Help
How the desk works
Create a desk and connect trade-only. Then choose North Star — a separate enrollment; our software runs its strategy — or build your own automation with the pair and settings you set. Either way the orders go to your own exchange account. We never recommend a pair. How we stay on the right side of the line is on Risk & your data.
Getting started now
Using Coinbase? Our step-by-step Coinbase guide shows every click, with pictures (sign in first). You sign the Service Agreement on the platform and your copy is emailed to you; the first 30 days are free, then $50/month. The desk already works.
- Create your desk — 18 or older, not sanctioned. No exchange keys.
- Connect your exchange — make a trade-only key (Transfer and Withdraw off), put LumenBotFi's IP address in its IP whitelist, and paste the key in.
- You sign the Service Agreement on the platform, starting from Enroll.
- Your paper automation runs. Open Your automations for last price, change vs your entry, and realized result. Results record is the same record by pair.
- Everything runs on the platform — no setup beyond connecting your exchange. API access for external tools isn't open to members yet.
- Support staff can view your desk read-only to help you; they can't trade or change anything.
Saved configs
You may save your own settings as a config. Applying one fills the create form — pair, sizes, ladder, and exits — not just the type. Reinvest on longs is locked at 0%; a non-zero request is refused. This is not a marketplace. We do not recommend or rank templates.
Your settings
Building your own automation records the pair, direction, and settings you set. Changing take-profit or stop-loss later is recorded as a new setting. A new pair or direction needs a new automation. We do not flip in place.
Paper store
A quiet GET does not rewrite the paper store. Session last-seen updates at most once a minute. An idle automation on an unchanged mark does not tick last. Fills, setting changes, and starts still write.
How your exchange key is held
Your key is stored encrypted, never displayed, and sent only from our server. Add our server's IP (shown on the Connect page) to the key's IP whitelist on your exchange — we can't see that setting, so check the paste. A key goes live only after your exchange confirms it can't withdraw or transfer. We re-verify every key cleared for live every 12 hours: if the exchange reports it can withdraw or transfer, or rejects its sign-in, we take it off live automatically; if a check can't complete for 24 hours, all live orders — exits included — pause until it passes again. The Connect page shows when each key cleared for live was last re-verified. Paper uses public tapes and needs no key.
Trade-only probe
A paper trade-only probe records trade true, withdraw false, transfer false. Simulate a withdraw-capable or transfer key and the probe is refused.
IP whitelist, passphrase, subaccount
Your key's IP whitelist (some exchanges call it IP allowlist) must contain LumenBotFi's server IP, shown on /desk/connect. There you also record whether your exchange uses a passphrase and an optional subaccount label. Keys and passphrases are stored encrypted and never displayed; a key goes live only after the exchange confirms withdraw is off.
Magic link
Request a sign-in link at /magic. We email it to you. Replay of a used link is refused. Expires in 15 minutes.
2FA (TOTP)
2FA is optional and recommended. Enroll at /desk/security or read /security. Secrets are not emailed. When it is on, starting live trading asks for your 6-digit code. No SMS.
Email verify
We email you a verification link; /verify can resend it. Paper automation is not locked while unverified.
Viewer
A viewer can watch the desk but can't change anything. The decisions stay yours.
Paper demo
Try paper demo opens a sandbox tenant. Paper fills only. Live writes stay refused. The demo cannot arm a venue.
Bring your AI assistant
Your AI assistant can set you up and check on your desk. Machine-readable onboarding lives at /agents — six US exchanges, tracked signup links, and the rules agents must follow. Only you sign, connect keys, and press Start.
Webhook trigger
An automation you set to start on a trigger can be started by a signed webhook: POST /api/hooks/signal with an HMAC signature. The payload must repeat the pair and direction you set. We do not infer a pair. Exchange secrets never appear.
Paper fan-out
One signed trigger may fill every matching paper automation. Pair and direction must be repeated. We do not infer. Not an exchange key.
TradingView alerts
TradingView / Pine may send a paper order trigger only if the payload repeats the pair and direction you set. A ticker-only Pine alert is refused. HMAC required. We do not infer.
Order style
You choose market, limit, or post-only, and we record that order style. Paper limit/post-only orders rest until the tape crosses (post-only never takes). Start refuses a post-only that would take. Paper limit fills can be partial; overview tiles, Table, and Portfolio label the leftover rest. Table can Start or Close. Start stays hidden while a rest is open. Cancel or replace a rest; a stuck rest is cancelled after four quiet ticks.
