All you need to do is give your bot an API account. The bot is not allowed to withdraw from your account and can only trade. You do not need to give your password to the bot, so you are safe in terms of security.