Authentication Methods
JWT Token
Used for API key management endpoints only.- Obtained from web login
- Short-lived session token
- Required for creating, listing, and revoking API keys
API Key Signature
Used for all trading and data endpoints.- Long-lived credentials for programmatic access
- Sign requests with your API key secret
- Required for trading, portfolio, instruments, and WebSocket endpoints
Getting Started
- Log into the web portal to obtain a JWT token
- Generate an API key using the JWT token
- Use the API key to sign all subsequent trading/data requests
API key generation and management can only be done through authenticated web sessions for security reasons.
API Key Security
- Store API keys securely
- Never commit keys to version control
- Rotate keys regularly
- Revoke compromised keys immediately
- Use separate keys for different trading strategies