菜单
HMAC SHA256 signed requests for Aster Futures API v1. X-MBX-APIKEY, timestamp, recvWindow, signature. Use when calling TRADE, USER_DATA, or USER_STREAM (/fapi/v1/ or v2/v4).
用 Codex 或 Claude 帮你安装 复制这段 Prompt，粘贴到 Codex、Claude 或其他助手里，让它检查 Skill 页面并帮你完成安装。
基于 SOC 职业分类
Deposit funds to Aster from a wallet; private key from env. Use when the user wants to deposit to Aster or fund an Aster account.
Account, balances, user trades, spot–futures transfer, withdraw, API key for Aster Spot API v1. Use when reading/updating spot account or transferring. Signed; see aster-api-spot-auth-v1.
Account, balances, user trades, spot–futures transfer, withdraw, API key for Aster Spot Testnet API v3. Use when reading/updating spot testnet account or transferring. Signed; see aster-api-spot-auth-v3.
HMAC SHA256 signed requests for Aster Spot API v1 (main). Base sapi.asterdex.com, /api/v1/. Use when calling TRADE, USER_DATA, or USER_STREAM. Signed; algorithm same as aster-api-auth-v1.
EIP-712 signed requests for Aster Spot Testnet API v3. Base sapi.asterdex-testnet.com, /api/v3/. Use when calling TRADE, USER_DATA, USER_STREAM, or MARKET_DATA on spot testnet. Algorithm same as aster-api-auth-v3.
Error codes, rate limits, 429/418 handling for Aster Spot API v1. Use when handling spot API errors or building rate-aware clients.
| name | aster-api-auth-v1 |
| description | HMAC SHA256 signed requests for Aster Futures API v1. X-MBX-APIKEY, timestamp, recvWindow, signature. Use when calling TRADE, USER_DATA, or USER_STREAM (/fapi/v1/ or v2/v4). |
Base: https://fapi.asterdex.com. API key + secret case sensitive. Signed: send timestamp, signature; optional recvWindow (default 5000 ms, keep ≤ 5000).
| Param | Description |
|---|---|
| X-MBX-APIKEY | API key (header) |
| timestamp | Current time, ms |
| recvWindow | Request valid this long after timestamp |
| signature | HMAC SHA256(totalParams, secretKey), hex |
Signature: (1) totalParams = query + body (no & between; GET = query only; POST/PUT/DELETE = query + body as sent). (2) HMAC SHA256(secretKey, totalParams) → hex. (3) Add signature to query or body (last param); header X-MBX-APIKEY. Signature not case sensitive.
Timing: Server accepts if timestamp < serverTime+1000 and serverTime - timestamp <= recvWindow. Use GET /fapi/v1/time if clock skew. Security: Env vars for key/secret; keys can be restricted (TRADE-only etc.).
Payload shapes: reference.md.
