Skip to main content

Basic Information of the Interface

Base URLs​

  • USDT-M: https://fapi.xt.com (for USDT-margined futures)
  • Coin-M: https://dapi.xt.com (for Coin-margined futures)

Network Recommendation​

It is not recommended to access XT APIs via proxy due to high latency and poor stability.

Request Methods​

  • GET requests: Parameters should be passed in the QueryString.
  • POST requests: Parameters can be passed in the RequestBody or QueryString.
When parameters are in the QueryString​

Include the following header:

Content-Type: application/x-www-form-urlencoded
When parameters are in the RequestBody​

Include the following header:

Content-Type: application/json

API Categories​

XT API endpoints are divided into Public Interfaces and User Interfaces.

🟢 Public Interfaces​
  • No authentication required.
  • Parameters are placed in the QueryString.
  • Usually use the GET method.

Example:

curl -G "https://fapi.xt.com/future/market/v1/public/symbol/detail?symbol=btc_usdt"

or:

curl -G "https://fapi.xt.com/future/market/v1/public/symbol/detail" \
  -H "Content-Type: application/x-www-form-urlencoded" \
  -d "symbol=btc_usdt"
🔒 User Interfaces​
  • Require authentication via HTTP headers.
  • Along with QueryString or RequestBody parameters, the following four headers are required:
HeaderDescription
validate-appkeyUser API key
validate-timestampCurrent timestamp (in milliseconds)
validate-signatureRequest signature
Content-TypeRequest content type (application/json or application/x-www-form-urlencoded)

GET Example:

curl -G "https://fapi.xt.com/future/user/v1/compat/balance/list" \
  -H "validate-appkey: $APPKEY" \
  -H "validate-timestamp: $TIMESTAMP" \
  -H "validate-signature: $SIGNATURE" \
  -H "Content-Type: application/x-www-form-urlencoded" \
  -d "queryAccountId=1234567890"

POST Example:

curl -X POST "https://fapi.xt.com/future/user/v1/user/collection/add" \
  -H "validate-appkey: $APPKEY" \
  -H "validate-timestamp: $TIMESTAMP" \
  -H "validate-signature: $SIGNATURE" \
  -H "Content-Type: application/json" \
  -d '{"symbol":"btc_usdt"}'

Endpoints that do not require signature authentication will be explicitly indicated.

Authentication References​

Rate Limits​

  • Asset-related endpoints: Up to 3 requests per second.
  • Other endpoints: Up to 10 requests per second per user, and 1000 requests per minute per IP.

If the frequency limit is exceeded, the account will be locked for 10 minutes.