Bitget
by BTG Technology Holdings Limited HTTP API in Crypto exchanges
Local
BTG Technology Holdings Limited · bitget.com since 2003 · who's behind it
Bitget is a centralised crypto exchange for spot, margin, futures, earn and tokenised stocks, reached through its Unified Trading Account v3 REST and WebSocket API and an Agent Hub toolkit with a stdio MCP server, CLI and agent skills.
Best for An agent trading spot, futures and earn products in a person's Bitget account outside the prohibited list, with the smallest default MCP surface of the exchanges graded and a paper-trading switch.
Viewed under 500 times in the last 30 days · Claim it, free, to see who finds it
Is this your product? Claim it to see how agents find it: lookups through the API, MCP and letme, the comparisons it's in, and what people search for in Exchanges. Free, and it never changes the grade. Or verify it, or log in if it's already claimed.
Assessment. Bitget's official MCP server keeps the default surface to 14 intent tools with discovery, read-only and paper-trading switches, dry runs and a confirmation gate on withdrawals, over an API with demo trading. A 388 million dollar wallet breach in September 2026 paused withdrawals for eight days, and there is no status page, SLA or readable fee table.
Facts
Access how an agent reaches and pays for it
- Transport
- stdio
- Auth
- API key
- Pricing
- Pay per use · 0.1% fee
- x402
- No
- Licence
- not stated
- Tools exposed
- 14
Where it lives packages, source, docs and releases
- Packages
npm@bitget-ai/bitget-agent-mcpnpmbitget-mcp-server- MCP registry
io.github.Bitget-AI/bitget-agent-mcp- llms.txt
- not found
- Last release
- GitHub stars
- 234
From our research 12 facts checked against the vendor's pages
- Surface listed
- The Unified Trading Account v3 REST and WebSocket API at api.bitget.com, read from bitget.com/legacy-docs (the api-doc site renders only its overview for our reader), the support centre, the Agent Hub page, the Bitget-AI and BitgetLimited GitHub accounts, npm and the MCP registry on 3 November 2026. No account was made, no key minted and no MCP session opened
- MCP server
- Official, two generations.
@bitget-ai/bitget-agent-mcp3.3.1 (github.com/Bitget-AI/agent-mcp, MIT, stdio, Node 20) over the UTA v3 API: 14 tools by default (market, order, position, strategy_order, account_overview, account_config, repayment, transfer_funds, deposit, withdraw, funds_records, subaccount, discover, raw; loan and tax with their modules),--surface fulladds one tool per endpoint, annotations derived from a read, write or high risk level. In the official MCP registry as io.github.Bitget-AI/bitget-agent-mcp 3.0.2. The Agent Hub page on bitget.com still documentsbitget-mcp-server1.1.0 (58 tools in 9 modules over the V2 API, maintainer digmouse, repository under a personal account). No hosted endpoint - Key permissions
- Read or read-and-write per key, up to 50 keys per UID, passphrase set by the user and not recoverable, IP binding recommended. Sub-account keys with unified account trade or management permission, each read-only or read-write, once the main account enables API key management. No separate withdrawal or transfer permission appears in the docs read; the Agent Hub READMEs tell users to disable withdrawal access, so the management page may offer it
- Rate limits
- 6,000 requests per IP per minute on api.bitget.com, limits per endpoint per UID rising with VIP level (10 a second default, 60 at VIP 1, 80 at VIP 2, 100 at VIP 3 to 7), REST and WebSocket sharing quota, x-mbx-used-remain-limit on responses. WebSocket 300 connection requests per IP per 5 minutes and 100 connections per IP. The error code for a breach was not read; the agent SDK backs off and retries on 429
- Testnet and demo
- Demo trading on api.bitget.com with a demo API key and the paptrading header set to 1, WebSocket at wss://wspap.bitget.com/v3/ws/public and /private. The MCP server's --paper-trading flag adds the header
- Fees
- Base spot 0.1 per cent maker and taker, base futures 0.02 per cent maker and 0.06 per cent taker, before VIP tiers; BGB offsets spot fees at a rate shown on the live schedule, which draws by script
- FIX and WebSocket
- No FIX API in the docs read. WebSocket public and private channels at ws.bitget.com with order placement and modification over the socket, an SBE feed for institutions, and preview notices for snapshot changes dated for demo and live
- Countries
- The terms' Prohibited Countries are Austria, Belarus, Canada, Cuba, France, Germany, Hong Kong, Iran, Japan, Kazakhstan, Malaysia, North Korea, Russia, Singapore, Sudan, the United States with its territories and outlying islands, Iraq, Libya, Yemen, Afghanistan, the Central African Republic, the Democratic Republic of the Congo, Guinea-Bissau, Haiti, Lebanon, Somalia, South Sudan, Thailand, and the Crimea, Luhansk, Donetsk, Kherson and Zaporizhzhia regions of Ukraine, plus any location Bitget designates
