{ "data": { "similar": [ { "grade": "BB", "json": "https://www.anchorterminal.com/tools/gemini-exchange.json", "name": "Gemini Exchange API", "score": 74.6, "shared": [ "exchange.market-data", "exchange.spot-trading", "exchange.derivatives", "exchange.balances", "exchange.transfers", "market.crypto" ], "slug": "gemini-exchange" }, { "grade": "BB", "json": "https://www.anchorterminal.com/tools/kraken.json", "name": "Kraken API", "score": 71, "shared": [ "exchange.spot-trading", "exchange.market-data", "exchange.derivatives", "exchange.balances", "exchange.transfers", "market.crypto" ], "slug": "kraken" }, { "grade": "B", "json": "https://www.anchorterminal.com/tools/okx.json", "name": "OKX API", "score": 64.3, "shared": [ "exchange.spot-trading", "exchange.market-data", "exchange.derivatives", "exchange.balances", "exchange.transfers", "market.crypto" ], "slug": "okx" }, { "grade": "B", "json": "https://www.anchorterminal.com/tools/binance.json", "name": "Binance API", "score": 63.2, "shared": [ "exchange.spot-trading", "exchange.market-data", "exchange.derivatives", "exchange.balances", "exchange.transfers", "market.crypto" ], "slug": "binance" }, { "grade": "C", "json": "https://www.anchorterminal.com/tools/deribit.json", "name": "Deribit", "score": 59, "shared": [ "exchange.derivatives", "exchange.market-data", "exchange.spot-trading", "exchange.balances", "exchange.transfers", "market.crypto" ], "slug": "deribit" }, { "grade": "C", "json": "https://www.anchorterminal.com/tools/bitfinex.json", "name": "Bitfinex API", "score": 58.4, "shared": [ "exchange.market-data", "exchange.spot-trading", "exchange.derivatives", "exchange.balances", "exchange.transfers", "market.crypto" ], "slug": "bitfinex" } ], "tool": { "slug": "coinbase-advanced-trade", "name": "Coinbase Advanced Trade API", "vendor": "Coinbase, Inc.", "vendorUrl": "https://docs.cdp.coinbase.com/advanced-trade/docs/welcome", "kind": "http-api", "category": "crypto-exchanges", "summary": "Coinbase's Advanced Trade API is the trading API of a Coinbase account, with REST, WebSocket feeds and a static sandbox for spot, US futures and, since October 2026, perpetuals on a Deribit-based gateway, authenticated by CDP API keys.", "url": "https://www.anchorterminal.com/tools/coinbase-advanced-trade", "markdownUrl": "https://www.anchorterminal.com/tools/coinbase-advanced-trade.md", "slimMarkdownUrl": "https://www.anchorterminal.com/tools/coinbase-advanced-trade.min.md", "jsonUrl": "https://www.anchorterminal.com/api/v1/tools/coinbase-advanced-trade.json", "dns": "coinbase-advanced-trade.grade.anchorterminal.com", "repo": "https://github.com/coinbase/coinbase-advanced-py", "license": "Proprietary hosted service under the Coinbase User Agreement, which answered a bot check and wasn't read. The official Python SDK coinbase-advanced-py is on GitHub", "transports": [], "packages": [ { "registry": "pypi", "name": "coinbase-advanced-py" } ], "auth": "mixed", "authNotes": "CDP secret API key made in the CDP portal, with view, trade and transfer permissions, a portfolio restriction and an optional IP allowlist. Each request carries a JWT signed with ECDSA (ES256) that expires after 2 minutes, so a new token is minted per call. Ed25519 keys are not accepted by Coinbase App APIs. The OpenAPI spec also lists OAuth2 with wallet:* scopes for acting on other people's accounts. Keys are regenerated or disabled in the portal. Six public market endpoints need no key (https://docs.cdp.coinbase.com/coinbase-app/authentication-authorization/api-key-authentication.md, checked 2026-11-03).", "pricing": "usage", "pricingNotes": "The API costs nothing to call. Trades carry Advanced Trade maker and taker fees by 30-day volume tier; the fee page at coinbase.com/advanced-fees and help.coinbase.com both answered our reader with 403 on 3 November 2026, so the lowest tier's rates are unread. The sandbox and the public market endpoints need no account.", "priceSummary": "Pay per use", "where": "local", "x402": { "level": "no", "evidence": "No x402, MPP or L402 on the Advanced Trade endpoints in the OpenAPI spec or docs (checked 2026-11-03). Coinbase's account MCP server, listed as coinbase-mcp, pays x402 resources as a buyer; that is a separate surface.", "endpoints": [] }, "toolCount": null, "popularity": { "githubStars": null, "npmWeekly": null, "pypiWeekly": null, "asOf": "2026-11-03" }, "docsUrl": "https://docs.cdp.coinbase.com/advanced-trade/docs/welcome", "llmsTxt": "https://docs.cdp.coinbase.com/llms.txt", "openapi": "https://docs.cdp.coinbase.com/api-reference/advanced-trade-api/rest-api/advanced-trade-spec.yaml", "capabilities": [ "exchange.spot-trading", "exchange.market-data", "exchange.derivatives", "exchange.balances", "exchange.transfers", "market.crypto" ], "tags": [ "hosted", "official", "closed-source", "api-key", "oauth", "openapi", "llms-txt", "sandbox", "status-page", "python", "usage-priced", "no-card", "bug-bounty" ], "lastRelease": "2026-10-01", "graded": true, "anchor": { "graded": true, "score": 61.7, "grade": "C", "agentReady": false, "rank": 493, "ranked": true, "rankOf": 1349, "categoryRank": 7, "methodology": "0.7", "run": "2026-10-01", "scores": { "ergonomics": 73, "maintenance": 57, "payments": 20, "reliability": 58, "schema": 80, "security": 68, "transparency": 67 }, "pending": [ "performance", "tasks" ], "breakdown": [ { "key": "reliability", "name": "Reliability", "weight": 16, "effectiveWeight": 20, "score": 58, "points": 11.6, "reason": "Read with the hosted lines. status.coinbase.com is a Statuspage site with Coinbase Advanced Trade, API, US Derivatives and International Derivatives components (20). The incidents feed we could read runs from 16 September to 3 November 2026. In it Advanced Trade was degraded for 25 minutes on 21 September, the website had a 3-minute major on 14 October, converts were down 1 hour 4 minutes on 26 October, and no incident named the API; 5 August to 15 September was beyond the feed, so minor only for the seven weeks read (15 of 30). No REST rate limit with numbers was found; the older rate-limits page answers 404 and llms.txt lists none, while the WebSocket page gives 8 connections and 8 unauthenticated messages per second per IP (5 of 15). Orders take a client_order_id, but no 429 or Retry-After guidance was found for Advanced Trade (8 of 15). No SLA (0). REST and WebSocket are generally available; the Global Derivatives gateway is a month old and not marked beta (10). 20 + 15 + 5 + 8 + 0 + 10 = 58.", "checked": "2026-11-03" }, { "key": "performance", "name": "Performance", "weight": 10, "effectiveWeight": 0, "pending": true, "points": 0, "reason": "Pending. Latency is measured per call by our probes, which haven't run yet, so this run doesn't score it. Its weight is shared across the assessed categories until the first probe window closes." }, { "key": "schema", "name": "Schema \u0026 documentation", "weight": 13, "effectiveWeight": 16.25, "score": 80, "points": 13, "reason": "Public OpenAPI 3.1 spec (45 paths, 51 operations) and an AsyncAPI document (25). llms.txt and a Markdown twin of every docs page (10). Every operation has a summary and description, some one line, several with multi-sentence guidance for equities (14 of 20). Enums on product_type, granularity, order_status, time_in_forces, order_types, order_side and sort_by, with defaults (13 of 15). Examples in the docs and the sandbox's simulated errors, but the spec documents only a default error referencing grpc.gateway.runtime.Error, with no 4xx or 429 shapes (8 of 15). Paths carry /api/v3, the CDP changelog is dated, and the INTX retirement was announced with a date, but the spec's info.version is 0.1 and the October gateway change has no changelog entry (10 of 15). 