{ "meta": { "attribution": "Anchor Terminal (https://www.anchorterminal.com)", "attributionRequired": true, "credit": "CC BY 4.0, credit Anchor Terminal and link the page or API address you took it from (https://www.anchorterminal.com/terms/#data)", "docs": "https://www.anchorterminal.com/docs/", "generatedAt": "2026-11-04", "license": "CC-BY-4.0", "method": "https://www.anchorterminal.com/benchmark/", "methodology": "0.7", "openapi": "https://www.anchorterminal.com/openapi.json", "preview": false, "run": "2026-10-01", "runLabel": "October 2026 research run", "terms": "https://www.anchorterminal.com/terms/#data" }, "tool": { "slug": "bitstamp", "name": "Bitstamp API", "vendor": "Bitstamp Ltd.", "vendorUrl": "https://www.bitstamp.net", "kind": "http-api", "category": "crypto-exchanges", "summary": "Bitstamp's HTTP API v2 for spot and derivatives trading, balances, deposits and withdrawals, with WebSocket and FIX feeds and a sandbox at sandbox.bitstamp.net. Bitstamp is a Robinhood company since June 2025.", "url": "https://www.anchorterminal.com/tools/bitstamp", "markdownUrl": "https://www.anchorterminal.com/tools/bitstamp.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/bitstamp.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/bitstamp.json", "dns": "bitstamp.grade.anchorterminal.com", "license": "Proprietary hosted API under Bitstamp's terms of use, which our reader couldn't load", "transports": [], "packages": [], "auth": "api-key", "authNotes": "API key and secret made in the Bitstamp account after a browser signup, sent as `X-Auth: BITSTAMP {key}` with an HMAC-SHA256 `X-Auth-Signature` over the verb, host, path, query, nonce, timestamp and body, a 36-character single-use nonce and a timestamp within 150 seconds. Keys carry per-endpoint permissions (error API0003 names a missing permission) and an IP allow-list (API0002), and `X-Auth-Subaccount-Id` targets a sub-account. `POST /api/v2/revoke_all_api_keys/` is a kill switch for every key. Responses carry an `X-Server-Auth-Signature` to verify (https://www.bitstamp.net/api/, checked 2026-11-03).", "pricing": "usage", "pricingNotes": "The API itself costs nothing. Trading fees are maker and taker by 30-day volume per the API's fees endpoints, but the fee schedule page at bitstamp.net/fee-schedule/ draws its table by script and loaded empty for our reader, so the rates are unchecked. Commercial use of exchange data needs a Data License Agreement through partners@bitstamp.net. The sandbox at sandbox.bitstamp.net needs no money (https://www.bitstamp.net/api/, checked 2026-11-03).", "priceSummary": "Pay per use", "where": "local", "x402": { "level": "no", "evidence": "No x402, MPP or L402 in the API documentation (checked 2026-11-03). Fees are taken from the account; onboarding is a browser signup.", "endpoints": [] }, "toolCount": null, "popularity": { "githubStars": null, "npmWeekly": null, "pypiWeekly": null, "asOf": "2026-11-03" }, "docsUrl": "https://www.bitstamp.net/api/", "capabilities": [ "exchange.market-data", "exchange.spot-trading", "exchange.derivatives", "exchange.balances", "exchange.transfers", "exchange.staking", "market.crypto" ], "tags": [ "official", "hosted", "api-key", "sandbox", "status-page", "usage-priced", "eu", "uk" ], "lastRelease": "2026-08-28", "graded": true, "anchor": { "graded": true, "score": 50.4, "grade": "D", "agentReady": false, "rank": 1002, "ranked": true, "rankOf": 1349, "categoryRank": 18, "methodology": "0.7", "run": "2026-10-01", "scores": { "ergonomics": 58, "maintenance": 28, "payments": 20, "reliability": 63, "schema": 51, "security": 60, "transparency": 53 }, "pending": [ "performance", "tasks" ], "breakdown": [ { "key": "reliability", "name": "Reliability", "weight": 16, "effectiveWeight": 20, "score": 63, "points": 12.6, "reason": "Read with the hosted lines on the HTTP API v2 at www.bitstamp.net/api/v2/. status.bitstamp.net is a Statuspage site with component history (20). Its feed for 5 August to 3 November 2026 has 17 entries, among them withdrawals failing on 14 networks for about 3 hours on 21 August, database maintenance with login failures and intermittent trading interruptions for about 1 hour 44 minutes on 23 September, a 39-minute halt of all markets on 5 August, and delistings and single-asset suspensions. One major (10). Rate limits with numbers, 400 a second and 10,000 per 10 minutes (15). Limit errors are named (400.002, 400.067, 400.068) but there is no Retry-After or backoff guidance, duplicate client order ids are allowed, and the only retry guidance is to check the order after a 500.016 timeout (8 of 15). No SLA found (0). Generally available (10). 