whitelist changes, cross-chain transfers or tokenized-asset decisions become material.

4. Incident response

Incident response is the part of the decision where the reader must turn a public source into an operating rule. In this package, it means OKX explicitly names rotation after suspected compromise and Kraken describes disabling or reducing API permissions. The useful action is to write a rotation and disablement runbook before automation goes live. The unresolved edge is the user's logs, alerting and secret-storage history, so this article does not convert that uncertainty into a promise, ranking, reward, approval, safety claim or future-availability claim.

For an operator, incident response should be recorded before funds, account access, wallet recovery, API order flow, whitelist changes, cross-chain transfers or tokenized-asset decisions become material.

5. Comparison outcome

Comparison outcome is the part of the decision where the reader must turn a public source into an operating rule. In this package, it means this is a permission-audit map, not a venue ranking. The useful action is to inventory every key by owner, scope, IP, expiry and disabled status. The unresolved edge is private account state and support actions after publication, so this article does not convert that uncertainty into a promise, ranking, reward, approval, safety claim or future-availability claim.

For an operator, comparison outcome should be recorded before funds, account access, wallet recovery, API order flow, whitelist changes, cross-chain transfers or tokenized-asset decisions become material.

Known Unknowns

• whether a specific user's existing key already has this permission enabled
• whether an application silently requests a broader permission set than documented
• whether the user's server, VPN or cloud runner has predictable egress
• the user's logs, alerting and secret-storage history
• private account state and support actions after publication

Practical Takeaway

The safest version of this article is the one that stays boring and exact. Kraken and OKX both treat API credentials as high-impact account controls, but their public documentation frames the risk differently. Kraken documents a specific Add Withdrawal Addresses API permission and warns against pairing it with Withdraw Funds; OKX frames API safety as a user obligation around minimum permissions, MFA, IP allowlisting where available, encrypted storage and incident rotation. The user outcome is a clearer next inspection step, not a promise that a platform, API, transfer route or tokenized asset will work under every future condition.