25 + 10 + 14 + 13 + 8 + 10 = 80.", "checked": "2026-11-03" }, { "key": "ergonomics", "name": "Agent ergonomics", "weight": 13, "effectiveWeight": 16.25, "score": 73, "points": 11.86, "reason": "Product lists filter by product_type and product_ids with limit and offset, candles take a granularity, but fields cannot be selected and the docs warn that product lists run to hundreds of entries (15 of 25). Cursor pagination with limit on orders and fills, filters by status, product and time (16 of 20). Error codes such as INSUFFICIENT_FUND, ORDER_NOT_FOUND and PERMISSION_DENIED are documented and can be simulated in the sandbox, though the spec gives no shapes (14 of 20). client_order_id on every order; no idempotency key on other writes (16 of 20). Few required fields, an official Python SDK and sample SDKs in three languages, but each request needs a freshly signed JWT (12 of 15). 15 + 16 + 14 + 16 + 12 = 73.", "checked": "2026-11-03" }, { "key": "security", "name": "Security \u0026 auth", "weight": 14, "effectiveWeight": 17.5, "score": 68, "points": 11.9, "reason": "CDP keys with view, trade and transfer permissions, a portfolio restriction, an optional IP allowlist, revocation in the portal, ES256 JWTs that expire after 2 minutes, and OAuth2 with wallet:* scopes for other people's accounts; no key expiry (28 of 30). View-only keys and portfolio scoping limit an agent, and transfer is a separate permission, but no withdrawal address allow-list for API keys and no confirmation step were found (14 of 20). The API returns no untrusted content (10). key_permissions reports a key's scope and account activity shows in the app, but no per-call log was found (6 of 15). HackerOne bug bounty named in a security.txt that expired on 1 June 2024; certifications unread behind a bot check (10 of 20). 28 + 14 + 10 + 6 + 10 = 68.", "checked": "2026-11-03" }, { "key": "payments", "name": "Payments \u0026 pricing", "weight": 10, "effectiveWeight": 12.5, "score": 20, "points": 2.5, "reason": "No machine payment protocol on the API (0). The fee schedule answered a bot check on 3 November 2026, so no per-trade price was read, and the docs give none (0 of 20, unchecked). Six public market endpoints and the sandbox need no key or card (20). A person signs up, passes verification and mints a key in the portal (0). 0 + 0 + 20 + 0 = 20.", "checked": "2026-11-03" }, { "key": "tasks", "name": "Task success", "weight": 10, "effectiveWeight": 0, "pending": true, "points": 0, "reason": "Pending. Task success needs the category task suites run through each tool, which haven't run yet, so this run doesn't score it. Its weight is shared across the assessed categories until then. A data provider's data-quality score is published on its listing now and becomes half of this category when it's scored." }, { "key": "maintenance", "name": "Maintenance \u0026 community", "weight": 7, "effectiveWeight": 8.75, "score": 57, "points": 4.99, "reason": "Read as a closed hosted service. The last change to the API itself is the Global Derivatives gateway and INTX retirement of 1 October 2026, 33 days before this check; the Python SDK's v2.0.0rc1 is from 30 September (20 of 30). Dated changes in 90 days are the 1 October migration and the agents entries of 17 and 21 August, which run through Advanced Trade (12 of 20). A public changelog and a CDP Discord; SDK issues not read (8 of 15). Official Python SDK current, the rest samples (12 of 15). SDK CI not read (5 of 10). 20 + 12 + 8 + 12 + 5 = 57.", "checked": "2026-11-03" }, { "key": "transparency", "name": "Transparency \u0026 trust", "weight": 7, "effectiveWeight": 8.75, "score": 67, "points": 5.86, "note": "editorial 42, provenance 92", "reason": "The editorial half. A closed service whose user agreement answered a bot check; the OpenAPI spec is public and the Python SDK is open on GitHub (12 of 30). Privacy facts per the coinbase-cdp-agentkit check of 1 October 2026 (Coinbase, Inc., processing countries, retention tied to need without numbers), not re-read (10 of 30). INTX endpoints retired on 1 October 2026 with a dated notice and a read-only grace period (12 of 20). Processing countries and provider categories per the same earlier check, no subprocessor list (8 of 20). 12 + 10 + 12 + 8 = 42.", "checked": "2026-11-03" } ], "assessment": { "date": "2026-11-03", "basis": "public evidence", "confidence": "medium", "notes": { "ergonomics": "Product lists filter by product_type and product_ids with limit and offset, candles take a granularity, but fields cannot be selected and the docs warn that product lists run to hundreds of entries (15 of 25). Cursor pagination with limit on orders and fills, filters by status, product and time (16 of 20). Error codes such as INSUFFICIENT_FUND, ORDER_NOT_FOUND and PERMISSION_DENIED are documented and can be simulated in the sandbox, though the spec gives no shapes (14 of 20). client_order_id on every order; no idempotency key on other writes (16 of 20). Few required fields, an official Python SDK and sample SDKs in three languages, but each request needs a freshly signed JWT (12 of 15). 15 + 16 + 14 + 16 + 12 = 73.", "maintenance": "Read as a closed hosted service. The last change to the API itself is the Global Derivatives gateway and INTX retirement of 1 October 2026, 33 days before this check; the Python SDK's v2.0.0rc1 is from 30 September (20 of 30). Dated changes in 90 days are the 1 October migration and the agents entries of 17 and 21 August, which run through Advanced Trade (12 of 20). A public changelog and a CDP Discord; SDK issues not read (8 of 15). Official Python SDK current, the rest samples (12 of 15). SDK CI not read (5 of 10). 20 + 12 + 8 + 12 + 5 = 57.", "payments": "No machine payment protocol on the API (0). The fee schedule answered a bot check on 3 November 2026, so no per-trade price was read, and the docs give none (0 of 20, unchecked). Six public market endpoints and the sandbox need no key or card (20). A person signs up, passes verification and mints a key in the portal (0). 0 + 0 + 20 + 0 = 20.", "reliability": "Read with the hosted lines. status.coinbase.com is a Statuspage site with Coinbase Advanced Trade, API, US Derivatives and International Derivatives components (20). The incidents feed we could read runs from 16 September to 3 November 2026. In it Advanced Trade was degraded for 25 minutes on 21 September, the website had a 3-minute major on 14 October, converts were down 1 hour 4 minutes on 26 October, and no incident named the API; 5 August to 15 September was beyond the feed, so minor only for the seven weeks read (15 of 30). No REST rate limit with numbers was found; the older rate-limits page answers 404 and llms.txt lists none, while the WebSocket page gives 8 connections and 8 unauthenticated messages per second per IP (5 of 15). Orders take a client_order_id, but no 429 or Retry-After guidance was found for Advanced Trade (8 of 15). No SLA (0). REST and WebSocket are generally available; the Global Derivatives gateway is a month old and not marked beta (10). 20 + 15 + 5 + 8 + 0 + 10 = 58.", "schema": "Public OpenAPI 3.1 spec (45 paths, 51 operations) and an AsyncAPI document (25). llms.txt and a Markdown twin of every docs page (10). Every operation has a summary and description, some one line, several with multi-sentence guidance for equities (14 of 20). Enums on product_type, granularity, order_status, time_in_forces, order_types, order_side and sort_by, with defaults (13 of 15). Examples in the docs and the sandbox's simulated errors, but the spec documents only a default error referencing grpc.gateway.runtime.Error, with no 4xx or 429 shapes (8 of 15). Paths carry /api/v3, the CDP changelog is dated, and the INTX retirement was announced with a date, but the spec's info.version is 0.1 and the October gateway change has no changelog entry (10 of 15). 25 + 10 + 14 + 13 + 8 + 10 = 80.", "security": "CDP keys with view, trade and transfer permissions, a portfolio restriction, an optional IP allowlist, revocation in the portal, ES256 JWTs that expire after 2 minutes, and OAuth2 with wallet:* scopes for other people's accounts; no key expiry (28 of 30). View-only keys and portfolio scoping limit an agent, and transfer is a separate permission, but no withdrawal address allow-list for API keys and no confirmation step were found (14 of 20). The API returns no untrusted content (10). key_permissions reports a key's scope and account activity shows in the app, but no per-call log was found (6 of 15). HackerOne bug bounty named in a security.txt that expired on 1 June 2024; certifications unread behind a bot check (10 of 20). 