Where you choose to grant access to Spot, Futures... add a question mark and write that you need to remove all checkboxes to provide the API with read-only access. Otherwise, it's not clear.