메뉴
HMAC SHA256 signed requests for Aster Futures API v1. X-MBX-APIKEY, timestamp, recvWindow, signature. Use when calling TRADE, USER_DATA, or USER_STREAM (/fapi/v1/ or v2/v4).
Codex 또는 Claude로 설치 이 Prompt를 복사해 Codex, Claude 또는 다른 어시스턴트에 붙여 넣으면 Skill 페이지를 검토하고 설치를 진행할 수 있습니다.
SOC 직업 분류 기준
Deposit funds to Aster from a wallet; private key from env. Use when the user wants to deposit to Aster or fund an Aster account.
Account, balances, user trades, spot–futures transfer, withdraw, API key for Aster Spot API v1. Use when reading/updating spot account or transferring. Signed; see aster-api-spot-auth-v1.
Account, balances, user trades, spot–futures transfer, withdraw, API key for Aster Spot Testnet API v3. Use when reading/updating spot testnet account or transferring. Signed; see aster-api-spot-auth-v3.
HMAC SHA256 signed requests for Aster Spot API v1 (main). Base sapi.asterdex.com, /api/v1/. Use when calling TRADE, USER_DATA, or USER_STREAM. Signed; algorithm same as aster-api-auth-v1.
EIP-712 signed requests for Aster Spot Testnet API v3. Base sapi.asterdex-testnet.com, /api/v3/. Use when calling TRADE, USER_DATA, USER_STREAM, or MARKET_DATA on spot testnet. Algorithm same as aster-api-auth-v3.
Error codes, rate limits, 429/418 handling for Aster Spot API v1. Use when handling spot API errors or building rate-aware clients.
| name | aster-api-auth-v1 |
| description | HMAC SHA256 signed requests for Aster Futures API v1. X-MBX-APIKEY, timestamp, recvWindow, signature. Use when calling TRADE, USER_DATA, or USER_STREAM (/fapi/v1/ or v2/v4). |
Base: https://fapi.asterdex.com. API key + secret case sensitive. Signed: send timestamp, signature; optional recvWindow (default 5000 ms, keep ≤ 5000).
| Param | Description |
|---|---|
| X-MBX-APIKEY | API key (header) |
| timestamp | Current time, ms |
| recvWindow | Request valid this long after timestamp |
| signature | HMAC SHA256(totalParams, secretKey), hex |
Signature: (1) totalParams = query + body (no & between; GET = query only; POST/PUT/DELETE = query + body as sent). (2) HMAC SHA256(secretKey, totalParams) → hex. (3) Add signature to query or body (last param); header X-MBX-APIKEY. Signature not case sensitive.
Timing: Server accepts if timestamp < serverTime+1000 and serverTime - timestamp <= recvWindow. Use GET /fapi/v1/time if clock skew. Security: Env vars for key/secret; keys can be restricted (TRADE-only etc.).
Payload shapes: reference.md.