28 + 14 + 10 + 6 + 10 = 68.", "transparency": "The editorial half. A closed service whose user agreement answered a bot check; the OpenAPI spec is public and the Python SDK is open on GitHub (12 of 30). Privacy facts per the coinbase-cdp-agentkit check of 1 October 2026 (Coinbase, Inc., processing countries, retention tied to need without numbers), not re-read (10 of 30). INTX endpoints retired on 1 October 2026 with a dated notice and a read-only grace period (12 of 20). Processing countries and provider categories per the same earlier check, no subprocessor list (8 of 20). 12 + 10 + 12 + 8 = 42." }, "sources": [ { "what": "robots.txt (docs.cdp.coinbase.com)", "url": "https://docs.cdp.coinbase.com/robots.txt", "seen": "2026-11-03" }, { "what": "Advanced Trade welcome page", "url": "https://docs.cdp.coinbase.com/advanced-trade/docs/welcome.md", "seen": "2026-11-03" }, { "what": "REST API overview (hosts, caching, INTX retirement)", "url": "https://docs.cdp.coinbase.com/coinbase-app/advanced-trade-apis/rest-api.md", "seen": "2026-11-03" }, { "what": "API key authentication (permissions, IP allowlist, ES256 JWT)", "url": "https://docs.cdp.coinbase.com/coinbase-app/authentication-authorization/api-key-authentication.md", "seen": "2026-11-03" }, { "what": "key permissions endpoint", "url": "https://docs.cdp.coinbase.com/api-reference/advanced-trade-api/rest-api/data-api/get-api-key-permissions.md", "seen": "2026-11-03" }, { "what": "sandbox", "url": "https://docs.cdp.coinbase.com/coinbase-app/advanced-trade-apis/sandbox.md", "seen": "2026-11-03" }, { "what": "WebSocket overview", "url": "https://docs.cdp.coinbase.com/coinbase-app/advanced-trade-apis/websocket/websocket-overview.md", "seen": "2026-11-03" }, { "what": "WebSocket rate limits", "url": "https://docs.cdp.coinbase.com/coinbase-app/advanced-trade-apis/websocket/websocket-rate-limits.md", "seen": "2026-11-03" }, { "what": "REST rate limits page (404)", "url": "https://docs.cdp.coinbase.com/coinbase-app/advanced-trade-apis/rate-limits.md", "seen": "2026-11-03" }, { "what": "API reference introduction (hosts)", "url": "https://docs.cdp.coinbase.com/api-reference/advanced-trade-api/rest-api/introduction.md", "seen": "2026-11-03" }, { "what": "OpenAPI spec", "url": "https://docs.cdp.coinbase.com/api-reference/advanced-trade-api/rest-api/advanced-trade-spec.yaml", "seen": "2026-11-03" }, { "what": "API reference index (206 pages)", "url": "https://docs.cdp.coinbase.com/_llms/api-reference/coinbase-advanced-trade-api.txt", "seen": "2026-11-03" }, { "what": "llms.txt", "url": "https://docs.cdp.coinbase.com/llms.txt", "seen": "2026-11-03" }, { "what": "CDP changelog", "url": "https://docs.cdp.coinbase.com/get-started/changelog.md", "seen": "2026-11-03" }, { "what": "status incidents feed (16 September to 3 November 2026)", "url": "https://status.coinbase.com/api/v2/incidents.json", "seen": "2026-11-03" }, { "what": "security.txt (expired 1 June 2024)", "url": "https://www.coinbase.com/.well-known/security.txt", "seen": "2026-11-03" }, { "what": "Python SDK releases", "url": "https://api.github.com/repos/coinbase/coinbase-advanced-py/releases", "seen": "2026-11-03" }, { "what": "official MCP registry search", "url": "https://registry.modelcontextprotocol.io/v0/servers?search=coinbase", "seen": "2026-11-03" }, { "what": "fee page (403)", "url": "https://www.coinbase.com/advanced-fees", "seen": "2026-11-03" }, { "what": "help centre robots.txt (403)", "url": "https://help.coinbase.com/robots.txt", "seen": "2026-11-03" } ], "openQuestions": [ "One listing or two. coinbase-mcp (agent wallets) is the OAuth MCP server on a person's Coinbase account for allowlisted clients; this listing is the key-based API any program can call, with a sandbox, an OpenAPI spec and its own permissions. They differ in auth, audience and surface, so two listings; the better fix for the overlap would be moving coinbase-mcp into crypto-exchanges beside this one, since it trades and does not hold an agent's own wallet.", "unchecked: the REST rate limits. No page was found at the old or new docs paths, and llms.txt lists a rate-limits page only for Coinbase Exchange. Scored absent.", "unchecked: the Advanced Trade fee schedule, the User Agreement, the privacy policy, supported countries and the help centre, all behind a bot check or 403 on 3 November 2026. Privacy facts are per the 1 October 2026 check of coinbase-cdp-agentkit.", "unchecked: incidents from 5 August to 15 September 2026, beyond the incidents feed we could read.", "firstReleased is 5 January 2024, the oldest release of the official Python SDK, the earliest first-hand date found. The API itself is older; Coinbase's announcement pages answered a bot check.", "The welcome page says a sandbox is available while the sandbox page says only accounts and orders endpoints are available, yet its table lists portfolios and perpetuals endpoints too. Recorded, not deducted.", "FIX. No FIX page was found for Advanced Trade; Coinbase Exchange has FIX and is a separate product not listed here.", "Humans. The people file reuses the coinbase-mcp file for the same company; coinbase.com and investor.coinbase.com answered a bot check again on 3 November 2026." ] }, "negative": 0, "verdict": "Advanced Trade has a public OpenAPI spec, keys limited to view, trade or transfer and to one portfolio, and a keyless static sandbox. No REST rate limit is published, the fee schedule, user agreement and country list sit behind a bot check, and an agent that wants an MCP route uses the separate coinbase-mcp listing.", "bestFor": "An agent trading a person's or a treasury's Coinbase account with its own key, where the person wants sandbox tests and portfolio scoping.", "strengths": [ "Public OpenAPI 3.1 and AsyncAPI specs with typed enums, plus llms.txt and a Markdown twin of every docs page", "CDP keys carry view, trade and transfer permissions, a portfolio restriction and an IP allowlist, and signed JWTs expire after 2 minutes", "Keyless sandbox with static responses and header-driven error simulation for accounts and orders", "Six public market data endpoints need no key, and most WebSocket channels are open without authentication", "Dated retirement of INTX endpoints with a read-only grace period, announced in the docs" ], "weaknesses": [ "No REST rate limit numbers found; the old rate-limits page answers 404 and only the WebSocket limit of 8 per second per IP is published", "The fee schedule, user agreement, privacy policy and supported-countries pages answered a bot check and were not read", "No FIX connectivity is documented for Advanced Trade", "The OpenAPI spec documents only a default error response, with no 4xx or 429 shapes", "security.txt expired on 1 June 2024 and no status component exists for the Global Derivatives gateway" ], "agentNotes": [ "Mint a fresh ES256 JWT for every request; tokens expire after 2 minutes and Ed25519 keys are rejected", "Send a unique client_order_id on every order and reuse it on retry so a dropped connection does not place a second order", "Develop against api-sandbox.coinbase.com first; its responses are static, so do not read prices or fills from it", "Use a key with view only, or trade without transfer, and restrict it to a portfolio funded for the agent", "For perpetuals call the Global Derivatives JSON-RPC gateway at drb.coinbase.com; the /intx/* endpoints are retired" ], "metrics": { "kind": "remote", "measured": false }, "reviewCount": 0, "avgRating": 0, "history": [ { "basis": "public evidence", "confidence": "medium", "grade": "C", "methodology": "0.7", "pending": [ "performance", "tasks" ], "run": "2026-10-01", "runLabel": "October 2026 