Advanced: Direct REST & WebSocket API

For custom code and low-level integrations that call RapidX directly, without the CLI or MCP layer.

Most participants should use the CLI or MCP — see 01-quickstart.md. This document is for cases where you need direct HTTP or WebSocket access: performance-critical bots, languages without Node.js, or custom tooling.

Official API docs: get-account-list

---

Authentication

Official docs →

Required Headers (REST)

REST Signature Algorithm

1. Sort request parameters alphabetically by key:
   sorted_payload = "key1=val1&key2=val2&..."

2. Append "&" + timestamp:
   payload = sorted_payload + "&" + timestamp
   (no parameters: payload = "&" + timestamp)

3. HMAC-SHA256 with your Secret Key, hex-encoded:
   signature = HMAC-SHA256(secret_key, payload).hexdigest()

Python example:

import hmac, hashlib, time

def sign(params: dict, secret_key: str):
    timestamp = str(int(time.time()))
    sorted_payload = "&".join(f"{k}={v}" for k, v in sorted(params.items()))
    payload = (sorted_payload + "&" if sorted_payload else "&") + timestamp
    sig = hmac.new(secret_key.encode(), payload.encode(), hashlib.sha256).hexdigest()
    return sig, timestamp

WebSocket Authentication Signature

Different from REST — used for the private WebSocket login:

message = timestamp + "GET" + "/users/self/verify"
sign = HMAC-SHA256(secret_key, message).hexdigest()

---

REST API Endpoints

Base URL: https://api.ltp-contest.com

Account & Assets

Orders

Place order fields:

Order states: NEW → OPEN → PARTIALLY_FILLED → FILLED / CANCELLED / REJECTED

Positions

Market Data (RapidX)

Rate Limits

REST Response Format

{
  "code": 200000,
  "message": "Success",
  "data": { ... }
}

code: 200000 = success. Any other value is an error. Error codes →

---

WebSocket

Private WebSocket (Trading + Account Events)

User Data Streams overview →

URL: wss://wss.ltp-contest.com/v1/private

Login:

{
  "action": "login",
  "args": {
    "apiKey": "YOUR_ACCESS_KEY",
    "timestamp": "1778140847",
    "sign": "..."
  }
}

Response:

{ "event": "login", "code": 0, "msg": "" }

Order actions:

{ "id": "p1", "action": "place_order",  "args": { ... } }
{ "id": "a1", "action": "replace_order","args": { "orderId": "...", "replacePrice": "64000" } }
{ "id": "c1", "action": "cancel_order", "args": { "orderId": "..." } }

Orders push channel — auto-subscribed after login. User data streams →

{
  "channel": "Orders",
  "data": {
    "orderId": "1234567890123456",
    "clientOrderId": "agent-001",
    "orderState": "FILLED",
    "executedQty": "0.001",
    "executedAvgPrice": "65000"
  }
}

Keepalive: send "ping" every 15 seconds; server replies "pong".

Market Data WebSocket

Market Data overview →

URL: wss://mds.ltp-contest.com/marketdata/v2/public

Append ?binary=false for plain-text JSON instead of GZIP frames.

Rate limits:

Limits are counted by trading pair — subscribing BBO + TICKER + TRADE for the same symbol counts as 1 pair.

Subscribe:

{
  "event": "subscribe",
  "arg": [
    { "channel": "BBO", "sym": "BINANCE_PERP_BTC_USDT" },
    { "channel": "TRADE", "sym": "BINANCE_PERP_BTC_USDT" }
  ]
}

Available channels:

Keepalive: send { "ping": <timestamp_ms> } every 20 seconds; server replies { "pong": <timestamp_ms> }.

For all News Feed APIs (REST + WebSocket), see News Feed.

---

Symbol Format

{EXCHANGE}_{TYPE}_{BASE}_{QUOTE}

Channels marked "Perpetual only" reject SPOT symbols with error 11100.

---

Common Error Codes

Full error code reference →

REST

Market Data WebSocket

---