- Terms on automated trading
- Clause 11.1(ix) bars deep linking, web crawlers, bots, spiders and other automatic devices used to obtain or copy platform content, and 11.1(xiv)(c) bars bypassing robot exclusion headers; API keys are treated as account credentials and no clause limits API trading. Clause 13.1 disclaims continuous access and clause 16.1 caps liability at three months of fees
- Security incident
- On 24 September 2026 at 18:31 UTC forged withdrawal commands from a compromised internal credential moved about 388 million dollars in 13 assets on 11 chains from 12 hot and warm wallet addresses; withdrawals blocked at 19:05 and signing shut at 21:44, root cause found 25 September, Mandiant and SlowMist reports 30 September, BTC withdrawals back 28 September and all assets, fiat and C2C by 2 October. Private keys and cold wallets not affected per Bitget; the Protection Fund was topped above 300 million dollars
- Other agent surfaces
bgcCLI (bitget-agent-cli) with read-only and paper-trading modes, bitget-agent-skill for Claude Code, Codex and OpenClaw, bitget-signal market-analysis skills needing no key, bitget-agent-installer, and official SDKs in Java, Python, Node.js, Go and PHP under BitgetLimited/v3-bitget-api-sdk- Legal entity
- BTG Technology Holdings Limited per the terms and the privacy notice, Hong Kong law and HKIAC arbitration; the privacy notice applies the Seychelles Data Protection Act 2023 and names BTGT Europe Limited, UAB as EEA representative. Press releases are datelined Victoria, Seychelles
Facts verified 3 November 2026 from vendor docs, repositories and package registries. JSON · Markdown
Strengths
- Official stdio MCP server with 14 intent tools by default, progressive discovery,
--read-only,--paper-trading,dryRun: trueon writes andconfirm: truerequired for withdrawals and cancel-all - Demo trading on the production host with demo keys and a paptrading header, and a TypeScript agent SDK whose openapi.yaml types all 109 UTA v3 operations
- Terms name BTG Technology Holdings Limited with Hong Kong law, and the privacy notice gives retention periods of 7 and up to 10 years
- Changelog with 58 dated entries since 5 August 2026, including preview notices with demo and live dates for WebSocket changes
- Base fees public in a help article, 0.1 per cent spot and 0.02 per cent maker and 0.06 per cent taker on futures
Weaknesses
- Hot and warm wallets lost about 388 million dollars on 24 September 2026 to forged withdrawal commands, and withdrawals were paused until 2 October
- No status page, incident history or SLA; the terms disclaim uninterrupted access
- Two official MCP servers coexist, the V2-based bitget-mcp-server on Bitget's own Agent Hub page and the v3 bitget-agent-mcp on GitHub and npm, with different tool counts
- The current api-doc site renders every page as the UTA overview for a reader without script; the legacy docs were used instead
- Keys have read or read-and-write only, with no separate withdrawal permission in the docs read, and IP binding is recommended rather than required
Before you call it notes for agents
- Run
npx -y @bitget-ai/bitget-agent-mcp --read-onlyfor research and--paper-tradingwith a demo key before any live order; the two flags cannot be combined - Call discover({}) first, then the intent verbs; add
dryRun: trueto any write to preview it, and passconfirm: trueonly after the person has agreed to a withdraw or cancelAll - Send a unique clientOid of at most 64 characters on every order and reuse it on retry; orderId wins when both are sent
- Stay under 10 requests a second per endpoint on a new account and 6,000 a minute per IP; the SDK retries on 429, so do not add a second retry loop
- Bind the key to an IP and keep write permission off a research key; the docs read show no separate withdrawal scope
Who's behind it provenance 76/100
- Legal entity namedBTG Technology Holdings Limited20/20
- Domain agebitget.com, registered 2003-02-03 (23 years)15/15
- Endpoint on the vendor's domainbitget.com15/15
- Terms of serviceread, states 6 of the 7 things a reader expects, and has 2 clauses that cost points5.1/10
- Privacy policyread, states 7 of the 8 things a reader expects9.3/10
- Status pagenot found0/10
- Changelogpublished10/10
- security.txtnot found0/10
- People named1 named with their role, none with a public profile7/10
- Support routehelp pages, a community5/5
Terms and privacy, as read
Terms of service dated 2026-10-20, states 6 of 7, 4 to know
TL;DR Dated 2026-10-20. States 6 of the 7 things a reader expects, and we didn't find a service level. To know before relying on it, limits on automated access, changes without notice, cut-off without notice or for any reason and arbitration or a class action waiver.
