Is there somehow a way to identify if a given combination of API key and secret has the permission to execute spot trades? Sure, I could just try to place a spot order, however this feels dirty and would not work if the account has no assets.
Hi. To know if your API key and secret has the permission or not, you should check the web site or mobile app > API management.
Regarding the verification approach, I suggest you call another API such as GET /api/v3/account ( https://binance-docs.github.io/apidocs/spot/en/#account-information-user_data ). By changing to test with this endpoint, you can also know how much assets are in your account without input any parameters in addition to timestamp and signature.
https://binance-docs.github.io/apidocs/spot/en/#get-api-key-permission-user_data
This is the right endpoint