20 + 10 + 15 + 8 + 0 + 10 = 63.", "checked": "2026-11-03" }, { "key": "performance", "name": "Performance", "weight": 10, "effectiveWeight": 0, "pending": true, "points": 0, "reason": "Pending. Latency is measured per call by our probes, which haven't run yet, so this run doesn't score it. Its weight is shared across the assessed categories until the first probe window closes." }, { "key": "schema", "name": "Schema \u0026 documentation", "weight": 13, "effectiveWeight": 16.25, "score": 51, "points": 8.29, "reason": "No OpenAPI or other machine-readable contract was found on the API page or elsewhere (0). No llms.txt or Markdown docs (0). The single documentation page describes each endpoint's purpose and parameters, with notes such as the 10-second cache on open orders and the Travel Rule fields, but not when to use one endpoint over another (14 of 20). Parameters are typed with enumerations (margin mode CROSS or ISOLATED, margin multiplier 1 to 25, order types) and required fields marked (11 of 15). Signing examples in Python, Java and C++, and error families with numbered codes and explanations (13 of 15). Version v2 in the path and header, a dated changelog from 7 April 2023 to 28 August 2026, and a 410.001 code for deprecated endpoints, with no stated notice period (13 of 15). 0 + 0 + 14 + 11 + 13 + 13 = 51.", "checked": "2026-11-03" }, { "key": "ergonomics", "name": "Agent ergonomics", "weight": 13, "effectiveWeight": 16.25, "score": 58, "points": 9.43, "reason": "Graded on the REST API. Order book grouping and transaction time windows size responses, but there is no field selection and no MCP surface (15 of 25). Offset, limit, since and sort on transaction history, `until_id` windows on order-data replay (14 of 20). `response_code` and `response_explanation` name the failure, such as 400.009 insufficient balance, 403.004 trading blocked and 500.025 insufficient liquidity (16 of 20). No idempotency, since `client_order_id` duplicates are allowed since November 2023 and the docs say only to check the order id after a timeout; the kill switch limits damage (8 of 20). Few required parameters, but no official SDK in any language (5 of 15). 15 + 14 + 16 + 8 + 5 = 58.", "checked": "2026-11-03" }, { "key": "security", "name": "Security \u0026 auth", "weight": 14, "effectiveWeight": 17.5, "score": 60, "points": 10.5, "reason": "Revocable HMAC-SHA256 keys with per-endpoint permissions, an IP allow-list, single-use nonces, a timestamp window, sub-account scoping and a one-call kill switch for every key; no key expiry found (24 of 30). Permissions are chosen per endpoint and withdrawals can need Travel Rule address verification, but whether a withdrawal address allow-list exists sits in the unread account settings and no confirmation step is documented for API withdrawals (14 of 20). The API returns exchange data, not third-party text (10). No per-key audit log found; the account's transaction history is the record (4 of 15). security.txt names HackerOne's Robinhood programme but expired on 12 July 2026; no certification page was readable (8 of 20). 24 + 14 + 10 + 4 + 8 = 60.", "checked": "2026-11-03" }, { "key": "payments", "name": "Payments \u0026 pricing", "weight": 10, "effectiveWeight": 12.5, "score": 20, "points": 2.5, "reason": "No machine payment protocol (0). The fee schedule page loaded empty, the API's fee endpoints need a key, and no rate could be read, so fees are scored as not published (0, unchecked). The API is free, public endpoints need no key and the sandbox needs no money (20). A person must sign up in a browser with identity checks and mint the key (0). 