Head to head · Exchange market data · October 2026 research run

Deribit vs Upbit Open API

Deribit scores 59 (C) on agent readiness against Upbit Open API's 54.7 (C), and leads in 5 of 7 scored categories. Upbit Open API leads on maintenance & community and transparency & trust. Both do exchange market data.

Best crypto exchange APIs and MCP servers for AI agents · All 210 exchanges comparisons

Which one, for what

Deribit C

Best for An agent trading crypto options, dated futures and perpetuals for an institutional or retail Deribit account, and anyone migrated from Coinbase International Exchange.

Ahead on

  • Schema & documentation, 88 against 66
  • Payments & pricing, 25 against 15

Watch for

No official MCP server, and the GitHub organisation has no public repositories, so no official SDK in any language

Upbit Open API C

Best for KRW-market trading for agents acting for a verified Korean account, with first-party SDKs, a CLI and skills but no MCP.

Ahead on

  • Maintenance & community, 83 against 65
  • Transparency & trust, 54 against 46

Watch for

No MCP server; the agent route is the CLI through skills, which need a terminal

Why the edge

Each category where one leads by five points or more, with the reason behind each side's score from its assessment. The numbers are in the table below; this is what they stand for.

Schema & documentation Deribit +22

Deribit 88

OpenAPI 3.0.0 for the whole JSON-RPC surface (Deribit API 2.1.1, about 1.4 million characters) plus AsyncAPI files for the WebSocket side (25). llms.txt with production and upcoming indexes, and a Markdown twin of every page (10). Each operation has a description such as "Places a buy order for an instrument." with parameter notes, and the articles say when to use WebSocket subscriptions over polling, but the reference seldom says when not to use a method (13 of 20). Parameters are typed with enums (order type has eight values, time_in_force four) and required flags, with amount or contracts as a documented either-or (13 of 15). Every reference page carries an example request and response, and the errors page lists about 159 codes with retry guidance, though most operations document only a 200 response and the smaller error tables disagree with the full one on two codes (12 of 15). A versioned path (/api/v2), a production and an upcoming docs branch, and a dated changelog of 64 entries since 21 January 2020 (15). Total 88.

Upbit Open API 66

No OpenAPI found; the reference is a readme.io site with a Markdown twin of every page (5 of 25). llms.txt on docs.upbit.com and a kr/llms.txt index (10). Each reference page states what the endpoint does, its group and its errors, with warnings such as market_offline after maintenance (14 of 20). Typed parameters with enums for order type, side and time in force and required flags (11 of 15). Recipes in Python, Java and Node.js and an error format of error.name and error.message with HTTP statuses (13 of 15). Feature versions in page histories (v1.6.1) and dated notices with effective dates, no single API version (13 of 15). 5 + 10 + 14 + 11 + 13 + 13 = 66.

Maintenance & community Upbit Open API +18

Deribit 65

Read as a closed service. The JSON-RPC changelog's latest production entry is 13 October 2026 and an entry dated 5 November 2026 describes the next release; Deribit's posts of 14 October and 2 November 2026 change fees (30). Entries of 18 August, 15 September and 13 October 2026, three in 90 days (20). A public changelog and a support site; whether support answers wasn't tested and the support site refused our reader (10 of 15). No official SDK and no MCP registry entry (0). The OpenAPI and AsyncAPI files are maintained with the docs (5 of 10). Total 65.

Upbit Open API 83

Read as a closed service. SDK v1.1.0 on 20 October 2026 (30). The CLI 1.0.0 on 1 September, the rate-limit update of 7 October, the SDK on 20 October and the path-format notice for 16 November 2026 (20). open-api@upbit.com answers in turn on weekdays per the support notice, notices carry dates, and the six upbit-official repositories show no open issues (12 of 15). Current official SDKs in Python, TypeScript and Go (15). Apache-2.0 repositories pushed in October 2026; CI not checked (6 of 10). 30 + 20 + 12 + 15 + 6 = 83.

Payments & pricing Deribit +10

Deribit 25

No machine payment protocol (0). The fee schedule is on support.deribit.com, which answered 403; Deribit's own posts give VIP4 to VIP7 taker fees and the 0 bps linear options maker fee, so partial prices are public but the lowest tier is unchecked (5 of 20). Public market data needs no key and the test environment is free, with no card anywhere (20). A person signs up in a browser with identity checks before any key exists (0). Total 25.

Upbit Open API 15

No machine payment protocol (0). The fee schedule is on upbit.com, which disallows every crawler path, so no price is recorded (0 of 20, unchecked). Public quotation endpoints need no key, card or account; trading needs a verified Korean account. Judgement call (15 of 20). A person must sign up, pass identity checks and issue keys on the PC web site (0). 0 + 0 + 15 + 0 = 15.

Transparency & trust Upbit Open API +8

Deribit 46

The editorial half. A closed service whose terms (Deribit FZE membership terms and DRB Panama Inc. terms) sit on a support site that answered 403, with the entity confirmed on VARA's register (12 of 30). The privacy policy was not read, and nothing in the docs states retention (0 of 30). The changelog marks deprecations and the upcoming docs branch previews the next release, but removals such as public/get_index on 25 November 2025 carry no notice period (10 of 20). No subprocessor or data-location statement found (0 of 20). Total 22.

