APIs & Pro Access

Professional access requires predictable reliability and explicit rules.

Purpose

API access must:

• Allow automation safely

• Protect users from key compromise

• Protect the exchange from abuse and instability

• Provide clear rate limiting, error handling, and retry logic

Access Model Principles

• API keys have scopes (read-only vs trading vs withdrawal)

• IP allowlisting is recommended for trading keys

• Key creation and changes are treated as security events

• Suspicious API activity triggers restrictions or holds

Documentation Commitments

WorldX API docs must include:

• Authentication model and signing method

• Rate limits and burst behavior

• Error code taxonomy

• Idempotency and safe retry patterns

• Expected latency bands (where safe)

• Test environment rules (if provided)