research run", "score": 61.7 } ], "editorialScores": { "ergonomics": 73, "maintenance": 57, "payments": 20, "reliability": 58, "schema": 80, "security": 68, "transparency": 42 }, "provenanceScore": 92, "checked": { "categories": { "ergonomics": "2026-11-03", "maintenance": "2026-11-03", "payments": "2026-11-03", "reliability": "2026-11-03", "schema": "2026-11-03", "security": "2026-11-03", "transparency": "2026-11-03" }, "last": "2026-11-03", "oldest": "2026-11-03", "stale": false, "staleAfterDays": 90 }, "scoreHistory": [ { "date": "2026-11-03", "grade": "C", "kind": "listed", "method": "0.7", "score": 61.7 } ] }, "connect": { "install": "pip install coinbase-advanced-py", "http": "curl https://api.coinbase.com/api/v3/brokerage/market/products/BTC-USD/ticker?limit=1" }, "letme": { "capability": "https://letme.dev/exchange.spot-trading", "tool": "https://letme.dev/coinbase-advanced-trade" }, "sameCompany": [ "coinbase-mcp" ], "notable": [ "Coinbase runs an official remote MCP server for a person's Coinbase account at https://agents.coinbase.com/mcp, listed here as coinbase-mcp. Orders placed through it execute on Advanced Trade. No MCP server is published for the API itself, and the official MCP registry lists only third-party Coinbase servers under io.github namespaces on 3 November 2026 (https://registry.modelcontextprotocol.io/v0/servers?search=coinbase)", "A public OpenAPI 3.1 spec (info.version 0.1, 45 paths, 51 operations) and an AsyncAPI document for the WebSocket feeds are published, with ApiKey scopes view, trade and transfer and OAuth2 wallet:* scopes (https://docs.cdp.coinbase.com/api-reference/advanced-trade-api/rest-api/advanced-trade-spec.yaml)", "International perpetuals moved from INTX to a Global Derivatives gateway at drb.coinbase.com on 1 October 2026, JSON-RPC 2.0 over HTTP and WebSocket, 125 or more perpetuals at up to 50x for eligible non-US clients. The /intx/* endpoints are retired, with reads kept for a limited period (https://docs.cdp.coinbase.com/coinbase-app/advanced-trade-apis/rest-api.md)", "The sandbox at api-sandbox.coinbase.com needs no credentials and returns static responses for accounts, orders, portfolios and perpetuals endpoints, with an X-Sandbox header that simulates INSUFFICIENT_FUND and other errors (https://docs.cdp.coinbase.com/coinbase-app/advanced-trade-apis/sandbox.md)", "GET /api/v3/brokerage/key_permissions reports can_view, can_trade, can_transfer (deposits and withdrawals), portfolio_uuid and portfolio_type (https://docs.cdp.coinbase.com/api-reference/advanced-trade-api/rest-api/data-api/get-api-key-permissions.md)", "WebSocket connections and unauthenticated messages are limited to 8 per second per IP. No REST rate limit page was found; the older rate-limits URL answers 404 and llms.txt lists none for Advanced Trade (https://docs.cdp.coinbase.com/coinbase-app/advanced-trade-apis/websocket/websocket-rate-limits.md)", "status.coinbase.com lists Coinbase Advanced Trade as a component. Between 16 September and 3 November 2026 it was marked degraded for 25 minutes on 21 September; no incident named the API, and the 5 August to 15 September record is beyond the feed we could read (https://status.coinbase.com/api/v2/incidents.json)", "The official Python SDK's newest release is v2.0.0rc1 of 30 September 2026, after v1.8.4 of 19 June; its oldest release is v1.0.1 of 5 January 2024 (https://api.github.com/repos/coinbase/coinbase-advanced-py/releases)", "coinbase.com's security.txt points to HackerOne and expired on 1 June 2024 (https://www.coinbase.com/.well-known/security.txt)" ], "area": "payments", "details": [ { "label": "Surface listed", "value": "The Advanced Trade REST API at api.coinbase.com/api/v3/brokerage, its WebSocket feeds and the Global Derivatives gateway, read from docs.cdp.coinbase.com, the OpenAPI spec, status.coinbase.com and GitHub on 3 November 2026. No account was made and no private call was sent" }, { "label": "MCP server", "value": "An official server for a person's Coinbase account at https://agents.coinbase.com/mcp (Streamable HTTP, OAuth with ten mcp:* scopes, 29 tools per the docs, not in the official MCP registry), listed as coinbase-mcp under agent wallets. Its orders execute on Advanced Trade. No MCP server is published for the API as such" }, { "label": "Key permissions", "value": "view, trade and transfer (deposits and withdrawals), set per key with a portfolio restriction and an optional IP allowlist. No withdrawal address allow-list for API keys was found in the docs" }, { "label": "Rate limits", "value": "WebSocket connections and unauthenticated messages 8 per second per IP. No REST rate limit numbers found on 3 November 2026; public REST responses are cached for 1 second" }, { "label": "Sandbox", "value": "api-sandbox.coinbase.com/api/v3/brokerage, no credentials, static responses for accounts, orders, portfolios and perpetuals, with an X-Sandbox header to simulate errors" }, { "label": "Countries", "value": "Not read. The supported-countries and eligibility pages on coinbase.com and help.coinbase.com answered a bot check. The docs say US futures are for eligible US clients and Global Derivatives for eligible non-US clients" }, { "label": "Fees", "value": "Not read. coinbase.com/advanced-fees and help.coinbase.com answered 403 on 3 November 2026" }, { "label": "FIX and WebSocket", "value": "No FIX for Advanced Trade in the docs read. WebSocket market data at wss://advanced-trade-ws.coinbase.com and user data at wss://advanced-trade-ws-user.coinbase.com, JWT per message for private channels; Global Derivatives takes orders over WebSocket JSON-RPC" }, { "label": "Terms on automated trading", "value": "Not read. The Coinbase User Agreement answered a bot check. The agents docs carry a disclaimer that the person is responsible for every trade an agent makes" }, { "label": "Products", "value": "Spot pairs, CFTC-regulated US dated futures, and perpetuals on the Deribit-based Global Derivatives gateway since 1 October 2026 (options and dated futures not yet on it)" }, { "label": "SDKs", "value": "Official Python (coinbase-advanced-py, v2.0.0rc1 on 30 September 2026); TypeScript, Go and Java are sample SDKs" }, { "label": "Status", "value": "status.coinbase.com, a Statuspage site, with Coinbase Advanced Trade, API, US Derivatives and International Derivatives components" }, { "label": "Legal entity", "value": "Coinbase, Inc., per the CDP terms read for coinbase-cdp-agentkit; a subsidiary of Coinbase Global, Inc. (Nasdaq ticker COIN)" } ], "provenance": { "legalEntity": "Coinbase, Inc.", "domain": "coinbase.com", "domainRegistered": "2011-07-02", "endpointOnVendorDomain": true, "terms": "https://www.coinbase.com/legal/user_agreement", "privacy": "https://www.coinbase.com/legal/privacy", "statusPage": "https://status.coinbase.com", "changelog": "https://docs.cdp.coinbase.com/get-started/changelog", "securityTxt": "expired", "checked": "2026-11-03", "notes": [ "The user agreement, privacy policy, fee schedule and help centre answered a bot check or 403 on 3 November 2026. The terms and privacy URLs are Coinbase's standard ones; Coinbase, Inc. is the entity named in the coinbase-cdp-agentkit and coinbase-mcp listings.", "Domain registration date per the RDAP read of 24 October 2026 for coinbase-mcp, not re-read.", "https://www.coinbase.com/.well-known/security.txt points to HackerOne and expired on 1 June 2024, re-read 3 November 2026.", "docs.cdp.coinbase.com/robots.txt disallows only /cdn-cgi/ and /_next/. help.coinbase.com answered 403 to robots.txt, so nothing on that host was requested further.", "The CDP changelog's newest entry is 23 October 2026; its only trading entries since August concern the agents MCP server (17 and 21 August)." ], "score": 92, "checks": [ { "check": "Legal entity named", "value": "Coinbase, Inc.", "points": 20, "max": 20, "state": "ok" }, { "check": "Domain age", "value": "coinbase.com, registered 2011-07-02 (15 years)", "points": 15, "max": 15, "state": "ok" }, { "check": "Endpoint on