API

Market data

Public REST endpoints for tickers, order book depth, recent trades and candlesticks, with no key required. WebSocket streams push depth and trade updates with sub-100ms latency. Rate limits are generous on public data and shared per IP.

Trading and account

Signed endpoints for placing and cancelling orders, querying balances, and managing positions. Requests are signed with HMAC-SHA256 over the query string plus a timestamp; a 401 almost always means your server clock has drifted rather than that your key is wrong.

Copy endpoints

Read your follow list, provider statistics, per-trade copy history with slippage attribution, and adjust allocations and risk controls programmatically. Useful for anyone running their own analytics over a multi-provider book, or automating a rebalance.

Provider endpoints

Strategy providers can submit orders through the API like any other trader; copying happens server-side and needs no special integration. Provider accounts also get a stream of aggregate copier metrics.

Keys and permissions

Create keys scoped to read-only, trade, or withdraw, and restrict each to a list of IP addresses. Never grant withdraw permission to a key used by third-party software — there is no legitimate reason for an analytics tool or a bot to hold it.

Limits

1,200 requests per minute per key on REST and 10 messages per second on WebSocket. Exceeding either returns HTTP 429 with a retry-after header. Higher limits are available for institutional accounts by arrangement.