Upbit Open API 54

The editorial half. A closed service whose user and Open API terms could not be fetched under upbit.com's robots.txt, and whose SDK licence page calls the SDK material not open source while the repositories carry Apache-2.0 (8 of 30). The developer centre's privacy policy names Dunamu Inc., gives retention periods and names Zendesk in Japan; the main privacy policy was not read (14 of 30). Notices with effective dates, including the path-format change and the deprecated Remaining-Req min field (12 of 20). Zendesk and Google Analytics named with a location for the developer centre only (8 of 20). 8 + 14 + 12 + 8 = 42.

Score by category

CategoryWeight this runDeribitUpbit Open APIEdge
Reliability16%204542Deribit +3
Performance10%pendingpendingpendingnot scored in this run
Schema & documentation13%16.28866Deribit +22
Agent ergonomics13%16.27470Deribit +4
Security & auth14%17.56259Deribit +3
Payments & pricing10%12.52515Deribit +10
Task success10%pendingpendingpendingnot scored in this run
Maintenance & community7%8.86583Upbit Open API +18
Transparency & trust7%8.84654Upbit Open API +8
Negative events≤1500
TotalC 59/100C 54.7/100

Facts side by side

FactDeribitUpbit Open API
KindHTTP APIHTTP API
VendorDeribit FZEDunamu Inc.
Hosted endpointno (local only)no (local only)
Transports
AuthAPI keyAPI key
PricingPay per usePay per use
x402nono
LicenceProprietary hosted exchange. The API is documented under the Deribit docs with an OpenAPI 3.0 file; no official client library is publishednone
Tools exposed00
Read-only variant documentednono
llms.txtyesyes
Last release2026-10-132026-10-20
Terms last updated2026-08-13no document linked
Privacy policy last updatedno document linkedno date given
Customer content may train modelsnot found in the textnot read yet
Terms restrict automated accessyesnot read yet
Terms restrict benchmarkingnot found in the textnot read yet
Terms or service can change without noticenot found in the textnot read yet
Arbitration or class-action waivernot found in the textnot read yet
Popularitynone91 stars

Verdicts

Deribit

Deribit's JSON-RPC API has scoped keys with IP and expiry limits, asymmetric signing, an OpenAPI file, numeric rate limits and a 64-entry changelog. There is no official MCP server or client library, the fee schedule, terms and privacy policy sit on a support site that refused our reader, and the status page did not resolve.

Upbit Open API

Upbit's Open API has a mandatory IP allow-list, scoped keys with a default withdrawal lock, per-group rate limits with 429 and 418 signalling, an order-test endpoint, official SDKs, a CLI and agent skills with a CONFIRM gate. There is no MCP server, sandbox or status page, and the fees and terms sit on a host our crawler may not read.

Before you call either

Deribit

  1. Create the key with trade:read_write and wallet:none, an ip: limit and an expires value; keep account:read unless the task edits subaccounts
  2. Authenticate with client_signature or an Ed25519 key over WebSocket rather than client_credentials over HTTP, which puts the secret in the URL
  3. Watch the limits field of private/get_account_summary and back off on error 10028; a session that runs out of credits is closed and must reconnect
  4. Send a nonce with orders so a retry after a timeout does not place a second order, and treat order_not_found on cancel as a possible fill
  5. Develop against https://test.deribit.com/api/v2 first; production and test need separate accounts and keys

Upbit Open API

  1. Ask the person for a key with only the functions the task needs and your server's public IPv4 address registered; a private or unregistered IP is refused
  2. Sign every request with a fresh JWT (HS512, new nonce, SHA512 query hash) and branch on error.name, not error.message
  3. Run POST /v1/orders/test before a live order; it costs nothing and shares the 8-a-second order-test group
  4. Read Remaining-Req and keep orders under 12 a second per pocket; on 429 wait for the next second and on 418 wait out the stated block
  5. Leave the withdrawal safe-lock on unless the person lifts it in the app, and send paths with single slashes and no trailing slash before 16 November 2026

Questions

Which is better for AI agents, Deribit or Upbit Open API?

Deribit scores 59 (C) on agent readiness against Upbit Open API's 54.7 (C), and leads in 5 of 7 scored categories. Upbit Open API leads on maintenance & community and transparency & trust.

Do Deribit and Upbit Open API need an API key?

Both need an API key.

Can an agent call Deribit and Upbit Open API without installing anything?

No hosted endpoint is listed for Deribit. No hosted endpoint is listed for Upbit Open API.

Other comparisons with Deribit or Upbit Open API

Machine-readable

For companies

Do agents find, use and choose your tools?

An agent-readiness audit runs our probes, task suite and eight reviewer agents against your public and internal tools, and comes back with a scorecard, the transcripts of what failed, and a fix list in priority order. From $2,500, re-run included. We never take payment to move a rank. We do help companies earn one.