the vendor's domain", "value": "coinbase.com", "points": 15, "max": 15, "state": "ok" }, { "check": "Terms of service", "value": "published, but our reader couldn't read it", "points": 7, "max": 10, "state": "part" }, { "check": "Privacy policy", "value": "read, states 7 of the 8 things a reader expects", "points": 9.3, "max": 10, "state": "part" }, { "check": "Status page", "value": "status.coinbase.com", "points": 10, "max": 10, "state": "ok" }, { "check": "Changelog", "value": "published", "points": 10, "max": 10, "state": "ok" }, { "check": "security.txt", "value": "published but past its Expires date", "points": 5, "max": 10, "state": "part" }, { "check": "People named", "value": "2 named with their role, none with a public profile", "points": 7, "max": 10, "state": "part" }, { "check": "Support route", "value": "help pages, a community", "points": 5, "max": 5, "state": "ok" } ], "policies": [ { "kind": "terms", "url": "https://www.coinbase.com/legal/user_agreement", "state": "unreadable", "reason": "the page has 0 words of text without a browser, so the document is drawn by script or sits elsewhere", "readAt": "2026-10-30", "points": 7, "max": 10 }, { "kind": "privacy", "url": "https://www.coinbase.com/legal/privacy", "state": "read", "readAt": "2026-10-30", "statedDate": "2026-05-27", "words": 9066, "points": 9.3, "max": 10, "expected": [ { "key": "privacy.date", "label": "Gives the date it was last updated", "found": true, "quote": "Last Updated: May 27, 2026.", "says": "Last updated 2026-05-27" }, { "key": "privacy.collected", "label": "Says what personal data is collected", "found": true, "quote": "This Privacy Policy describes how we collect, use, and share personal information when you explore, sign up for or access our “Services”, which include the services offered on our websites, including coinbase.com, coinbase.com/exchange, coinbase.com/prime, coinbase.com/futures, coinbase.com/developer-platform, (each a…" }, { "key": "privacy.retention", "label": "Says how long data is kept", "found": true, "quote": "Our third-party electronic identity verification service providers retain this information for as long as set out in their applicable notices/policies." }, { "key": "privacy.processors", "label": "Says who else receives the data", "found": true, "quote": "We share your information with other Coinbase companies, as well as trusted third parties and service providers, in order to offer our Services and fulfill legal requirements." }, { "key": "privacy.sale", "label": "Says whether personal data is sold or shared for advertising", "found": false }, { "key": "privacy.rights", "label": "Says what rights people have over their data", "found": true, "quote": "You can use these tools by visiting your Privacy Rights Dashboard." }, { "key": "privacy.contact", "label": "Gives a privacy contact", "found": true, "quote": "If you have any questions, please contact us on our Support Portal or at dpo@coinbase.com.", "says": "dpo@coinbase.com" }, { "key": "privacy.transfers", "label": "Says where data is transferred or stored", "found": true, "quote": "We rely primarily on the European Commission’s Standard Contractual Clauses to facilitate the international and onward transfer of European Personal Data to third countries, including from our EU operating entities to Coinbase, Inc.", "says": "Relies on standard contractual clauses" } ] } ] }, "humans": { "slug": "coinbase-advanced-trade", "checked": "2026-11-03", "company": "Coinbase, Inc.", "people": [ { "name": "Brian Armstrong", "role": "Co-founder, chairman and CEO, Coinbase", "founder": true, "bio": "Brian Armstrong co-founded Coinbase in 2012 with Fred Ehrsam and is its chairman and chief executive. He studied economics and computer science at Rice University and worked at IBM, at Deloitte and as a software engineer at Airbnb before starting the company. He also co-founded the longevity start-up NewLimit.", "bioSources": [ "https://en.wikipedia.org/wiki/Brian_Armstrong_(businessman)", "https://en.wikipedia.org/wiki/Coinbase" ], "page": "/people/brian-armstrong/" }, { "name": "Fred Ehrsam", "role": "Co-founder and board member, Coinbase, left his day-to-day role in 2017", "founder": true, "bio": "Fred Ehrsam co-founded Coinbase after working as a trader at Goldman Sachs, and stepped back from its day-to-day running in January 2017 while staying on its board. In 2018 he co-founded the crypto investment firm Paradigm, where he is now a general partner, and he is co-founder and chief executive of the neurotechnology start-up Nudge.", "bioSources": [ "https://en.wikipedia.org/wiki/Fred_Ehrsam", "https://en.wikipedia.org/wiki/Coinbase" ], "page": "/people/fred-ehrsam/" } ], "peopleNote": "Same company as coinbase-mcp and coinbase-cdp-agentkit, so the founders are carried over from the coinbase-mcp humans file of 28 October 2026. coinbase.com, investor.coinbase.com and help.coinbase.com answered a bot check or 403 again on 3 November 2026, so no Coinbase page naming the officers could be read and the roles rest on Wikipedia. No person is named on the Advanced Trade docs. Ownership and investors are left out so land.py copies the coinbase-mcp file's ownership (a subsidiary of Coinbase Global, Inc., Nasdaq ticker COIN); a public company has no investor list.", "companySocial": { "linkedin": "https://www.linkedin.com/company/coinbasedeveloperplatform", "x": "https://x.com/coinbasedev", "github": "https://github.com/coinbase" }, "support": { "urls": [ "https://docs.cdp.coinbase.com/advanced-trade/docs/welcome", "https://help.coinbase.com/" ], "community": [ { "label": "CDP Discord", "url": "https://discord.com/invite/cdp", "kind": "discord" }, { "label": "Python SDK issues", "url": "https://github.com/coinbase/coinbase-advanced-py/issues", "kind": "github" } ] }, "sources": [ "https://docs.cdp.coinbase.com/advanced-trade/docs/welcome.md", "https://docs.cdp.coinbase.com/", "https://github.com/coinbase/coinbase-advanced-py", "https://en.wikipedia.org/wiki/Coinbase", "https://www.ycombinator.com/companies/coinbase" ], "ownership": { "status": "subsidiary", "parent": "Coinbase Global, Inc. (Nasdaq: COIN)", "checked": "2026-10-28", "sources": [ "https://en.wikipedia.org/wiki/Coinbase", "https://www.nasdaq.com/market-activity/stocks/coin" ] } }, "pageJsonUrl": "https://www.anchorterminal.com/tools/coinbase-advanced-trade.json", "live": { "slug": "coinbase-advanced-trade", "vendorStatus": { "page": "https://status.coinbase.com", "indicator": "minor", "summary": "Partially Degraded Service", "checkedAt": "2026-11-04T19:31:22.399816981Z" }, "securityTxt": { "url": "https://coinbase.com/.well-known/security.txt", "state": "valid", "expires": "2024-06-01T00:00:00z", "checkedAt": "2026-11-04T15:52:53.816413711Z" }, "updatedAt": "2026-11-04T19:31:22.399816981Z" } }, "verify": { "accepts": "a page on coinbase.com or one of its subdomains, or the README at the root of github.com/coinbase/coinbase-advanced-py", "badgeUrl": "https://www.anchorterminal.com/badges/coinbase-advanced-trade.svg", "body": { "slug": "coinbase-advanced-trade", "url": "the page with the badge or the link" }, "docs": "https://www.anchorterminal.com/builders/#verify", "effect": "none, it never changes a grade, rank or review", "endpoint": "https://www.anchorterminal.com/api/v1/verify", "listingUrl": "https://www.anchorterminal.com/tools/coinbase-advanced-trade", "mcpTool": "verify_listing", "recheck": "weekly; two failed checks in a row and it lapses, a later pass restores it", "snippets": { "html": "\u003ca href=\"https://www.anchorterminal.com/tools/coinbase-advanced-trade\"\u003e\u003cimg src=\"https://www.anchorterminal.com/badges/coinbase-advanced-trade.svg\" alt=\"Coinbase Advanced Trade API on Anchor Terminal\" height=\"20\"\u003e\u003c/a\u003e", "markdown": "[![Coinbase Advanced Trade API on Anchor Terminal](https://www.anchorterminal.com/badges/coinbase-advanced-trade.svg)](https://www.anchorterminal.com/tools/coinbase-advanced-trade)", "link": "\u003ca href=\"https://www.anchorterminal.com/tools/coinbase-advanced-trade\"\u003eCoinbase Advanced Trade API on Anchor Terminal\u003c/a\u003e" } } }, "kind": "anchor.page", "links": { "api": "https://www.anchorterminal.com/api/v1/index.json", "html": "https://www.anchorterminal.com/tools/coinbase-advanced-trade", "json": "https://www.anchorterminal.com/tools/coinbase-advanced-trade.json", "llms": "https://www.anchorterminal.com/llms.txt", "markdown": "https://www.anchorterminal.com/tools/coinbase-advanced-trade.md", "mcp": "https://www.anchorterminal.com/mcp", "pricing": "https://www.anchorterminal.com/tools/coinbase-advanced-trade#pricing", "reviews": "https://www.anchorterminal.com/tools/coinbase-advanced-trade#reviews", "slim": "https://www.anchorterminal.com/tools/coinbase-advanced-trade.min.md" }, "markdown": "## Overview\n\n**Grade C · 61.7/100 · rank #493 of 1349 · #7 in Crypto exchanges · not agent-ready · confidence medium**\n\n\nMore from Coinbase, Inc., listed separately because each is its own product: [Coinbase MCP server (Coinbase for Agents)](https://www.anchorterminal.com/tools/coinbase-mcp.md) (Crypto exchanges).