This screams scam.
One should never trust a 3rd party their api key to give full control regarding trading away.
The fact that the person providing this 'service' is not reputable at all, makes it even more risky.
For anyone considering this:
OP can steal your funds by pumping a shitcoin selling his own stack to you. You will be left with a worthless coin worth a few dollars, while he will own all of your BTC.
Be cautious.
Here we go again.
people give api key to portfolio management apps all the time

My bot only trades XBT market, if the user sees a shitcoin trade then something is very wrong.
Also why wouldn't i be reputable at all? do i have negative feedbacks?
Is that hard to understand that if my payment is only on profits i have no other interest but to grow the client's capital?