0 + 0 + 20 + 0 = 20.", "checked": "2026-11-03" }, { "key": "tasks", "name": "Task success", "weight": 10, "effectiveWeight": 0, "pending": true, "points": 0, "reason": "Pending. Task success needs the category task suites run through each tool, which haven't run yet, so this run doesn't score it. Its weight is shared across the assessed categories until then. A data provider's data-quality score is published on its listing now and becomes half of this category when it's scored." }, { "key": "maintenance", "name": "Maintenance \u0026 community", "weight": 7, "effectiveWeight": 8.75, "score": 28, "points": 2.45, "reason": "Read as a closed service. The last dated API change is 28 August 2026, 67 days before the check (20). Only one dated entry in the last 90 days, after 1 July and 12 June (0). No public repository or issue tracker, support pages did not load and support.bitstamp.net did not resolve; a changelog exists (8 of 25). No official SDKs and no MCP registry presence of Bitstamp's own (0). No package to assess (0). 20 + 0 + 8 + 0 + 0 = 28.", "checked": "2026-11-03" }, { "key": "transparency", "name": "Transparency \u0026 trust", "weight": 7, "effectiveWeight": 8.75, "score": 53, "points": 4.64, "note": "editorial 16, provenance 90", "reason": "The editorial half. A closed service whose terms of use loaded empty for our reader, so the licence and clauses are unknown (8 of 30). The privacy policy loaded empty, so retention and data handling are unchecked (0 of 30). A 410.001 code marks deprecated endpoints and the changelog records replacements such as `trading-pairs-info` by `markets`, with no notice period stated (8 of 20). Subprocessors and data locations are in the unread privacy policy (0). 8 + 0 + 8 + 0 = 16.", "checked": "2026-11-03" } ], "assessment": { "date": "2026-11-03", "basis": "public evidence", "confidence": "low", "notes": { "ergonomics": "Graded on the REST API. Order book grouping and transaction time windows size responses, but there is no field selection and no MCP surface (15 of 25). Offset, limit, since and sort on transaction history, `until_id` windows on order-data replay (14 of 20). `response_code` and `response_explanation` name the failure, such as 400.009 insufficient balance, 403.004 trading blocked and 500.025 insufficient liquidity (16 of 20). No idempotency, since `client_order_id` duplicates are allowed since November 2023 and the docs say only to check the order id after a timeout; the kill switch limits damage (8 of 20). Few required parameters, but no official SDK in any language (5 of 15). 15 + 14 + 16 + 8 + 5 = 58.", "maintenance": "Read as a closed service. The last dated API change is 28 August 2026, 67 days before the check (20). Only one dated entry in the last 90 days, after 1 July and 12 June (0). No public repository or issue tracker, support pages did not load and support.bitstamp.net did not resolve; a changelog exists (8 of 25). No official SDKs and no MCP registry presence of Bitstamp's own (0). No package to assess (0). 20 + 0 + 8 + 0 + 0 = 28.", "payments": "No machine payment protocol (0). The fee schedule page loaded empty, the API's fee endpoints need a key, and no rate could be read, so fees are scored as not published (0, unchecked). The API is free, public endpoints need no key and the sandbox needs no money (20). A person must sign up in a browser with identity checks and mint the key (0). 0 + 0 + 20 + 0 = 20.", "reliability": "Read with the hosted lines on the HTTP API v2 at www.bitstamp.net/api/v2/. status.bitstamp.net is a Statuspage site with component history (20). Its feed for 5 August to 3 November 2026 has 17 entries, among them withdrawals failing on 14 networks for about 3 hours on 21 August, database maintenance with login failures and intermittent trading interruptions for about 1 hour 44 minutes on 23 September, a 39-minute halt of all markets on 5 August, and delistings and single-asset suspensions. One major (10). Rate limits with numbers, 400 a second and 10,000 per 10 minutes (15). Limit errors are named (400.002, 400.067, 400.068) but there is no Retry-After or backoff guidance, duplicate client order ids are allowed, and the only retry guidance is to check the order after a 500.016 timeout (8 of 15). No SLA found (0). Generally available (10). 