API Terms

Users are responsible for creating, storing, rotating, permissioning, and deleting API keys securely.

API keys should use least-privilege scopes, IP restrictions where available, and should never be embedded in public code or shared with unauthorized parties.

CryptoBit may apply API rate limits, order throttles, connection limits, and abuse prevention controls.

Users may not use APIs for denial-of-service activity, manipulative trading, credential stuffing, scraping beyond permitted use, or attempts to bypass controls.

Market data may be used only as permitted by applicable terms, data provider rules, and law. Redistribution may require separate permission.

CryptoBit may modify, deprecate, suspend, or remove API endpoints, parameters, limits, or data fields with or without notice where necessary.

Users must monitor API activity, secure infrastructure, validate callbacks, protect secrets, and promptly revoke compromised keys.

CryptoBit may revoke API access to protect users, platform integrity, legal compliance, or market stability.