Skip to main content
Each endpoint is labeled with an auth type. SIGNED means the endpoint requires a valid signature to access. KEYED means the endpoint only requires an API KEY in the request header.

​
Auth Types

  • NONE : Public endpoint, accessible by anyone
  • KEYED : Requires a valid X-API-KEY
  • SIGNED : Requires a valid X-API-KEY and signature X-API-SIGN

​
1. Setting Request Parameters

Header Key Settings
  • X-API-KEY (Your API Access KEY)
  • X-API-SIGN (HmacSHA256 signature)
  • X-API-TIMESTAMP (Current timestamp of the request, in milliseconds)
// X-API-TIMESTAMP Generation

// Java
System.currentTimeMillis();

// Python
int(time.time() * 1000)

// Golang
time.Now().UnixNano() / int64(time.Millisecond)

// Nodejs & TypeScript
Date.now();

// Javascript
Date.now();

// PHP
round(microtime(true) * 1000)

// C#
DateTimeOffset.UtcNow.ToUnixTimeMilliseconds()
Body Parameter Settings
  • For GET/DELETE requests, query string is in form format: symbol=BMX&side=BUY
  • For POST/PUT requests, query string is in json format: {"symbol":"BMX","side":"BUY"}

​
2. Example

  • Request endpoint: /account/v1/transfer-contract (SIGNED)
  • Request method: POST
  • Assume current timestamp: timestamp= 1589793796145
  • request body={"currency":"USDT","amount":"10","transferType":"spot_to_contract"}
Then set as follows:
  • X-API-TIMESTAMP= 1589793796145
  • X-API-KEY= Your_api_access_key
  • X-API-SIGN= hmac_sha256( Your_api_secret_key , X-API-TIMESTAMP + ’#’ + Your_api_memo + ’#’ + '{"currency":"USDT","amount":"10","transferType":"spot_to_contract"}')
Assume the API credentials are as follows:
  • accessKey =80618e45710812162b04892c7ee5ead4a3cc3e56
  • secretKey =6c6c98544461bbe71db2bca4c6d7fd0021e0ba9efc215f9c6ad41852df9d9df9
  • memo =test001
The following is a complete request 
# Shell Complete Request Example

echo -n '1589793796145#test001#{"currency":"USDT","amount":"10","transferType":"spot_to_contract"}' \
  | openssl dgst -sha256 -hmac "6c6c98544461bbe71db2bca4c6d7fd0021e0ba9efc215f9c6ad41852df9d9df9"
# (stdin)= bbd57e119c53e7cd28c5097f596822173fbf883c94c8bcc9a61ec2da9e143778

curl --location --request POST 'https://cloud-api.wooxpro.com/account/v1/transfer-contract' \
  --header 'Content-Type: application/json' \
  --header 'X-API-KEY: 80618e45710812162b04892c7ee5ead4a3cc3e56' \
  --header 'X-API-SIGN: bbd57e119c53e7cd28c5097f596822173fbf883c94c8bcc9a61ec2da9e143778' \
  --header 'X-API-TIMESTAMP: 1589793796145' \
  --data '{"currency":"USDT","amount":"10","transferType":"spot_to_contract"}'