API withdrawals to a third party

I am thinking of making something which would allow people to make healthy profits regularly, and I was considering payment would be using the binance withdrawal api function, obviously amount of payment would be detailed before they gave their api keys, and no more than as detailed would be taken out.

My only question is to the wider community what sort of reassurance would be needed for you if you wanted to use the product to tick the box and give your api keys?

My only thought would be some sort of white paper or terms and conditions or legal thing, but im not sure is there anything more which would be needed to reassure the user that it isnt a scam and not someone trying to drain their funds.