Safety ladder
You choose on-book or place-when-hit for remaining safety orders, and we record your choice. On-book rests every remaining rung. Place-when-hit lists the next one. A jump fills each crossed step.
Loss pause (price 25% below your average entry)
Paper DCA pauses at 25% versus your average entry. The deal stays open. Last still follows the tape. You resume or panic close. This is a circuit, not a pick.
Login lockout
Eight failed passwords lock that email for 15 minutes. The eighth failure is still a mismatch; the ninth is refused as too many tries.
Paper write budget
Each desk has a fair paper write budget. Overview shows used / 120 this minute. Creates, starts, and other changes spend it. Tape ticks do not. When it is used, further writes are 429 and the desk says wait and retry.
CSRF
Mutating desk writes refuse a cross-site Origin. A wrong CSRF token is refused. Same-site cookies are Lax. We do not infer.
Paper replay
Replay one of your automations on its own tape at the replay page. We do not invent bars or pick a pair.
Paper stream
The desk stream walks the tape and pushes fills that already executed so you do not have to poll. The sidebar and an automation-page GET watch without ticking last or filling safeties.
Install the desk
You may install the paper desk. Live writes stay refused.
Price chart
The automation page shows its pair's tape. No overlay.
Journal
Your notes on your automations live at /desk/journal. We do not write them. A viewer cannot record a note. Copy that ranks a pair is refused.
Telegram remote
You may turn on paper Telegram remote (pause, resume, panic, or status on an automation you already own) at /desk/telegram. The checkbox keeps your setting. Commands are recorded here only. We do not infer a pair from a chat.
Paper alerts
You may opt in to email, Telegram, or SMS notices of fills that already executed at /desk/alerts. We record that choice. Notices describe fills that already happened. Not advice.
Time-stop
You set how many hours a DCA deal may stay open. We list that deadline on Portfolio as a reduce-only paper order. Zero hours means off. We do not pick the clock. Leftover after scaled exits still waits for this stop, a stop-loss, a trail, or you.
Short (coins after the time-stop)
Where a short runs for your live account, a deal that reaches its time-stop is not sold at market. Its coins are handed to a short: sells rest above the price, each higher than the last. It sells first, then places buy orders the take-profit distance below each sell, using the take-profit percentage your automation already uses. Any BTC difference is recorded — the result can be a loss. This is a spot sell-then-rebuy, not a margin short. If the price climbs past every sell, it stops and keeps the BTC. Small amounts get fewer sells; coins too few for any order wait and join the next ones. Stop it with one click on the automation's page: its orders are cancelled, coins it sold stay BTC, coins it has not sold stay in your account.
Scaled exits
You may set scaled take-profit levels (percent and portion); we record those exits and do not pick the levels. If the portions do not cover the whole deal, leftover inventory stays open. We do not dump the remainder.
SmartTrade
You set the bracket (pair, direction, size, take-profit, stop-loss; trailing optional); we record it.
Grid spacing
You choose arithmetic or geometric spacing. We do not pick the spacing.
Trailing grid
You may set a trailing grid (re-center when the mark walks beyond your range by a percent you set) or a range-exit; we record those settings and do not pick the range.
Combined grid + DCA
You set the grid lower and upper — we do not invent the band. Combo: you set the band and the DCA safety ladder; we record both and do not pick the mix. Inventory waits for Start. The next safety is a place-when-hit paper order on Portfolio, not a live book.
Sanctions screen
Signup records your region, sanctions attestation, and that you are 18 or older. Denied regions are refused. This is not a live OFAC feed and not advice.
Best execution and conflicts
For an automation you build, you set the exchange, pair, direction, and order style; North Star follows its own fixed rules. We route to your exchange only. We do not pick a market for price. We do not take payment for order flow. We do not internalize. Paper fills walk the public tape — not a best-execution claim. We never recommend a pair.
FIFO lots
FIFO lots are an internal paper record. Short-term / long-term is a holding-period flag, not tax advice. The exchange is trader of record. Download the FIFO CSV from Portfolio. The fill CSV on Trade history uses the same rule — never your email.