Restricts automated accesscosts points
(ix) (a) use any deep linking, web crawlers, bots, spiders or other automatic devices, programs, scripts, algorithms or methods, or any similar or equivalent manual processes to access, obtain, copy or monitor any part of the Platform
A rule against bots, scrapers or automated means can cover an agent, depending on how the vendor reads it.
Says the terms or the service can change without noticecosts points
8.1 Bitget may at any time modify, suspend or discontinue any portion or feature of the Services without prior notice to or any consent from you and without assigning any reason for that action.
A customer may not hear about a change before it applies.
Says access can be ended without notice or for any reason
If you decline to provide the requested information, or otherwise do not comply in a timely manner, we reserve the right to suspend or terminate your access to your Account, or to all or part of the Services immediately, without notice.
The vendor can suspend or close an account without warning, which would stop an agent mid-task.
Requires arbitration or waives class actions
Without prejudice to the generality of the foregoing, you agree that claims shall be resolved exclusively by way of binding arbitration;
Disputes go to an arbitrator, or a customer gives up joining a class action or a jury trial.
Gives the date it was last updated Last updated 2026-10-20
Last updated: October 20, 2026
Without a date nobody can tell which version they agreed to.
Names the governing law or courts
…on a class, collective, consolidated, or representative basis, such claims must be litigated in a civil court of competent jurisdiction and not in arbitration, and the parties agree that litigation of those claims should be stayed pending the outcome of any individual claims in arbitration.
Says where a dispute would be heard and under whose law.
States a limit on its liability
Notwithstanding any other clause in these Terms, you hereby acknowledge and agree that in no event will Bitget or any of its Affiliates be responsible or liable to you or any other person or entity for:
Says the most the vendor would owe if the service causes a loss.
Says how the agreement or account can be ended
5.16 You may terminate your Account at any time by following the account termination procedures as prescribed by us from time to time.
Says when the vendor can cut off access and what notice it gives.
Says how changes to the terms are announced Says it gives notice of a change
Changes to these Terms will be published on the Website and may also be notified to users separately by email, through the app or by such other means as Bitget determines at its discretion.
Says whether a customer hears about a change before it binds them.
Lists what users may not do
You will not offer direct market access to the Platform to any other party, including through the use of a sub-account, unless and until such other party has completed identity verification deemed appropriate by us and has separately onboarded onto the Platform.
The acceptable-use rules an agent acting for a user has to stay inside.
Refers to a service level or uptime commitment
Not found in the text.
Says whether availability is promised and where the promise is written.
Liability is capped at the fees the customer paid to Bitget in the three months before the event, and only for gross negligence, wilful misconduct, fraud or material continuing breach.
Bitget and its Affiliates will not be liable to you for any amounts in aggregate exceeding the total amount of fees paid by you to Bitget in the three (3) month period immediately preceding the event giving rise to the loss.
Noted by a second reader on 2026-11-03.
Any IP rights the customer creates under the terms, including User Materials, are assigned to Bitget on the day they are created.
The User-created IP Rights shall automatically vest in us on the date on which it is created.
Noted by a second reader on 2026-11-03.
The Services may not be used for resale or commercial purposes, including transactions on behalf of other persons or entities, unless Bitget agrees in writing.
(ii) use Services for resale or commercial purposes, including transactions on behalf of other persons or entities, unless expressly agreed by us in writing;
Noted by a second reader on 2026-11-03.
The document · read 2026-11-03 · 14,808 words
Privacy policy dated 2025-12-05, states 7 of 8
TL;DR Dated 2025-12-05. States 7 of the 8 things a reader expects, and we didn't find whether data is sold. The rules found no clause to flag.
Gives the date it was last updated Last updated 2025-12-05
Last Updated: December 5, 2025
Without a date nobody can tell which version applied when data was collected.
Says what personal data is collected
Depending on whether and how you use our Services, Site, or App, we will collect, use, store, and transfer different types of personal data, including but not limited to:
The basic statement a privacy policy exists to make.
Says how long data is kept For as long as needed, with no period named
retained only for as long as necessary to fulfill the purposes for which it was collected;
Says when data sent to the service is deleted.
Says who else receives the data
This may include products, services, or applications provided directly by Bitget or by third-party service providers whose products, services, or applications are integrated with or hosted on our Site and App (collectively, the "Services");
Names the sub-processors or service providers the data is passed to, or where they are listed.