20 + 10 + 15 + 8 + 0 + 10 = 63.", "schema": "No OpenAPI or other machine-readable contract was found on the API page or elsewhere (0). No llms.txt or Markdown docs (0). The single documentation page describes each endpoint's purpose and parameters, with notes such as the 10-second cache on open orders and the Travel Rule fields, but not when to use one endpoint over another (14 of 20). Parameters are typed with enumerations (margin mode CROSS or ISOLATED, margin multiplier 1 to 25, order types) and required fields marked (11 of 15). Signing examples in Python, Java and C++, and error families with numbered codes and explanations (13 of 15). Version v2 in the path and header, a dated changelog from 7 April 2023 to 28 August 2026, and a 410.001 code for deprecated endpoints, with no stated notice period (13 of 15). 0 + 0 + 14 + 11 + 13 + 13 = 51.", "security": "Revocable HMAC-SHA256 keys with per-endpoint permissions, an IP allow-list, single-use nonces, a timestamp window, sub-account scoping and a one-call kill switch for every key; no key expiry found (24 of 30). Permissions are chosen per endpoint and withdrawals can need Travel Rule address verification, but whether a withdrawal address allow-list exists sits in the unread account settings and no confirmation step is documented for API withdrawals (14 of 20). The API returns exchange data, not third-party text (10). No per-key audit log found; the account's transaction history is the record (4 of 15). security.txt names HackerOne's Robinhood programme but expired on 12 July 2026; no certification page was readable (8 of 20). 24 + 14 + 10 + 4 + 8 = 60.", "transparency": "The editorial half. A closed service whose terms of use loaded empty for our reader, so the licence and clauses are unknown (8 of 30). The privacy policy loaded empty, so retention and data handling are unchecked (0 of 30). A 410.001 code marks deprecated endpoints and the changelog records replacements such as `trading-pairs-info` by `markets`, with no notice period stated (8 of 20). Subprocessors and data locations are in the unread privacy policy (0). 8 + 0 + 8 + 0 = 16." }, "sources": [ { "what": "robots.txt (www.bitstamp.net allows /api/ only; status.bitstamp.net disallows /api/)", "url": "https://www.bitstamp.net/robots.txt", "seen": "2026-11-03" }, { "what": "HTTP API v2 documentation (authentication, rate limits, errors, endpoints, changelog)", "url": "https://www.bitstamp.net/api/", "seen": "2026-11-03" }, { "what": "fee schedule (loaded empty)", "url": "https://www.bitstamp.net/fee-schedule/", "seen": "2026-11-03" }, { "what": "terms of use (loaded empty)", "url": "https://www.bitstamp.net/terms-of-use/", "seen": "2026-11-03" }, { "what": "privacy policy (loaded empty)", "url": "https://www.bitstamp.net/privacy-policy/", "seen": "2026-11-03" }, { "what": "about page (loaded empty)", "url": "https://www.bitstamp.net/about-us/", "seen": "2026-11-03" }, { "what": "status history feed", "url": "https://status.bitstamp.net/history.atom", "seen": "2026-11-03" }, { "what": "security.txt (expired 12 July 2026)", "url": "https://www.bitstamp.net/.well-known/security.txt", "seen": "2026-11-03" }, { "what": "official MCP registry search", "url": "https://registry.modelcontextprotocol.io/v0/servers?search=bitstamp", "seen": "2026-11-03" }, { "what": "bitstamp GitHub organisation (no public repositories)", "url": "https://api.github.com/orgs/bitstamp/repos?per_page=100\u0026sort=updated", "seen": "2026-11-03" }, { "what": "Robinhood newsroom, acquisition of Bitstamp Ltd. closed", "url": "https://robinhood.com/newsroom/robinhood-completes-acquisition-of-bitstamp/", "seen": "2026-11-03" }, { "what": "Robinhood UK help page on Bitstamp UK Limited", "url": "https://robinhood.com/gb/en/support/articles/bitstamp-by-robinhood/", "seen": "2026-11-03" }, { "what": "RDAP for