API Reference

Authentication

Create an API key under Account → API Keys. You receive a key id and a secret (shown once). Sign every authenticated request with three headers:

Signing example (Node.js)

const crypto = require("crypto");
const apiKey = "YOUR_KEY_ID";
const secret = "YOUR_SECRET";
const nonce  = Date.now().toString();
const signature = crypto.createHmac("sha256", secret)
                        .update(nonce + apiKey)
                        .digest("hex");

await fetch("https://1bit.trade/api/v2/account/balances", {
  headers: {
    "X-Auth-Apikey": apiKey,
    "X-Auth-Nonce": nonce,
    "X-Auth-Signature": signature,
  },
});

Rate limit: 240 requests/min per IP on authenticated routes. Withdrawals require 2FA to be enabled on the account.

Public — Market data

No authentication required. Live markets, tickers, order book, trades and candles. CoinGecko-format endpoints are also provided for exchange-listing integrations.

Trading

Requires authentication. Place, list and cancel orders; view your fills.

Account & Wallet

Requires authentication. Balances, deposit addresses and withdrawals.

WebSocket — live data

Stream the order book, trades and tickers in real time. Connect and subscribe by repeating the stream query parameter; messages arrive as JSON keyed by stream name.

Subscribe example (browser)

const ws = new WebSocket(
  "wss://1bit.trade/api/v2/ranger?stream=btcusdt.ob&stream=btcusdt.trades&stream=tickers"
);
ws.onmessage = (e) => {
  const msg = JSON.parse(e.data);
  if (msg["btcusdt.ob"]) { /* order book snapshot/update */ }
  if (msg["btcusdt.trades"]) { /* array of trades */ }
  if (msg["tickers"]) { /* array of tickers */ }
};

For private streams (order, balance) authenticate the upgrade request with the same X-Auth-* headers as REST.