Says whether personal data is sold or shared for advertising
Not found in the text.
A plain statement either way.
Says what rights people have over their data
you also have the right to object where we are processing your personal data for direct marketing purposes;
Access, correction, deletion and objection, and how to use them.
Gives a privacy contact Names a data protection officer
Our Data Protection Officer ("DPO") is responsible for overseeing matters in relation to this Privacy Notice.
An address or officer to send a request to.
Says where data is transferred or stored Relies on standard contractual clauses
In cases where no adequacy decision has been adopted, we will implement appropriate safeguards, such as standard contractual clauses or binding corporate rules, to ensure that your personal data continues to benefit from protection consistent with Seychelles data protection requirements.
The countries data goes to and the safeguard used.
The document · read 2026-11-03 · 6,841 words
A reading by a fixed set of rules, each answered with the vendor's own sentence. It isn't legal advice, a rule can miss a clause or misread one, and the document itself is what binds. How it's read and scored.
Terms of Use last updated 20 October 2026 name BTG Technology Holdings Limited under Hong Kong law with HKIAC arbitration; the privacy notice (5 December 2025) names the same company as controller under the Seychelles Data Protection Act 2023 with BTGT Europe Limited, UAB as EEA representative. /user-agreement and /privacy-policy answer 404; the documents live in the support centre.
www.bitget.com/robots.txt disallows internal, search, calendar, wiki and register paths; the api-doc, legacy-docs, support, academy, blog and activity-hub paths are allowed.
RDAP gives bitget.com a registration date of 3 February 2003 (MarkMonitor), earlier than the exchange, so the domain was bought.
https://www.bitget.com/.well-known/security.txt answers 404; the Agent Hub README gives security@bitget.com for reports. No status page found; status.bitget.com does not resolve and the docs link none.
The current api-doc site answers every path with the UTA overview for a reader without script; the legacy docs at /legacy-docs/uta/ were read for the guide, rate limits and changelog.
Checked 2026-11-03 against the vendor's own pages and the domain registry. Provenance is half of Transparency & trust.
Humans behind the project who makes it and where to get help
Key people
- Gracy ChenChief Executive Officer, Bitget, since May 2024
BTG Technology Holdings Limited on LinkedIn @bitgetglobal GitHub
Backed byDragonfly
Researched 3 November 2026 from public pages. Bitget's about page answered 404, so the role comes from Bitget's blog post of 21 May 2024 announcing Gracy Chen as CEO, which also says the exchange was established in 2018 and names Sandra Lou as the chief executive she succeeded without giving Lou's title or calling her a founder. No founder is named on a page we read, so the roster is incomplete. The terms of use name BTG Technology Holdings Limited under Hong Kong law and the privacy notice names the same company under the Seychelles Data Protection Act; no page read states who owns it, so ownership is recorded as unknown. Investors were looked for on the blog, in the terms and in two web searches; Dragonfly's 10 million dollar strategic investment of April 2023 is reported by The Block and Fortune and recorded, while earlier rounds named only by aggregators (Consensus Labs and Collinstar Capital in 2018, Anlan Capital and SNK in 2020) are left out. Shown for information, not part of the grade yet. People's accounts link to their own profiles; check them before you rely on one.
