Is it safe to provide CryptFolio a Kraken API key?
You need to make sure that the API key only has the Query Funds permission. This should
mean that the API key can only be used to retrieve account status, and it should not be possible
to perform trades or withdraw funds using that key.
Your Kraken API keys will never be displayed on the CryptFolio site, even if you have logged in.
Through the Kraken interface you can revoke an API key's access at any time by
going to your API settings page and clicking on the Delete button.