bitstamp.net", "url": "https://rdap.verisign.com/net/v1/domain/bitstamp.net", "seen": "2026-11-03" } ], "openQuestions": [ "Kind http-api. The API documentation page is the only developer surface; no MCP server, SDK or OpenAPI file exists.", "No MCP server was found, looking in the API docs, the bitstamp GitHub organisation (empty) and the official MCP registry. The best-known third-party server is pipeworx-io's remote `io.github.pipeworx-io/bitstamp`, public market data only, not Bitstamp's.", "unchecked: the fee schedule, terms of use, privacy policy, about page and FAQ (all script-drawn, loaded empty), the WebSocket and FIX documentation pages (loaded empty), and the supported-country list; support.bitstamp.net did not resolve. Payments and transparency score low for that reason, not because the pages lack the facts. A person with a browser should read them.", "firstReleased is 7 April 2023, the oldest entry in the API changelog we read; the v2 API is older and its first release date could not be read first-hand. lastRelease is 28 August 2026, the latest changelog entry.", "The API page states a 150-second nonce window in one place and error API0004 refers to 300 seconds; recorded, not deducted.", "The legal entity is Bitstamp Ltd. per Robinhood's newsroom; Bitstamp Europe S.A. and Bitstamp USA, which the terms may name, were not confirmed. Bitstamp UK Limited is FCA-registered per Robinhood's UK help page.", "Our own products. It doesn't do LocalGhost's or letme's job; it trades one exchange account." ] }, "negative": 0, "verdict": "Bitstamp documents its v2 API on one static page with numeric rate limits, per-endpoint key permissions, an IP allow-list, a kill switch and a sandbox. There is no official MCP server, duplicate client order ids are allowed, and the fee schedule, terms, privacy policy and country list render by script and could not be read.", "bestFor": "An agent that needs a long-running regulated spot venue in the EU, UK and US with a sandbox and per-endpoint key permissions, and can do its own signing.", "strengths": [ "Rate limits with numbers (400 requests a second, 10,000 per 10 minutes) and named error codes for client and market limits", "Keys carry per-endpoint permissions and an IP allow-list, and one call revokes every key on the account", "A sandbox at sandbox.bitstamp.net with the same v2 paths, plus order-data endpoints to recover gaps after a dropped WebSocket", "A dated API changelog from 2023 to 28 August 2026 and a Statuspage feed with per-market incidents", "Signed responses (`X-Server-Auth-Signature`) let a client verify what the server returned" ], "weaknesses": [ "No official MCP server, SDK, llms.txt or OpenAPI file; the registry's Bitstamp servers are third parties proxying public market data", "Duplicate client order ids are allowed since November 2023, so a retried order can execute twice", "The fee schedule, terms of use, privacy policy, about page and FAQ load empty without a browser, so fees, retention and the bot clauses are unchecked", "A 3-hour withdrawal failure across 14 networks on 21 August 2026 and a 39-minute halt of all markets on 5 August 2026", "security.txt expired on 12 July 2026, and no SLA was found" ], "agentNotes": [ "Mint a key with only the endpoint permissions the task needs and an IP allow-list; keep `revoke_all_api_keys` in reach as a kill switch", "Treat `client_order_id` as a label, not a guard. On a timeout (500.016) fetch the order by client id before resending, because duplicates are accepted", "Use a fresh 36-character nonce and a timestamp within 150 seconds of server time on every request, or expect API0004 and API0017", "Stay under 400 requests a second and 10,000 per 10 minutes; 400.002 and 400.067 mean back off, and open-orders answers are cached for 10 seconds", "Start on sandbox.bitstamp.net with the same paths, and read the fee schedule in a browser before quoting costs, since it is unreadable to a plain fetch" ], "metrics": { "kind": "remote", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "low", "grade": "D", "methodology": "0.7", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 50.4 } ], "editorialScores": { "ergonomics": 58, "maintenance": 28, "payments": 20, "reliability": 63, "schema": 51, "security": 60, "transparency": 16 }, "provenanceScore": 90, "checked": { "categories": { "ergonomics": "2026-11-03", "maintenance": "2026-11-03", "payments": "2026-11-03", "reliability": "2026-11-03", "schema": "2026-11-03", "security": "2026-11-03", "transparency": "2026-11-03" }, "last": "2026-11-03", "oldest": "2026-11-03", "stale": false, "staleAfterDays": 90 }, "scoreHistory": [ { "date": "2026-11-03", "grade": "D", "kind": "listed", "method": "0.7", "score": 50.4 } ] }, "connect": { "http": "curl https://www.bitstamp.net/api/v2/ticker/btcusd/" }, "letme": { "capability": "https://letme.dev/exchange.market-data", "tool": "https://letme.dev/bitstamp" }, "notable": [ "No official MCP server. Bitstamp's GitHub organisation lists no public repositories, its API documentation does not mention MCP or agents, and the official MCP registry holds only third-party servers, `io.github.pipeworx-io/bitstamp` (remote at gateway.pipeworx.io/bitstamp/mcp, public market endpoints, 0.2.1 on 30 October 2026) and `io.github.mrfentmen/bitstamp-mcp` (npm, prices, 1.0.1 on 21 September 2026), neither Bitstamp's (https://registry.modelcontextprotocol.io/v0/servers?search=bitstamp, https://api.github.com/orgs/bitstamp/repos)", "Rate limits are 400 requests a second per client and 10,000 requests per 10 minutes by default, higher by bespoke agreement, with error codes 400.002, 400.067 and 400.068 for client and market limits; open-order responses are cached for 10 seconds (https://www.bitstamp.net/api/)", "`client_order_id` is optional on orders and \"should be unique\", but Bitstamp deprecated duplicate checks in November 2023 and allows duplicates, so there is no idempotency; error 500.016 on a timeout says to check the order id before retrying (https://www.bitstamp.net/api/)", "A sandbox with the same v2 paths at https://sandbox.bitstamp.net/api/v2/ (https://www.bitstamp.net/api/)", "The API changelog is dated from 7 April 2023 to 28 August 2026, with derivatives endpoints on 16 June 2025, a replace-order endpoint on 5 February 2026, order-data gap recovery on 16 February 2026, market hours on 1 July 2026 and a Satoshi test endpoint on 28 August 2026 (https://www.bitstamp.net/api/)", "Withdrawals under the Travel Rule can need address verification (changelog of 4 December 2024 and 13 May 2026) and a VASP list is served publicly; the withdrawal permission and any address allow-list sit in the account settings, which were not read (https://www.bitstamp.net/api/)", "Robinhood Markets, Inc. closed its acquisition of Bitstamp Ltd. on 2 June 2025; JB Graftieaux is named as Bitstamp's CEO (https://robinhood.com/newsroom/robinhood-completes-acquisition-of-bitstamp/)", "status.bitstamp.net's feed for 5 August to 3 November 2026 lists 17 entries, among them a 39-minute halt of all markets on 5 August, withdrawal failures on 14 networks for about 3 hours on 21 August, database maintenance with login failures and intermittent trading interruptions for about 1 hour 44 minutes on 23 September, and delistings and single-asset suspensions (https://status.bitstamp.net/history.atom)", "bitstamp.net's terms of use, privacy policy, fee schedule, about and FAQ pages draw their text by script and loaded empty for our reader, and support.bitstamp.net did not resolve, so the legal clauses on bots and API use, the restricted-country list, fees and retention are unchecked (https://www.bitstamp.net/terms-of-use/)", "security.txt points to HackerOne's Robinhood programme and expired on 12 July 2026 (https://www.bitstamp.net/.well-known/security.txt)" ], "area": "payments", "details": [ { "label": "Surface listed", "value": "The hosted HTTP API v2 at www.bitstamp.net/api/v2/ as an agent calls it, read from the API documentation page, status.bitstamp.net, the official MCP registry, Bitstamp's GitHub organisation, security.txt, RDAP and Robinhood's newsroom on 3 November 2026. bitstamp.net's other pages loaded empty. No account, key or order" }, { "label": "MCP server", "value": "None found. Looked in the