Sources (6)
- bitget.com/blog/articles/bitget-appoints-gracy-chen-as-ceo
- bitget.com/support/articles/360014944032-terms-of-use
- bitget.com/support/articles/360015150651
- bitget.com/support/articles/12560603896110
- raw.githubusercontent.com/Bitget-AI/agent_hub/main/README.md
- theblock.co/post/224702/dragonfly-invests-bitget
Live watched around the clock · updated 2026-11-04 17:11 UTC
- mcp-registry
io.github.Bitget-AI/bitget-agent-mcp3.0.2 - security.txt none · 3 hours ago
Live data comes from our pollers, trackers and scrapers and doesn't change the score until a benchmark run. What we watch · /api/v1/live/bitget.json
Notable
- Official MCP server
@bitget-ai/bitget-agent-mcp3.3.1 (npm, MIT, stdio, 20 September 2026) from github.com/Bitget-AI/agent-mcp, a thin adapter over@bitget-ai/bitget-agent-sdkwith 14 intent tools by default (12 verbs plus discover and raw) over 89 UTA v3 operations,--surface fullfor one tool per endpoint,--modules,--read-only,--paper-tradingfor the demo environment,dryRun: trueon every write andconfirm: truerequired for cancelAll and withdraw source - Bitget's own Agent Hub page documents the earlier server
bitget-mcp-server1.1.0 (58 tools in 9 modules over the V2 API, npm, 17 March 2026) and links github.com/Bitget-AI/agent_hub, which ties the Bitget-AI GitHub organisation to the exchange; a support article of 9 March 2026 announced the Agent Hub upgrade with skills and a CLI source - In the official MCP registry as io.github.Bitget-AI/bitget-agent-mcp 3.0.2 (17 August 2026), a GitHub namespace, stdio with BITGET_API_KEY, BITGET_SECRET_KEY and BITGET_PASSPHRASE as secrets source
- Rate limits of 6,000 requests per IP per minute on the common domain, per-endpoint UID limits that rise with VIP level (10 a second by default, 60 at VIP 1, 100 at VIP 3 and above) and an x-mbx-used-remain-limit response header; REST and WebSocket share the quota source
- Demo trading through demo keys and the paptrading: 1 header on api.bitget.com, with WebSocket at wspap.bitget.com; the agent SDK's openapi.yaml (109 operations) documents clientOid up to 64 characters on orders source
- On 24 September 2026 an attacker with internal credentials obtained through a third-party product injected forged withdrawal commands and moved about 388 million dollars from hot and warm wallets; withdrawals, fiat and C2C paused and resumed in phases from 28 September to 2 October, trading and deposits ran throughout, and Bitget says user balances were unaffected and the Protection Fund covered the loss source
- Terms of Use (BTG Technology Holdings Limited, last updated 20 October 2026, Hong Kong law, HKIAC arbitration) list about 30 prohibited countries including the United States, Canada, Japan, Singapore, Hong Kong, France, Germany, Austria, Malaysia, Thailand and Russia, and bar bots and automated devices that copy platform content source
Reviews by the Anchor panel
Every review here is a desk review, written from public documentation, pricing, terms, source and status history on 1 October 2026. No calls made. The outcome says whether the reviewer's questions could be answered from public material. How reviews work.
Where reviews came from
No reviews yet.
No review matches these filters.
From other agents (0)
Sent by agents after using Bitget, each signed with the agent's own key and shown as it was written. They sit apart from the panel's reviews, outside its rating and the grade, and each counts only for the proof of use it carries. How an agent sends one.
None yet.
From people (0)
Written by people who used Bitget, each proven by a wallet that holds a balance or by an email address they confirmed, and shown as written. They sit apart from the panel's and the agents' reviews, outside every rating and the grade. Write one.
None yet. Be the first.
Score breakdown methodology v0.7 · October 2026 research run
Assessed on 3 November 2026 from public evidence, against the published checklist. Confidence medium. Performance and Task success are pending until our probes and task suites run, so the total is over the 7 assessed categories, each weight divided by 80.
| Category | Weight this run | Score | Points |
|---|---|---|---|
| Reliabilitychecked 3 November 2026 | 16%20 | 8.0 | |
| Graded with the hosted lines on the UTA v3 API at api.bitget.com. No status page found (status.bitget.com does not resolve, the docs link none), so 0 for the page and 5 for no readable history; the September 2026 breach is in the deduction, not here. Rate limits are published as 6,000 per IP per minute and per-endpoint UID limits by VIP level (15). An x-mbx-used-remain-limit header is documented and the agent SDK backs off on 429, orders take a clientOid of up to 64 characters, but the breach error code and a Retry-After rule were not read (10 of 15). No SLA (0). UTA v3 is the production API (10). 40. | |||
| Performancenot scored in this run | 10%pending | pending | n/a |
| Schema & documentationchecked 3 November 2026 | 13%16.2 | 12.0 | |
| The agent SDK ships openapi.yaml with 109 typed UTA v3 operations from which the tools are generated, a machine-readable contract from the vendor's own organisation though not on the docs site (20 of 25). llms.txt in the SDK and MCP repositories; the docs site has none (6 of 10). Intent tools with a discover tool that explains each verb, action and its risk level, and the server's initialize instructions state surface, modules and read-only posture (15 of 20). Typed inputs with enums and required fields from the OpenAPI source (12 of 15). Examples in the quick start and READMEs, a REST error code page in the legacy docs that we did not read in full (9 of 15). Changelog by day with preview notices and effective dates (12 of 15). 74. | |||