\n\n## Assessment\n\nAdvanced Trade has a public OpenAPI spec, keys limited to view, trade or transfer and to one portfolio, and a keyless static sandbox. No REST rate limit is published, the fee schedule, user agreement and country list sit behind a bot check, and an agent that wants an MCP route uses the separate coinbase-mcp listing.\n\n## Facts\n\n| Field | Value |\n| --- | --- |\n| Vendor | Coinbase, Inc. (https://docs.cdp.coinbase.com/advanced-trade/docs/welcome) |\n| Kind | HTTP API |\n| Category | Crypto exchanges (https://www.anchorterminal.com/categories/crypto-exchanges) |\n| Auth | OAuth or key · CDP secret API key made in the CDP portal, with view, trade and transfer permissions, a portfolio restriction and an optional IP allowlist. Each request carries a JWT signed with ECDSA (ES256) that expires after 2 minutes, so a new token is minted per call. Ed25519 keys are not accepted by Coinbase App APIs. The OpenAPI spec also lists OAuth2 with wallet:* scopes for acting on other people's accounts. Keys are regenerated or disabled in the portal. Six public market endpoints need no key (https://docs.cdp.coinbase.com/coinbase-app/authentication-authorization/api-key-authentication.md, checked 2026-11-03). |\n| Pricing | Pay per use (Pay per use) · The API costs nothing to call. Trades carry Advanced Trade maker and taker fees by 30-day volume tier; the fee page at coinbase.com/advanced-fees and help.coinbase.com both answered our reader with 403 on 3 November 2026, so the lowest tier's rates are unread. The sandbox and the public market endpoints need no account. |\n| x402 | No · No x402, MPP or L402 on the Advanced Trade endpoints in the OpenAPI spec or docs (checked 2026-11-03). Coinbase's account MCP server, listed as coinbase-mcp, pays x402 resources as a buyer; that is a separate surface. |\n| Licence | Proprietary hosted service under the Coinbase User Agreement, which answered a bot check and wasn't read. The official Python SDK coinbase-advanced-py is on GitHub |\n| Packages | pypi: `coinbase-advanced-py` |\n| Source | https://github.com/coinbase/coinbase-advanced-py |\n| Docs | https://docs.cdp.coinbase.com/advanced-trade/docs/welcome |\n| llms.txt | https://docs.cdp.coinbase.com/llms.txt |\n| Last release | 2026-10-01 |\n| Surface listed | The Advanced Trade REST API at api.coinbase.com/api/v3/brokerage, its WebSocket feeds and the Global Derivatives gateway, read from docs.cdp.coinbase.com, the OpenAPI spec, status.coinbase.com and GitHub on 3 November 2026. No account was made and no private call was sent |\n| MCP server | An official server for a person's Coinbase account at https://agents.coinbase.com/mcp (Streamable HTTP, OAuth with ten mcp:* scopes, 29 tools per the docs, not in the official MCP registry), listed as coinbase-mcp under agent wallets. Its orders execute on Advanced Trade. No MCP server is published for the API as such |\n| Key permissions | view, trade and transfer (deposits and withdrawals), set per key with a portfolio restriction and an optional IP allowlist. No withdrawal address allow-list for API keys was found in the docs |\n| Rate limits | WebSocket connections and unauthenticated messages 8 per second per IP. No REST rate limit numbers found on 3 November 2026; public REST responses are cached for 1 second |\n| Sandbox | api-sandbox.coinbase.com/api/v3/brokerage, no credentials, static responses for accounts, orders, portfolios and perpetuals, with an X-Sandbox header to simulate errors |\n| Countries | Not read. The supported-countries and eligibility pages on coinbase.com and help.coinbase.com answered a bot check. The docs say US futures are for eligible US clients and Global Derivatives for eligible non-US clients |\n| Fees | Not read. coinbase.com/advanced-fees and help.coinbase.com answered 403 on 3 November 2026 |\n| FIX and WebSocket | No FIX for Advanced Trade in the docs read. WebSocket market data at wss://advanced-trade-ws.coinbase.com and user data at wss://advanced-trade-ws-user.coinbase.com, JWT per message for private channels; Global Derivatives takes orders over WebSocket JSON-RPC |\n| Terms on automated trading | Not read. The Coinbase User Agreement answered a bot check. The agents docs carry a disclaimer that the person is responsible for every trade an agent makes |\n| Products | Spot pairs, CFTC-regulated US dated futures, and perpetuals on the Deribit-based Global Derivatives gateway since 1 October 2026 (options and dated futures not yet on it) |\n| SDKs | Official Python (coinbase-advanced-py, v2.0.0rc1 on 30 September 2026); TypeScript, Go and Java are sample SDKs |\n| Status | status.coinbase.com, a Statuspage site, with Coinbase Advanced Trade, API, US Derivatives and International Derivatives components |\n| Legal entity | Coinbase, Inc., per the CDP terms read for coinbase-cdp-agentkit; a subsidiary of Coinbase Global, Inc. (Nasdaq ticker COIN) |\n| Capabilities | exchange.spot-trading, exchange.market-data, exchange.derivatives, exchange.balances, exchange.transfers, market.crypto |\n| Tags | hosted, official, closed-source, api-key, oauth, openapi, llms-txt, sandbox, status-page, python, usage-priced, no-card, bug-bounty |\n| JSON | https://www.anchorterminal.com/api/v1/tools/coinbase-advanced-trade.json |\n\n## Score breakdown (methodology v0.7, October 2026 research run)\n\nAssessed 2026-11-03 from public evidence against the published checklist (https://www.anchorterminal.com/benchmark/#checklist). Confidence: medium. Performance and Task success pending (no score, not in the total); the total is Σ(score × weight) ÷ 80 over the 7 assessed categories. \"This run\" is each category's share of the 100 points.\n\n| Category | Weight | This run | Score (0–100) | Points |\n| --- | --- | --- | --- | --- |\n| Reliability | 16% | 20 | 58 | 11.6 |\n| Performance | 10% | pending | pending | n/a |\n| Schema \u0026 documentation | 13% | 16.2 | 80 | 13.0 |\n| Agent ergonomics | 13% | 16.2 | 73 | 11.9 |\n| Security \u0026 auth | 14% | 17.5 | 68 | 11.9 |\n| Payments \u0026 pricing | 10% | 12.5 | 20 | 2.5 |\n| Task success | 10% | pending | pending | n/a |\n| Maintenance \u0026 community | 7% | 8.8 | 57 | 5.0 |\n| Transparency \u0026 trust (editorial 42, provenance 92) | 7% | 8.8 | 67 | 5.9 |\n| Negative events | up to −15 | up to −15 | none recorded | 0 |\n| **Total** | | | | **61.7 → C** |\n\n### Why each score\n\n- Reliability 58 (checked 2026-11-03): Read with the hosted lines. status.coinbase.com is a Statuspage site with Coinbase Advanced Trade, API, US Derivatives and International Derivatives components (20). The incidents feed we could read runs from 16 September to 3 November 2026. In it Advanced Trade was degraded for 25 minutes on 21 September, the website had a 3-minute major on 14 October, converts were down 1 hour 4 minutes on 26 October, and no incident named the API; 5 August to 15 September was beyond the feed, so minor only for the seven weeks read (15 of 30). No REST rate limit with numbers was found; the older rate-limits page answers 404 and llms.txt lists none, while the WebSocket page gives 8 connections and 8 unauthenticated messages per second per IP (5 of 15). Orders take a client_order_id, but no 429 or Retry-After guidance was found for Advanced Trade (8 of 15). No SLA (0). REST and WebSocket are generally available; the Global Derivatives gateway is a month old and not marked beta (10). 