CEX.IO · Authentication Profile

Cex Io Authentication

Authentication

CEX.IO declares 2 security scheme(s) across its OpenAPI definitions.

CompanyCryptocurrencyExchangeTradingMarket DataWebSocketFinancial Services
Methods: Schemes: 2 OAuth flows: API key in:

Security Schemes

XAggrSignedRequest apiKey
· in: header ()
LegacyKeySignatureNonce apiKey
· in: body ()

Source

Authentication Profile

Raw ↑ 
generated: '2026-10-13'
method: searched
source: https://trade.cex.io/docs/
docs: https://trade.cex.io/docs/
summary: CEX.IO Spot Trading private REST calls are signed with an API key and secret using HMAC-SHA256 headers; public calls need no authentication. The legacy Exchange API at cex.io/api uses its own API key, signature and nonce scheme documented at docs.cex.io.
schemes:
- name: XAggrSignedRequest
  type: apiKey
  in: header
  headers: [X-AGGR-KEY, X-AGGR-TIMESTAMP, X-AGGR-SIGNATURE]
  description: Per the docs code example, signature = base64(HMAC-SHA256(apiSecret, action + timestamp + JSON body)), sent with the API key and UNIX timestamp headers to https://trade.cex.io/api/spot/rest/{action}.
  sources: [https://trade.cex.io/docs/]
- name: LegacyKeySignatureNonce
  type: apiKey
  in: body
  description: Legacy Exchange API private methods carry key, signature and nonce (docs.cex.io lists APIkey, nonce and signature request objects).
  sources: [https://docs.cex.io/]

Work with this as data

Every security artifact here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for security posture

4 MCP tools reach this
  • find_securityBrowse and filter every security artifact in the catalog.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This security artifact 
curl "https://apis.io/api/v1/security/cex-io-authentication"
All security posture 
curl "https://apis.io/api/v1/security?limit=25"

Calls without X-API-Key need no key. Calls with it need a paid plan — get a key.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.