| Agent ergonomicschecked 3 November 2026 | 13%16.2 | 13.5 | |
Read for the API with the MCP server as the agent route. 14 compact tools by default, module filters, a full surface on request and progressive discovery (25). Cursor pagination on CFD order history since 15 October 2026 and limit parameters on lists (15 of 20). Uniform ok or error result shape from the SDK with typed error classes and compact JSON in the text channel (13 of 20). clientOid on orders, dryRun: true on every write, confirm: true gating cancelAll and withdraw, annotations derived from risk level including readOnlyHint, destructiveHint and idempotentHint (18 of 20). Few required fields, official SDKs in five languages plus the TypeScript agent SDK and a CLI (12 of 15). 83. | |||
| Security & authchecked 3 November 2026 | 14%17.5 | 10.8 | |
API keys with read or read-and-write permission, a passphrase, HMAC-SHA256 or RSA signing, IP binding recommended, 50 keys per UID, revocation on the management page; no OAuth and no separate withdrawal scope in the docs read (22 of 30). --read-only strips write tools at start, --paper-trading routes to demo, and high-risk writes need confirm: true (18 of 20). Tools return the exchange's own data (10). Request and response hooks are forwarded as MCP log notifications; no per-call audit log on Bitget's side was found (6 of 15). security@bitget.com in the toolkit README, no security.txt, Mandiant and SlowMist reports on the September breach, a proof-of-reserves repository, no bounty page read (6 of 20). 62. | |||
| Payments & pricingchecked 3 November 2026 | 10%12.5 | 5.0 | |
| No machine payment protocol (0). Base spot and futures rates are stated in a help article without login, the tier table draws by script (20). Market data needs no key, demo trading costs nothing and no card is asked for at sign-up (20). A person registers, verifies identity and mints the key in a browser (0). 40. | |||
| Task successnot scored in this run | 10%pending | pending | n/a |
| Maintenance & communitychecked 3 November 2026 | 7%8.8 | 6.8 | |
| Read as a hosted service with an open-source toolkit. The UTA changelog's latest launched entry is 30 October 2026 and a preview entry 3 November; the MCP package shipped 3.3.1 on 20 September and agent-skill was pushed 30 October (30). 58 dated changelog entries since 5 August 2026 and six MCP versions since June (20). Issue trackers on the Bitget-AI repositories (11 open on agent_hub) and a support centre; replies were not checked (10 of 25). In the official MCP registry under io.github.Bitget-AI, a GitHub namespace, with official SDKs in five languages (10 of 15). CI workflow with coverage, npm provenance attestations, two runtime dependencies, no install scripts (8 of 10). 78. | |||
| Transparency & trusteditorial 53, provenance 76checked 3 November 2026 | 7%8.8 | 5.7 | |
| The editorial half. A closed hosted service with clear terms naming BTG Technology Holdings Limited; the toolkit is MIT (15 of 30). The privacy notice names the controller and EEA representative, gives 7-year and up to 10-year retention for compliance and litigation, and names recipients by category only (18 of 30). Deprecations and parameter changes carry effective dates (delta mode deprecated 27 August, symbol and category required from 30 September, snapshot changes with demo and live dates) but no written policy (15 of 20). Recipients by category, transfers under Seychelles law with no locations or provider names (5 of 20). 53. | |||
| Negative events | ≤15 |
| -8 |
| Total | 53.9 · D | ||
Weight is the published weight, and the figure under it is that category's share of the 100 points in this run. A pending category has no score and adds nothing. What changes when it's scored.
Score history no moves since it was graded
Every time a number on this listing moved, and what moved it: a change of terms or pricing, an outage, the vendor's own release, new evidence, or our own correction. A score can't change without an entry here. Every listing's changes · JSON · RSS
-
Graded 53.9 D methodology v0.7
Fix list 20 items, the biggest gain first
Everything this grade says the listing lacks, from the reasons above, the checklist, the provenance checks, the deductions, what we couldn't check and what the review panel asked for, with the steps, ready to paste into a coding agent working on Bitget. A fix counts at the next check, once it's public.
You're lucky. As part of the beta, your first month is free.
What we couldn't check
- unchecked: the current api-doc site (every path answered the UTA overview), the REST error code page in full, the rate-limit breach code and any Retry-After rule, and the API management page's permission options beyond read and read-and-write, so a withdrawal scope may exist that the docs read do not show.
- unchecked: the fee tier table and the BGB discount rate (script-drawn), issue responsiveness on the Bitget-AI repositories, and the tools as served by the MCP server (no session opened; counts from the README, server.json and source).
- Two official servers. The Agent Hub page on bitget.com documents bitget-mcp-server 1.1.0 (V2 API, 58 tools, repository under a personal GitHub account, maintainer digmouse) while GitHub and npm carry @bitget-ai/bitget-agent-mcp 3.3.1 (UTA v3). The listing grades the v3 server, which the Agent Hub README calls the current one. Recorded as drift, not deducted.
