API

Create a key under API Management. All requests are signed; the secret never travels over the wire.

X-VX-KEY: vx_...
X-VX-TS: <unix ms, within 30s of server time>
X-VX-SIG: hex(HMAC_SHA256(secret, TS + METHOD + PATH_WITH_QUERY + BODY))

GET /api/v1/account	Internal account records (needs `read`); these are not custody balances.
POST /api/v1/orders	Unavailable until an execution provider is integrated. The API rejects the request without placing an order.
GET /api/markets, /api/markets/SYMBOL/book	Public external market data, no key required.

Read-only API key support is available. Order creation remains unavailable until execution routing and settlement are connected.