API documentation, the bitstamp GitHub organisation (no public repositories) and the official MCP registry. Third-party only, pipeworx-io's remote `io.github.pipeworx-io/bitstamp` and mrfentmen's `bitstamp-mcp`, both public market data, neither Bitstamp's" }, { "label": "Key permissions", "value": "Per-endpoint permissions chosen when the key is made (API0003 reports a missing one), an IP allow-list (API0002 reports a wrong IP), sub-account keys through `X-Auth-Subaccount-Id`, and a `revoke_all_api_keys` kill switch. Whether withdrawals need a separate permission or a whitelisted address sits in the account settings, unread; Travel Rule address verification applies to some withdrawals" }, { "label": "Rate limits", "value": "400 requests a second per client; 10,000 requests per 10 minutes by default, more by agreement. Errors 400.002 and 400.067 (client) and 400.068 (market). No Retry-After documented. Open-orders responses cached 10 seconds" }, { "label": "Testnet or sandbox", "value": "https://sandbox.bitstamp.net/api/v2/ with the same paths; how to fund a sandbox account was not documented on the API page" }, { "label": "Countries served", "value": "Unchecked. The terms of use, about page and FAQ loaded empty and support.bitstamp.net did not resolve. Robinhood's UK help page says UK customers are introduced to Bitstamp UK Limited, registered with the FCA; the newsroom names customers in the EU, UK, US and Asia" }, { "label": "Fees at the lowest tier", "value": "Unchecked. The fee schedule page draws its table by script and loaded empty; the API has `fees/trading` and `fees/withdrawal` endpoints behind a key" }, { "label": "FIX and WebSocket", "value": "WebSocket v2 for public channels and private channels with a token from `POST websockets_token`, with `order_data` and `account_order_data` endpoints to replay missed events (default 24 hours). FIX v2 and an Open Banking (PSD2) API are listed in the navigation; their pages were not read" }, { "label": "Terms on automated trading", "value": "Unchecked. The terms of use page loaded empty. The API page says commercial use of exchange data needs a Data License Agreement" }, { "label": "Errors and idempotency", "value": "JSON with `response_code` and `response_explanation`, families 400.xxx, 403.xxx, 404.xxx, 405.001, 410.001 (deprecated endpoint) and 500.xxx, and API0001 to API0021 for authentication. `client_order_id` optional, 180 characters at most on cancel and replace, duplicates allowed since November 2023" }, { "label": "Endpoint groups", "value": "Public endpoints cover tickers, order book, transactions, markets, OHLC, EUR/USD, funding rates and the VASP list; private endpoints cover balances, fees, orders (create, cancel, replace, status), derivatives (max order amount, margin tiers, market hours), withdrawals, deposits, sub-accounts, instant convert, WebSocket token, transactions, Travel Rule, Earn, security" }, { "label": "Legal entity", "value": "Bitstamp Ltd., the company Robinhood Markets, Inc. acquired on 2 June 2025 per Robinhood's newsroom; Bitstamp UK Limited for UK customers per Robinhood's help page. The terms of use, which would name the contracting entity by region, loaded empty" } ], "provenance": { "legalEntity": "Bitstamp Ltd.", "domain": "bitstamp.net", "domainRegistered": "2011-07-04", "endpointOnVendorDomain": true, "terms": "https://www.bitstamp.net/terms-of-use/", "privacy": "https://www.bitstamp.net/privacy-policy/", "statusPage": "https://status.bitstamp.net", "changelog": "https://www.bitstamp.net/api/", "securityTxt": "expired", "checked": "2026-11-03", "notes": [ "Bitstamp Ltd. is named in Robinhood's newsroom post of 2 June 2025 on closing the acquisition; the terms of use and privacy policy pages loaded empty for our reader, so the entities they name are unconfirmed.", "RDAP gives bitstamp.net a registration date of 4 July 2011.", "https://www.bitstamp.net/.well-known/security.txt names HackerOne's Robinhood programme as Contact and Policy and expired on 12 July 2026.", "www.bitstamp.net/robots.txt allows /api/ itself and disallows /api/*, /account/, /trade/ and