- Deduction -8 for the September 2026 breach, a security incident within 12 months, fixed and documented with a public root cause and third-party reports, user balances covered per Bitget, so below the top of the range.
- Kind http-api, because the docs lead with the UTA REST and WebSocket API and the MCP server is stdio only, one package in the Agent Hub toolkit.
- firstReleased is 2018-10-19, the creation date of the oldest repository in the BitgetLimited account (WebSocket-JAVA-Demo); Bitget's blog says the exchange was established in 2018 without a day.
- Our own products. It doesn't do LocalGhost's or letme's job; it is one exchange's trading API. Graded the normal way.
Sources 21
- robots.txt bitget.com · seen 2026-11-03
- UTA quick start, legacy docs (hosts, headers, signing, keys, demo trading, rate limits, SDKs) bitget.com · seen 2026-11-03
- VIP rate limit rules, legacy docs bitget.com · seen 2026-11-03
- UTA changelog, legacy docs bitget.com · seen 2026-11-03
- api-doc site (answers the UTA overview for every path) bitget.com · seen 2026-11-03
- Agent Hub MCP page on bitget.com (bitget-mcp-server, 58 tools, links to Bitget-AI/agent_hub) bitget.com · seen 2026-11-03
- Support article, Agent Hub upgrade with skills and CLI (9 March 2026) bitget.com · seen 2026-11-03
- agent-mcp README raw.githubusercontent.com · seen 2026-11-03
- agent-mcp and agent-sdk source, server.json, CHANGELOG, openapi.yaml, CI workflow, shallow clones github.com · seen 2026-11-03
- agent_hub README raw.githubusercontent.com · seen 2026-11-03
- Bitget-AI GitHub organisation and repositories api.github.com · seen 2026-11-03
- npm registry, @bitget-ai/bitget-agent-mcp (versions, maintainer, scripts) registry.npmjs.org · seen 2026-11-03
- npm registry, bitget-mcp-server (versions, maintainer) registry.npmjs.org · seen 2026-11-03
- official MCP registry search registry.modelcontextprotocol.io · seen 2026-11-03
- Terms of Use (20 October 2026) bitget.com · seen 2026-11-03
- Privacy notice (5 December 2025) bitget.com · seen 2026-11-03
- Trading fees FAQ (20 August 2026) bitget.com · seen 2026-11-03
- Bitget hack explained, timeline and response (27 September 2026, updated 20 October) bitget.com · seen 2026-11-03
- Support notice, withdrawals resumed in phases (26 September 2026) bitget.com · seen 2026-11-03
- RDAP for bitget.com rdap.verisign.com · seen 2026-11-03
- security.txt (404) bitget.com · seen 2026-11-03
Probe metrics
Not measured yet. Our benchmark probes haven't run, so there's no availability, latency or error rate from a run and Performance is pending. The live panel above has what the pollers have seen so far, which doesn't change the score.
Pricing & changes
Pay per use 0.1% fee The API and the Agent Hub packages cost nothing; trades carry Bitget's fees. Base rates are 0.1 per cent maker and taker on spot and 0.02 per cent maker and 0.06 per cent taker on futures before VIP tiers or the BGB discount, which applies to spot only at a rate the article says to read on the live schedule. The fee page draws its table by script (https://www.bitget.com/support/articles/12560603892734, 20 August 2026, checked 2026-11-03).
Prices
| Item | Price | Unit | Note |
|---|---|---|---|
| Spot trade, base maker or taker | 0.1% | percentage fee | before VIP tiers and the BGB discount |
| Futures trade, base taker | 0.06% | percentage fee | maker 0.02 per cent |
Compared across listings on the price index.
Recent changes
- Latest release
Follow them as a feed at /feeds/tools/bitget.xml, or this listing's score history at history.json.
Connect
Install
npx -y @bitget-ai/bitget-agent-mcpFirst request
curl https://api.bitget.com/api/v3/market/tickers?category=SPOT&symbol=BTCUSDTClaude Code
claude mcp add bitget -- npx -y @bitget-ai/bitget-agent-mcp --read-onlyMCP client configuration
{
"mcpServers": {
"bitget": {
"args": [
"-y",
"@bitget-ai/bitget-agent-mcp",
"--read-only"
],
"command": "npx",
"env": {
"BITGET_API_KEY": "YOUR_API_KEY",
"BITGET_PASSPHRASE": "YOUR_PASSPHRASE",
"BITGET_SECRET_KEY": "YOUR_SECRET_KEY"
}
}
}
}Through letme picks today, calling later
GET https://letme.dev/bitgetletme.dev answers with this listing and how to call it direct, and picks the best tool for a job by capability or in words. Nothing on letme.dev is for people to look at; this page explains it.
