How the Binance key is scoped
The connection is read-only. For futures, Binance grants history access to an HMAC key only when that key is IP-restricted, which cannot work from a hosted app. The product asks for an Ed25519 key and uses its private key as the secret. Order placement, transfers, and withdrawals stay off.