De cero a primera transacción en 5 minutos. Sandbox gratis sin tarjeta de crédito.
https://sandbox.futurebdetbank.com · synthetic data + test tokens. Idéntica API surface a producción.BDET API soporta múltiples métodos de autenticación. HMAC-SHA256 + API Key es el método recomendado para production.
Cada request firmas con HMAC-SHA256 del payload usando tu API secret. Protege contra MITM y replay attacks.
Flow: Authorization Code con PKCE. Scopes granulares: read, trade, withdraw, settle, admin.
Ledger Enterprise + biometric. Required para treasury, governance overrides, emergency lockdown.
SDKs oficiales en 5 lenguajes. Type-safe, retry-aware, auth-handled.
Real-time data via WebSocket. Sub-100ms latency. Unlimited concurrent subscriptions (paid tier).
trades:<PAIR> — every trade en ese pairorderbook:<PAIR> — orderbook updatesticker:<PAIR> o ticker:all — price tickscandles:<PAIR>:<INTERVAL> — 1m, 5m, 15m, 1h, 4h, 1daccount:balance — balance changes (auth required)account:orders — your order updates (auth required)mining:hashrate — network hashratesettlement:status — settlement lifecycle events (auth required)chain:blocks — MameyNode new blocks (40ms cadence)Server-to-server event notifications. Retry 3x con backoff. HMAC-SHA256 signature en cada request.
trade.executed — order filledtrade.canceled — order canceledsettlement.initiated / settlement.complete / settlement.failedsblc.received / sblc.tokenized / sblc.drawnwallet.deposit / wallet.withdrawkyc.approved / kyc.rejectedbalance.changedstaking.rewardgovernance.proposal_created / governance.proposal_passedBDET API usa códigos HTTP estándar + códigos internos en el body. Responses siempre JSON.
| HTTP | Code | Message | Cause / Fix |
|---|---|---|---|
| 400 | INVALID_PAIR | Pair not found | Use valid pair from /api/v1/pairs |
| 400 | INVALID_AMOUNT | Amount below min or above max | Check pair min_order/max_order |
| 400 | INSUFFICIENT_BALANCE | Wallet balance < amount | Deposit more funds |
| 401 | UNAUTHORIZED | Missing or invalid API key | Check X-API-Key header |
| 401 | INVALID_SIGNATURE | HMAC signature mismatch | Re-sign con secret correcto |
| 403 | PERMISSION_DENIED | API key sin permission | Generate key con required scope |
| 403 | IP_NOT_WHITELISTED | IP no en whitelist | Add IP en /api/v1/auth/keys |
| 403 | OFAC_HIT | Sanctions hit detected | Contact [email protected] |
| 403 | KYC_REQUIRED | KYC tier insufficient | Complete KYC en /api/v1/compliance/kyc |
| 404 | NOT_FOUND | Resource not found | Check resource ID |
| 409 | ORDER_NOT_CANCELABLE | Order already filled | Check order status first |
| 429 | RATE_LIMIT_EXCEEDED | Too many requests | Backoff: see X-RateLimit-Reset header |
| 500 | INTERNAL_ERROR | Server error | Retry con backoff. Si persists, contact support |
| 503 | MAINTENANCE | Scheduled maintenance | Status page: status.futurebdetbank.com |
Per-key rate limits. Headers en cada response: X-RateLimit-Limit, X-RateLimit-Remaining, X-RateLimit-Reset.
| Tier | REST (req/s) | WebSocket subs | Burst | Daily quota |
|---|---|---|---|---|
| Public (unauth) | 100 | 20 | 200 | 1M req |
| Authenticated | 1,000 | 100 | 2,000 | 10M req |
| Partner Gold | 5,000 | 500 | 10,000 | 100M req |
| Partner Platinum | 10,000 | Unlimited | 30,000 | Unlimited |
| Enterprise | Custom | Custom | Custom | Negotiable |
X-RateLimit-Reset segundos. Implementa exponential backoff con jitter para retries.Cursor-based pagination. Más eficiente que offset para datasets grandes.
/api/exchange/* moved to /api/v1/exchange/* (versioned)?include_tribal=false para v5 behavior.{channel, data} instead of flat {...}/api/auth/login → use /api/v1/auth/login