Seeds API v1

• No deposits. Balances live in your own wallet. The /account response returns your addresses and your live trading authorizations instead of exchange credits.
• Authorizations gate trading. A bot can only trade assets you have authorized, up to the cap you set, until the expiry you chose. When the expiry hits, the delegated key is destroyed.
• API keys can never withdraw. There is no withdrawal endpoint. Scopes are read and trade only; withdrawals happen in the signed-in UI. A stolen key cannot move funds off-chain to an attacker.
• Fills settle on-chain. A match triggers a real transfer between the two wallets. /myTrades returns each settlement leg with its txid and confirmation count.
• Streams are SSE, not WebSocket. The edge runtime has no long-lived sockets. SSE gives you the same push semantics over plain HTTP.

Signed endpoints use HMAC-SHA256 exactly like Binance. Send your key ID in the X-SEEDS-APIKEY header, append timestamp (unix ms) and optionally recvWindow (default 5000ms, max 60000ms), then append signature as the last parameter.

The signed payload is the query string with signature removed, concatenated with the raw request body if there is one.

import crypto from "node:crypto";

const KEY = process.env.SEEDS_KEY;      // seeds_xxxxxxxx
const SECRET = process.env.SEEDS_SECRET;
const BASE = "https://seeds.honest.money";

function signed(path, params) {
  const qs = new URLSearchParams({ ...params, timestamp: Date.now() }).toString();
  const sig = crypto.createHmac("sha256", SECRET).update(qs).digest("hex");
  return `${BASE}${path}?${qs}&signature=${sig}`;
}

// Place an order
const res = await fetch(signed("/api/public/v1/order", {
  symbol: "TXCUSDC", side: "BUY", type: "LIMIT",
  timeInForce: "GTC", price: "0.25", quantity: "100",
}), { method: "POST", headers: { "X-SEEDS-APIKEY": KEY } });

console.log(await res.json());

Symbols are concatenated, Binance style: TXCUSDC, TXCTSD, LTCTSD. Underscore, slash and dash forms are accepted too. Fetch /exchangeInfo at startup for the live symbol list, tick size, lot size and minimum notional per market.

1200 request weight per key per minute, plus per-endpoint weights shown above. Exceeding it returns HTTP 429 with code -1003. Back off, don't hammer. Optional IP allowlists per key add a second layer of protection.

curl -N "https://seeds.honest.money/api/public/v1/stream?symbol=TXCUSDC&streams=ticker,depth,trade"

event: ticker
data: {"symbol":"TXCUSDC","lastPrice":"0.25000000", ...}

Connections close after 10 minutes; reconnect (EventSource does it automatically). Events: open, ticker, depth, trade, close, error.

Errors return a numeric code and message, so bots branch on the code, not the text.

{"code":-1022,"msg":"Signature for this request is not valid"}

-1003 rate limit exceeded      -1021 timestamp outside recvWindow
-1004 IP not in allowlist      -1022 bad signature
-1102 missing parameter        -1121 invalid symbol
-2010 order rejected           -2011 cancel rejected
-2013 no such order            -2015 invalid or disabled API key