Authentication

Authentication

TradeLayer uses API keys with HMAC-SHA256 signatures. All authenticated endpoints require specific headers.

Required Headers

1TL-API-KEY: <your_api_key>
2TL-API-SIGN: <signature>
3TL-API-TS: <timestamp_in_ms>
4Content-Type: application/json

1timestamp + HTTP_METHOD + request_path + request_body

Example

String to sign:

11700483073000POST/api/v1/orders{"symbol":"BTCUSDT","side":"BUY","type":"MARKET","size":0.01}

Signature (hex):

1TL-API-SIGN: 09b3f4f9a1c2...

GET Requests

All GET requests with no body use an empty string forrequest_body.

1""