Qfex · Authentication Profile

Qfex Authentication

Authentication

Qfex secures its APIs with apiKey across 4 declared security schemes, as derived from its OpenAPI definitions.

CompanyTradingExchangePerpetual FuturesMarket DataWebSocketFXCommoditiesEquitiesFinancial-ServicesCLIFintechReal-Time

Methods: apiKey Schemes: 4 OAuth flows: API key in: header

Security Schemes

HMACSignature apiKey

· in: header (x-qfex-hmac-signature)

Nonce apiKey

· in: header (x-qfex-nonce)

PublicKey apiKey

· in: header (x-qfex-public-key)

Timestamp apiKey

· in: header (x-qfex-timestamp)

Source

Authentication Profile

generated: '2026-07-20'
method: derived
source: openapi/qfex-openapi-original.yml
summary:
  types:
  - apiKey
  api_key_in:
  - header
schemes:
- name: HMACSignature
  type: apiKey
  in: header
  parameter: x-qfex-hmac-signature
  description: HMAC-SHA256 signature (hex-encoded).
  sources:
  - openapi/qfex-openapi-original.yml
- name: Nonce
  type: apiKey
  in: header
  parameter: x-qfex-nonce
  description: Unique request nonce (hex encoded, max 100 characters).
  sources:
  - openapi/qfex-openapi-original.yml
- name: PublicKey
  type: apiKey
  in: header
  parameter: x-qfex-public-key
  description: |-
    QFEX API Authentication requires these headers:

    - **x-qfex-public-key**: Your public API key
    - **x-qfex-hmac-signature**: HMAC signature of the request (hex encoded)
    - **x-qfex-nonce**: Unique nonce for the request (hex encoded, max 100 characters)
    - **x-qfex-timestamp**: Unix timestamp of the request

    These four are required. Optionally send **x-qfex-requested-account-id** (UUID) to act as a sub
  sources:
  - openapi/qfex-openapi-original.yml
- name: Timestamp
  type: apiKey
  in: header
  parameter: x-qfex-timestamp
  description: Unix timestamp (seconds since epoch).
  sources:
  - openapi/qfex-openapi-original.yml

Work with this as data

Every security artifact here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for security posture

4 MCP tools reach this

find_securityBrowse and filter every security artifact in the catalog.
apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
resolveTurn a domain, URL or GitHub org into the provider it belongs to.
find_cohortsEvery scored population of providers in the catalog.

All 92 tools →

Call it yourself

curl for this page

This security artifact

curl "https://apis.io/api/v1/security/qfex-authentication"

All security posture

curl "https://apis.io/api/v1/security?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no email required.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.