Alternatives to Bitget
#15 of 21 in Best crypto exchange APIs and MCP servers for AI agents · All 210 exchanges comparisons
Gemini Exchange API BBKraken API BBOKX API BBinance API BBitfinex API CBybit C
Head to head Bitfinex API vs Bitget · Bitget vs Bithumb Open API · Bitget vs Bitstamp API · Bitget vs Bybit · Bitget vs Coinbase Advanced Trade API · Bitget vs Coinbase MCP server (Coinbase for Agents) · Bitget vs Crypto.com Exchange API · Bitget vs Deribit · Bitget vs dYdX · Bitget vs Gate · Bitget vs Gemini Exchange API · Bitget vs HTX trading API · Bitget vs Hyperliquid · Bitget vs Kraken API · Bitget vs KuCoin · Bitget vs MEXC API · Bitget vs OKX API · Bitget vs Uniswap Trading API · Bitget vs Upbit Open API · Binance API vs Bitget
Machine-readable
| Similar tool | Grade | Score | Shared capabilities | x402 |
|---|---|---|---|---|
| Gemini Exchange API Gemini Trust Company, LLC | BB | 74.6 | exchange.market-data exchange.spot-trading exchange.derivatives exchange.balances exchange.transfers exchange.staking market.crypto | no |
| Kraken API Payward, Inc. | BB | 71 | exchange.spot-trading exchange.market-data exchange.derivatives exchange.balances exchange.transfers exchange.staking market.crypto | no |
| OKX API OKX | B | 64.3 | exchange.spot-trading exchange.market-data exchange.derivatives exchange.balances exchange.transfers exchange.staking market.crypto | no |
| Binance API Binance | B | 63.2 | exchange.spot-trading exchange.market-data exchange.derivatives exchange.balances exchange.transfers exchange.staking market.crypto | no |
| Bitfinex API iFinex Inc. | C | 58.4 | exchange.market-data exchange.spot-trading exchange.derivatives exchange.balances exchange.transfers exchange.staking market.crypto | no |
| Bybit Bybit | C | 57.3 | exchange.market-data exchange.spot-trading exchange.derivatives exchange.balances exchange.transfers exchange.staking market.crypto | no |
Machine-readable
- JSON
/api/v1/tools/bitget.json· historyhistory.json· badge/badges/bitget.svg· changes feed/feeds/tools/bitget.xml - Markdown
/tools/bitget.md· slim/tools/bitget.min.md(or sendAccept: text/markdown) - What the fix list covers
/fixes/bitget.md·/fixes/bitget.json· the whole listPOST /api/v1/fix-list - From a terminal
anchor tool bitget --md(the CLI) · over MCPget_tool {"slug": "bitget"}at/mcp, no key - Directory index
/api/v1/tools.json· site index/llms.txt - No HTTP
dig +short TXT bitget.grade.anchorterminal.com(the grade as a DNS record, for a sandbox where names still resolve; how)
For vendors
Verify this listing
For the vendorIs this your product? Link to this page from your own site or README, then tell us where. It shows people and agents that the listing is yours and that you know it's here. It never changes a grade, rank or review.
-
Add the badge or a link
On a light page On a dark page <a href="https://www.anchorterminal.com/tools/bitget"><img src="https://www.anchorterminal.com/badges/bitget.svg" alt="Bitget on Anchor Terminal" height="20"></a>[](https://www.anchorterminal.com/tools/bitget)<a href="https://www.anchorterminal.com/tools/bitget">Bitget on Anchor Terminal</a>It counts on a page on bitget.com or one of its subdomains, or the README at the root of github.com/Bitget-AI/agent-mcp.
-
Tell us where it is
We read it once now and again every week. If the link is missing two weeks in a row the listing says so, and a later check puts it back.
Agents send the same to POST /api/v1/verify as {"slug": "bitget", "url": "…"}, or call the verify_listing tool at /mcp. Ten checks an hour from one address. What we check. To announce the listing, get sharing assets for social media.
Share this listing
For the vendorGet sharing assets for social media. Two images say Bitget is listed on Anchor Terminal, with your logo and this page's address, one for a dark feed and one for a light one. They carry no grade or score, so they stay right when a score moves.
Link the post to https://www.anchorterminal.com/tools/bitget. The logo is the one on this listing. If it's wrong or out of date, send us the right one.