20 + 15 + 5 + 8 + 0 + 10 = 58.\n- Performance: Pending. Latency is measured per call by our probes, which haven't run yet, so this run doesn't score it. Its weight is shared across the assessed categories until the first probe window closes.\n- Schema \u0026 documentation 80 (checked 2026-11-03): Public OpenAPI 3.1 spec (45 paths, 51 operations) and an AsyncAPI document (25). llms.txt and a Markdown twin of every docs page (10). Every operation has a summary and description, some one line, several with multi-sentence guidance for equities (14 of 20). Enums on product_type, granularity, order_status, time_in_forces, order_types, order_side and sort_by, with defaults (13 of 15). Examples in the docs and the sandbox's simulated errors, but the spec documents only a default error referencing grpc.gateway.runtime.Error, with no 4xx or 429 shapes (8 of 15). Paths carry /api/v3, the CDP changelog is dated, and the INTX retirement was announced with a date, but the spec's info.version is 0.1 and the October gateway change has no changelog entry (10 of 15). 25 + 10 + 14 + 13 + 8 + 10 = 80.\n- Agent ergonomics 73 (checked 2026-11-03): Product lists filter by product_type and product_ids with limit and offset, candles take a granularity, but fields cannot be selected and the docs warn that product lists run to hundreds of entries (15 of 25). Cursor pagination with limit on orders and fills, filters by status, product and time (16 of 20). Error codes such as INSUFFICIENT_FUND, ORDER_NOT_FOUND and PERMISSION_DENIED are documented and can be simulated in the sandbox, though the spec gives no shapes (14 of 20). client_order_id on every order; no idempotency key on other writes (16 of 20). Few required fields, an official Python SDK and sample SDKs in three languages, but each request needs a freshly signed JWT (12 of 15). 15 + 16 + 14 + 16 + 12 = 73.\n- Security \u0026 auth 68 (checked 2026-11-03): CDP keys with view, trade and transfer permissions, a portfolio restriction, an optional IP allowlist, revocation in the portal, ES256 JWTs that expire after 2 minutes, and OAuth2 with wallet:* scopes for other people's accounts; no key expiry (28 of 30). View-only keys and portfolio scoping limit an agent, and transfer is a separate permission, but no withdrawal address allow-list for API keys and no confirmation step were found (14 of 20). The API returns no untrusted content (10). key_permissions reports a key's scope and account activity shows in the app, but no per-call log was found (6 of 15). HackerOne bug bounty named in a security.txt that expired on 1 June 2024; certifications unread behind a bot check (10 of 20). 28 + 14 + 10 + 6 + 10 = 68.\n- Payments \u0026 pricing 20 (checked 2026-11-03): No machine payment protocol on the API (0). The fee schedule answered a bot check on 3 November 2026, so no per-trade price was read, and the docs give none (0 of 20, unchecked). Six public market endpoints and the sandbox need no key or card (20). A person signs up, passes verification and mints a key in the portal (0). 0 + 0 + 20 + 0 = 20.\n- Task success: Pending. Task success needs the category task suites run through each tool, which haven't run yet, so this run doesn't score it. Its weight is shared across the assessed categories until then. A data provider's data-quality score is published on its listing now and becomes half of this category when it's scored.\n- Maintenance \u0026 community 57 (checked 2026-11-03): Read as a closed hosted service. The last change to the API itself is the Global Derivatives gateway and INTX retirement of 1 October 2026, 33 days before this check; the Python SDK's v2.0.0rc1 is from 30 September (20 of 30). Dated changes in 90 days are the 1 October migration and the agents entries of 17 and 21 August, which run through Advanced Trade (12 of 20). A public changelog and a CDP Discord; SDK issues not read (8 of 15). Official Python SDK current, the rest samples (12 of 15). SDK CI not read (5 of 10). 20 + 12 + 8 + 12 + 5 = 57.\n- Transparency \u0026 trust 67 (checked 2026-11-03): The editorial half. A closed service whose user agreement answered a bot check; the OpenAPI spec is public and the Python SDK is open on GitHub (12 of 30). Privacy facts per the coinbase-cdp-agentkit check of 1 October 2026 (Coinbase, Inc., processing countries, retention tied to need without numbers), not re-read (10 of 30). INTX endpoints retired on 1 October 2026 with a dated notice and a read-only grace period (12 of 20). Processing countries and provider categories per the same earlier check, no subprocessor list (8 of 20). 12 + 10 + 12 + 8 = 42.\n\nFix list, everything this grade says the listing lacks, the biggest gain first (19 items). What it covers is at https://www.anchorterminal.com/fixes/coinbase-advanced-trade.md (JSON https://www.anchorterminal.com/fixes/coinbase-advanced-trade.json). The whole list for a coding agent comes from `POST https://www.anchorterminal.com/api/v1/fix-list` with `{\"listing\": \"coinbase-advanced-trade\", \"plan\": \"read\"}`, free while the beta runs\n\n### What we couldn't check\n\n- One listing or two. coinbase-mcp (agent wallets) is the OAuth MCP server on a person's Coinbase account for allowlisted clients; this listing is the key-based API any program can call, with a sandbox, an OpenAPI spec and its own permissions. They differ in auth, audience and surface, so two listings; the better fix for the overlap would be moving coinbase-mcp into crypto-exchanges beside this one, since it trades and does not hold an agent's own wallet.\n- unchecked: the REST rate limits. No page was found at the old or new docs paths, and llms.txt lists a rate-limits page only for Coinbase Exchange. Scored absent.\n- unchecked: the Advanced Trade fee schedule, the User Agreement, the privacy policy, supported countries and the help centre, all behind a bot check or 403 on 3 November 2026. Privacy facts are per the 1 October 2026 check of coinbase-cdp-agentkit.\n- unchecked: incidents from 5 August to 15 September 2026, beyond the incidents feed we could read.\n- firstReleased is 5 January 2024, the oldest release of the official Python SDK, the earliest first-hand date found. The API itself is older; Coinbase's announcement pages answered a bot check.\n- The welcome page says a sandbox is available while the sandbox page says only accounts and orders endpoints are available, yet its table lists portfolios and perpetuals endpoints too. Recorded, not deducted.\n- FIX. No FIX page was found for Advanced Trade; Coinbase Exchange has FIX and is a separate product not listed here.\n- Humans. The people file reuses the coinbase-mcp file for the same company; coinbase.com and investor.coinbase.com answered a bot check again on 3 November 2026.