> For the complete documentation index, see [llms.txt](https://worldxc.gitbook.io/docs/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://worldxc.gitbook.io/docs/product/apis-and-pro-access.md).

# APIs & Pro Access

Professional access requires predictable reliability and explicit rules.

#### Purpose

API access must:

* Allow automation safely
* Protect users from key compromise
* Protect the exchange from abuse and instability
* Provide clear rate limiting, error handling, and retry logic

#### Access Model Principles

* API keys have scopes (read-only vs trading vs withdrawal)
* IP allowlisting is recommended for trading keys
* Key creation and changes are treated as security events
* Suspicious API activity triggers restrictions or holds

#### Documentation Commitments

WorldX API docs must include:

* Authentication model and signing method
* Rate limits and burst behavior
* Error code taxonomy
* Idempotency and safe retry patterns
* Expected latency bands (where safe)
* Test environment rules (if provided)