Gateway
Request signing
Exchange APIs (OKX, Binance, Coinbase Advanced) need every request signed with your API secret. Add the exchange from its template and the gateway signs each call; your apps call it like any other API.
Key format
OKXapikey|secret|passphrase
Binanceapikey|secret
Coinbase CDPkey name|private key
You can sign only some paths (for example the order endpoints) and leave market data unsigned.
Self-hosted only: the secret part can live in the separate pikeway signer (encrypted keystore, unlocked by an unlock server) — write it as signer:<name>. Wallet private keys are only supported this way, on the Community Edition.