Download or erase your data
Download your data as Excel or JSON from Your data: automations, orders, fills, shorts, support messages, sign-ins, agreement details, North Star records, and audit. Erase your desk from Your data: we delete your account and everything that identifies you — sign-ins, exchange keys, support messages, notes, and signed-agreement details. Your trading history (automations, orders, fills, shorts) is de-identified — kept without your name or email (order numbers — the exchange's and ours — stay on those records) — and used to research and improve our strategies. Erase is refused while live trading is on, live positions or orders are open, or recent live activity is still settling (about 10 minutes), and while your subscription is active or can't be confirmed as cancelled — cancel it in Billing first, or contact support. Security and audit records are kept 90 days, then removed automatically, except records of live trading actions, which are kept permanently. Your data is stored in the United States.
Deal replay
Deal replay on the automation page is a forensic record of setting changes, fills, and execution steps. It is a replay of what was executed, not advice.
Activity tape
The activity tape on History is a record of what was executed, not advice. It lists fills, skips, pauses, and venue classes we recorded.
Support & bug reports
Report a bug or open a ticket at /desk/support. Every report goes straight to our support team; replies appear on your Support page. We reply within one business day. A viewer may open a ticket on their own account.
Keyboard and contrast
The desk works from the keyboard, with a skip-to-content link, a visible focus ring, and readable contrast.
Lot size
Paper fills round to the pair's lot size. Sizes below min qty or min notional are refused.
Client order id
Every paper fill carries a client order id. A replay of the same id is ignored. Start, trigger, and panic send a request clock. More than 30 seconds off is refused. We do not fix clocks.
Paper spread
Paper market fills use a 5 bps spread model. Limit fills stay at your limit price. This is not a venue quote and not a pick.
Connect an exchange
Make a trade-only API key on your exchange and paste it on Connect your exchange. It is stored encrypted. The Connect page shows LumenBotFi's server address, not yours. Paste it into the key's IP whitelist. We can't see that setting, so check the paste. On Coinbase, the step-by-step guide walks you through every click. We do not measure venue fees.
Paper depth
Paper maker placement checks a 0.05 BTC depth model. If your size does not fit, we skip. This is not a venue book and not a pick.
Paper balances
Paper balances are a desk snapshot, not a live venue wallet. Idle cash stays on the venue. Working paper orders are place-when-hit, not a live book. Paper needs no exchange key.
Password reset
Request a reset at /reset. We email you a reset link. A successful reset invalidates the old password and other sessions.
Session revoke
Signed-in desks list sessions and can revoke another device. A session ends after 8 hours without activity (operators and the master login: 12 hours) and after 30 days at most. Up to 5 devices stay signed in at once (operators and the master login: 24); a new sign-in beyond that signs out the oldest.
Venue halt
We can halt an exchange for safety. New starts on that exchange are refused until it resumes. A platform-wide halt blocks new automations.
Dust flatten
Leftover qty below this pair's min qty or min notional is flattened reduce-only. That is not a take-profit and not a pick. Start refuses a size that is already dust.
Pair halt
We can halt a pair for safety. Delisted or halted pairs do not get new entries; flatten is reduce-only.
Venue maintenance
Scheduled maintenance pauses new entries; it is not a halt and not advice.
Tape and clock chaos
We pause or refuse; we do not invent fills when the tape or clock is untrustworthy. Duplicate triggers are refused. Hook timestamps more than five minutes off are refused. We do not fix clocks silently.
Paper outbox
We record what we would send; we do not fire live callbacks yet. Rows are idempotent. Not advice.
Support view
Support staff can view your desk read-only to help you; they can't trade or change anything.
Paper demo sandbox
/demo opens a paper sandbox with sample paper automations. Live writes stay refused. We do not rank pairs.
Public last tape
Markets show the last price from the exchange's public tape, and paper automations use that price. We do not rank pairs.
Starting live
Your sign-in opens only your own desk. Live trading on your desk starts only when you press Start yourself, after your key is cleared for live.
Deal caps
Max 8 open deals per desk. A resting limit counts. Max 24 new deals per calendar day. Paper max notional is 0.25 BTC of your configured size (base plus the safety ladder). If you are at the cap, close an open deal before you start another.
Signed payload
Headers: X-LBF-Timestamp (unix seconds) and X-LBF-Signature (hex HMAC-SHA256 of timestamp + "." + raw body). botId and elected are the API's field names: botId is your automation's id, and elected: true confirms the trigger is for settings you set.
{
"botId": "your automation's id",
"pair": "the pair you set",
"direction": "long or short",
"elected": true,
"nonce": "unique-once",
"source": "floor"
}This page does not rank markets or suggest pairs. Honesty is the product.
Paper demo · Support · Journal · Outbox · Terms · Risk & your data · Privacy · Magic link · Verify email · 2FA · Reset password