Steam hides the trade URL in roughly the worst place possible. It's three menus deep, on a page called "Who can send me Trade Offers?" β phrasing that sounds like a privacy setting and looks like a privacy setting, which is why half the people who end up reading articles like this one have already been to the right page and missed it.
If you just want the steps: open Steam, click your username, then Inventory, then Trade Offers in the upper right, then the small "Who can send me Trade Offers?" link. Scroll to the bottom, there's a box labeled Third-Party Sites with a long URL in it. Copy it. Paste it on SkinsWave. Thirty seconds.
If you've never done this before, or something's gone wrong pasting it somewhere, the rest of this is for you.
What the URL actually does
A trade URL looks like this: https://steamcommunity.com/tradeoffer/new/?partner=12345678&token=AbCdEfGh
Two parts matter. The partner is your Steam ID β a number Steam derives from your account. The token is a random string Steam generates so that only people you've handed the URL to can send you trade offers, even though your Steam ID itself isn't exactly secret.
When SkinsWave wants to send you a skin you bought, our trade bot needs that URL β it's how the bot knows which account to send the offer to. Without it, we can have your money, you can have your purchase queued up, and the trade physically can't happen.
What the URL doesn't do β and this is the part that trips up everyone trading for the first time β is give anyone access to your account. It doesn't let them log in. It doesn't let them take items. It doesn't even complete a trade without you tapping Confirm in the Steam mobile app. The URL is permission to send you an offer, nothing more. Pasting it on SkinsWave is roughly as risky as sharing your Discord username. The marketplace can offer you a trade; you decide whether to accept it.
Finding it on desktop
Open Steam, or go to steamcommunity.com in a browser β same path either way. Click your username in the top-right and pick Inventory from the dropdown. You'll see a wall of every game you own and the items in each one, which is overwhelming and not what you're looking for. The button you need is small, in the top-right corner of the inventory page, labeled Trade Offers.
Click that, and you land on a page showing any pending trades you have, which is probably none if you're new. Top-right of that page, there's another small link: "Who can send me Trade Offers?" Easy to miss because Steam styled it like ordinary text. Click it.
This is the trade privacy page. Ignore most of it β the radio buttons are general privacy preferences. What you want is at the very bottom, in a section called Third-Party Sites. Inside there's a box with your trade URL in it. Click once to auto-select, Ctrl+C (or Cmd+C on Mac), and you've got it.
Finding it on mobile
Same idea, slightly different navigation. Open the Steam mobile app, tap the menu icon (three horizontal lines, top-left), tap your username at the top of the slide-out menu, then Inventory β Trade Offers β "Who can send me Trade Offers?" Scroll to the bottom, copy the URL from the Third-Party Sites box. The mobile copy button works the same as desktop.
Pasting it into SkinsWave
Log in to SkinsWave, find the Trade URL field β it's in your profile settings, and we prompt you for it the first time you try to trade if you haven't set it. Paste the full URL. Don't shorten or trim anything β the token= at the end is the part Steam validates against, so a partial URL gets rejected.
If SkinsWave throws an error when you save, the URL is either wrong or stale. The most common cause is that you regenerated the token at some point and copied an old version. Re-copy the current URL from Steam (it'll have a fresh token) and paste it again.
When things go wrong
A few specific errors come up repeatedly, and each has a specific cause.
"Invalid trade URL" or "Trade URL is incorrect" usually means you pasted a partial URL or grabbed extra characters along with it. The full URL contains both partner= and token= β if either is missing, Steam can't validate the link. Re-copy from Steam, making sure you got the whole string.
"Trade URL is no longer valid" means the token has been regenerated since you last copied. This happens when someone (you, or someone with access to your account) clicked Create New URL on Steam, which invalidates the previous one. Go back, copy the new URL, paste again.
"Inventory is private" is a different problem entirely. Steam needs your inventory set to public for trades to work, and the same Steam page where you find the trade URL has privacy controls near the top. Set Inventory to Public. While you're there, Game details should also be Public β otherwise Steam can't verify which CS2 items you own, even if it can see your inventory exists.
"Cannot trade β account has trade restrictions" almost always means you have an active Steam trade hold. Usually because you recently enabled the Mobile Authenticator, which puts a one-time 7-day cooldown on your account. There's no shortcut; the hold clears on its own. See Steam trade hold explained for the full picture.
Resetting the URL if it leaks
The trade URL by itself can't be used to take your items, but a leaked URL means scammers will spam you with deceptive trade offers. Worth regenerating if that's happening. On the same "Who can send me Trade Offers?" page, below the URL box, there's a Create New URL button. Click it, confirm, and Steam generates a new token. The old URL stops working immediately β anyone who saved it can no longer reach you.
The downside: every third-party site you use will reject the old URL and need the new one pasted in. So don't regenerate casually, just when you have a real reason.
What you actually shouldn't do with the URL
Posting your trade URL in random Discord servers or comment sections will get you spammed with deceptive trades β that's a near-certainty, not a maybe. So will leaving it visible on public-facing profiles or forum posts. The URL on a reputable marketplace is fine; the URL on a random Reddit post will get you scammed within a day.
DMs from "Steam Support" asking for your trade URL are always fake. Steam Support doesn't message users on Steam. They respond to tickets at help.steampowered.com and nowhere else.
A few questions that come up
People ask whether sharing the URL lets someone steal their skins. It doesn't β it only allows incoming offers, which you still need to approve in your Mobile Authenticator. People ask whether they can have multiple trade URLs. They can't; each Steam account has exactly one active at a time, and regenerating destroys the old one. People also ask why their URL works on one site but not another, and the answer is almost always a stale token from a regeneration they forgot about.
Whether you need a phone number to get a trade URL: technically no, but you do need one for the Mobile Authenticator, and you do need the Mobile Authenticator to accept trades without a 15-day hold. So practically, yes.
Ready to start? Connect your trade URL on SkinsWave and you'll be set up in a minute.