Authorizations
HMAC-SHA256 signature (hex-encoded).
Unique request nonce (hex encoded, max 100 characters).
QFEX API Authentication requires four headers:
- x-qfex-public-key: Your public API key
- x-qfex-hmac-signature: HMAC signature of the request (hex encoded)
- x-qfex-nonce: Unique nonce for the request (hex encoded, max 100 characters)
- x-qfex-timestamp: Unix timestamp of the request
All four headers are required for authentication.
Signature Generation:
- Generate a cryptographically secure random nonce (hex encoded, max 100 characters) and capture the current Unix timestamp.
- Build the string
${nonce}:${unix_ts}and compute an HMAC-SHA256 using your secret key. - Hex-encode the HMAC result to get the signature.
- Send the auth payload with all four headers. The nonce must be unique within a 15 minute window.
Important: The signature itself must be hex-encoded before being sent in the x-qfex-hmac-signature header.
Unix timestamp (seconds since epoch).
Query Parameters
Required range:
1 <= x <= 2160