Looks good indeed but would be interested to know how do you secure API keys.
Even though read only, trades can be initiated which could be really annoying in case of a breach.
For most of us this is a critical point when using a third part software to manage live portfolios.