others; only /api/ was read under it. status.bitstamp.net disallows /api/ and /embed/, so the history feed was read. support.bitstamp.net did not resolve.", "The API changelog is a section of the API documentation page; there is no separate changelog URL." ], "score": 90, "checks": [ { "check": "Legal entity named", "value": "Bitstamp Ltd.", "points": 20, "max": 20, "state": "ok" }, { "check": "Domain age", "value": "bitstamp.net, registered 2011-07-04 (15 years)", "points": 15, "max": 15, "state": "ok" }, { "check": "Endpoint on the vendor's domain", "value": "bitstamp.net", "points": 15, "max": 15, "state": "ok" }, { "check": "Terms of service", "value": "published, but our reader couldn't read it", "points": 7, "max": 10, "state": "part" }, { "check": "Privacy policy", "value": "published, but our reader couldn't read it", "points": 7, "max": 10, "state": "part" }, { "check": "Status page", "value": "status.bitstamp.net", "points": 10, "max": 10, "state": "ok" }, { "check": "Changelog", "value": "published", "points": 10, "max": 10, "state": "ok" }, { "check": "security.txt", "value": "published but past its Expires date", "points": 5, "max": 10, "state": "part" }, { "check": "People named", "value": "1 named with their role, none with a public profile", "points": 7, "max": 10, "state": "part" }, { "check": "Support route", "value": "a support address, help pages", "points": 5, "max": 5, "state": "ok" } ], "policies": [ { "kind": "terms", "url": "https://www.bitstamp.net/terms-of-use/", "state": "unreadable", "reason": "the page has 0 words of text without a browser, so the document is drawn by script or sits elsewhere", "readAt": "2026-11-03", "points": 7, "max": 10 }, { "kind": "privacy", "url": "https://www.bitstamp.net/privacy-policy/", "state": "unreadable", "reason": "the page has 0 words of text without a browser, so the document is drawn by script or sits elsewhere", "readAt": "2026-11-03", "points": 7, "max": 10 } ] }, "humans": { "slug": "bitstamp", "checked": "2026-11-03", "company": "Bitstamp", "people": [ { "name": "JB Graftieaux", "role": "CEO, Bitstamp", "page": "/people/jb-graftieaux/" } ], "peopleNote": "Bitstamp's own about page and FAQ draw their text by script and loaded empty for our reader, and support.bitstamp.net did not resolve, so the only person with a role from a page we read is JB Graftieaux, named as CEO of Bitstamp in Robinhood's newsroom post of 2 June 2025 announcing the closed acquisition. Bitstamp's founders are not named on any page we read. Ownership is recorded as acquired, since Robinhood Markets, Inc. closed its acquisition of Bitstamp Ltd. on 2 June 2025 per that post, which states no price; press reports put it at $200 million, not recorded here. Pre-acquisition investors were looked for on Robinhood's newsroom and Bitstamp's unreadable pages only; no outside search was made.", "companySocial": {}, "support": { "emails": [ "partners@bitstamp.net" ], "urls": [ "https://www.bitstamp.net/api/", "https://status.bitstamp.net/" ], "contactEmails": [ "partners@bitstamp.net" ] }, "sources": [ "https://robinhood.com/newsroom/robinhood-completes-acquisition-of-bitstamp/", "https://robinhood.com/gb/en/support/articles/bitstamp-by-robinhood/", "https://www.bitstamp.net/api/", "https://www.bitstamp.net/.well-known/security.txt", "https://api.github.com/orgs/bitstamp/repos?per_page=100\u0026sort=updated" ], "ownership": { "status": "acquired", "acquiredBy": "Robinhood Markets, Inc.", "acquiredDate": "2025-06-02", "checked": "2026-11-03", "sources": [ "https://robinhood.com/newsroom/robinhood-completes-acquisition-of-bitstamp/" ] } }, "pageJsonUrl": "https://www.anchorterminal.com/tools/bitstamp.json", "live": { "slug": "bitstamp", "vendorStatus": { "page": "https://status.bitstamp.net", "indicator": "none", "summary": "All Systems Operational", "checkedAt": "2026-11-04T19:31:04.94837231Z" }, "securityTxt": { "url": "https://bitstamp.net/.well-known/security.txt", "state": "expired", "expires": "2026-07-12T11:59:00.000Z", "checkedAt": "2026-11-04T15:53:31.314157297Z" }, "updatedAt": "2026-11-04T19:31:04.94837231Z" } } }