\n\n### Sources\n\n- robots.txt (docs.cdp.coinbase.com): \u003chttps://docs.cdp.coinbase.com/robots.txt\u003e (seen 2026-11-03)\n- Advanced Trade welcome page: \u003chttps://docs.cdp.coinbase.com/advanced-trade/docs/welcome.md\u003e (seen 2026-11-03)\n- REST API overview (hosts, caching, INTX retirement): \u003chttps://docs.cdp.coinbase.com/coinbase-app/advanced-trade-apis/rest-api.md\u003e (seen 2026-11-03)\n- API key authentication (permissions, IP allowlist, ES256 JWT): \u003chttps://docs.cdp.coinbase.com/coinbase-app/authentication-authorization/api-key-authentication.md\u003e (seen 2026-11-03)\n- key permissions endpoint: \u003chttps://docs.cdp.coinbase.com/api-reference/advanced-trade-api/rest-api/data-api/get-api-key-permissions.md\u003e (seen 2026-11-03)\n- sandbox: \u003chttps://docs.cdp.coinbase.com/coinbase-app/advanced-trade-apis/sandbox.md\u003e (seen 2026-11-03)\n- WebSocket overview: \u003chttps://docs.cdp.coinbase.com/coinbase-app/advanced-trade-apis/websocket/websocket-overview.md\u003e (seen 2026-11-03)\n- WebSocket rate limits: \u003chttps://docs.cdp.coinbase.com/coinbase-app/advanced-trade-apis/websocket/websocket-rate-limits.md\u003e (seen 2026-11-03)\n- REST rate limits page (404): \u003chttps://docs.cdp.coinbase.com/coinbase-app/advanced-trade-apis/rate-limits.md\u003e (seen 2026-11-03)\n- API reference introduction (hosts): \u003chttps://docs.cdp.coinbase.com/api-reference/advanced-trade-api/rest-api/introduction.md\u003e (seen 2026-11-03)\n- OpenAPI spec: \u003chttps://docs.cdp.coinbase.com/api-reference/advanced-trade-api/rest-api/advanced-trade-spec.yaml\u003e (seen 2026-11-03)\n- API reference index (206 pages): \u003chttps://docs.cdp.coinbase.com/_llms/api-reference/coinbase-advanced-trade-api.txt\u003e (seen 2026-11-03)\n- llms.txt: \u003chttps://docs.cdp.coinbase.com/llms.txt\u003e (seen 2026-11-03)\n- CDP changelog: \u003chttps://docs.cdp.coinbase.com/get-started/changelog.md\u003e (seen 2026-11-03)\n- status incidents feed (16 September to 3 November 2026): \u003chttps://status.coinbase.com/api/v2/incidents.json\u003e (seen 2026-11-03)\n- security.txt (expired 1 June 2024): \u003chttps://www.coinbase.com/.well-known/security.txt\u003e (seen 2026-11-03)\n- Python SDK releases: \u003chttps://api.github.com/repos/coinbase/coinbase-advanced-py/releases\u003e (seen 2026-11-03)\n- official MCP registry search: \u003chttps://registry.modelcontextprotocol.io/v0/servers?search=coinbase\u003e (seen 2026-11-03)\n- fee page (403): \u003chttps://www.coinbase.com/advanced-fees\u003e (seen 2026-11-03)\n- help centre robots.txt (403): \u003chttps://help.coinbase.com/robots.txt\u003e (seen 2026-11-03)\n\n## Score history\n\nEvery move of a score since the listing was graded, newest first, with its cause. A score can't move without an entry here. JSON: https://www.anchorterminal.com/api/v1/tools/coinbase-advanced-trade/history.json\n\n- 2026-11-03: graded 61.7 C (methodology 0.7)\n\n## Who's behind it (provenance 92/100, checked 2026-11-03)\n\n| Check | Finding | Points |\n| --- | --- | --- |\n| Legal entity named | Coinbase, Inc. | 20/20 |\n| Domain age | coinbase.com, registered 2011-07-02 (15 years) | 15/15 |\n| Endpoint on the vendor's domain | coinbase.com | 15/15 |\n| Terms of service | published, but our reader couldn't read it | 7/10 |\n| Privacy policy | read, states 7 of the 8 things a reader expects | 9.3/10 |\n| Status page | status.coinbase.com | 10/10 |\n| Changelog | published | 10/10 |\n| security.txt | published but past its Expires date | 5/10 |\n| People named | 2 named with their role, none with a public profile | 7/10 |\n| Support route | help pages, a community | 5/5 |\n\nThe user agreement, privacy policy, fee schedule and help centre answered a bot check or 403 on 3 November 2026. The terms and privacy URLs are Coinbase's standard ones; Coinbase, Inc. is the entity named in the coinbase-cdp-agentkit and coinbase-mcp listings.\n\nDomain registration date per the RDAP read of 24 October 2026 for coinbase-mcp, not re-read.\n\nhttps://www.coinbase.com/.well-known/security.txt points to HackerOne and expired on 1 June 2024, re-read 3 November 2026.\n\ndocs.cdp.coinbase.com/robots.txt disallows only /cdn-cgi/ and /_next/. help.coinbase.com answered 403 to robots.txt, so nothing on that host was requested further.\n\nThe CDP changelog's newest entry is 23 October 2026; its only trading entries since August concern the agents MCP server (17 and 21 August).\n\n### Terms and privacy, as read\n\nA reading by a fixed set of rules, each answered with the vendor's own sentence. Not legal advice.\n\n**Terms of service** (https://www.coinbase.com/legal/user_agreement), read 2026-10-30. Our reader couldn't read it (the page has 0 words of text without a browser, so the document is drawn by script or sits elsewhere).\n\n\n**Privacy policy** (https://www.coinbase.com/legal/privacy), read 2026-10-30, dated 2026-05-27, states 7 of the 8 things a reader expects.\n\n- Gives the date it was last updated. Last updated 2026-05-27.\n- Not found in the text. Says whether personal data is sold or shared for advertising.\n- Gives a privacy contact. dpo@coinbase.com.\n- Says where data is transferred or stored. Relies on standard contractual clauses.\n\n## Humans behind the project (researched 2026-11-03 from public pages, not part of the grade)\n\n### Key people\n\n- Brian Armstrong, Co-founder, chairman and CEO, Coinbase\n- Fred Ehrsam, Co-founder and board member, Coinbase, left his day-to-day role in 2017\n- Note: Same company as coinbase-mcp and coinbase-cdp-agentkit, so the founders are carried over from the coinbase-mcp humans file of 28 October 2026. coinbase.com, investor.coinbase.com and help.coinbase.com answered a bot check or 403 again on 3 November 2026, so no Coinbase page naming the officers could be read and the roles rest on Wikipedia. No person is named on the Advanced Trade docs. Ownership and investors are left out so land.py copies the coinbase-mcp file's ownership (a subsidiary of Coinbase Global, Inc., Nasdaq ticker COIN); a public company has no investor list.\n- Coinbase, Inc.: LinkedIn https://www.linkedin.com/company/coinbasedeveloperplatform X https://x.com/coinbasedev GitHub https://github.com/coinbase\n\n### Ownership and investors\n\n- Ownership: Part of Coinbase Global, Inc. (Nasdaq: COIN)\n\n### Getting support\n\n- Discord: https://discord.com/invite/cdp\n- Help: https://docs.cdp.coinbase.com/advanced-trade/docs/welcome\n- Help: https://help.coinbase.com/\n- Community (Python SDK issues): https://github.com/coinbase/coinbase-advanced-py/issues\n- Sources: https://docs.cdp.coinbase.com/advanced-trade/docs/welcome.md, https://docs.cdp.coinbase.com/, https://github.com/coinbase/coinbase-advanced-py, https://en.wikipedia.org/wiki/Coinbase, https://www.ycombinator.com/companies/coinbase\n\n## Live (updated 2026-11-04 19:31 UTC)\n\n- Vendor status page: minor, Partially Degraded Service\n- security.txt: valid, expires 2024-06-01T00:00:00z\n- Always current: https://www.anchorterminal.com/api/v1/live/coinbase-advanced-trade.json\n\n## Probe metrics\n\nNot measured yet. Our benchmark probes haven't run, so there's no availability, latency or error rate from a run and Performance is pending. Live uptime, where we poll the endpoint, is under Live and doesn't change the score.\n\n## Strengths\n\n- Public OpenAPI 3.1 and AsyncAPI specs with typed enums, plus llms.txt and a Markdown twin of every docs page\n- CDP keys carry view, trade and transfer permissions, a portfolio restriction and an IP allowlist, and signed JWTs expire after 2 minutes\n- Keyless sandbox with static responses and header-driven error simulation for accounts and orders\n- Six public market data endpoints need no key, and most WebSocket channels are open without authentication\n- Dated retirement of INTX endpoints with a read-only grace period, announced in the docs\n\n## Weaknesses\n\n- No REST rate limit numbers found; the old rate-limits page answers 404 and only the WebSocket limit of 8 per second per IP is published\n- The fee schedule, user agreement, privacy policy and supported-countries pages answered a bot check and were not read\n- No FIX connectivity is documented for Advanced Trade\n- The OpenAPI spec documents only a default error response, with no 4xx or 429 shapes\n- security.txt expired on 1 June 2024 and no status component exists for the Global Derivatives gateway\n\n\n\n## Before you call it (notes for agents)\n\n1. Mint a fresh ES256 JWT for every request; tokens expire after 2 minutes and Ed25519 keys are rejected\n2. Send a unique client_order_id on every order and reuse it on retry so a dropped connection does not place a second order\n3. Develop against api-sandbox.coinbase.com first; its responses are static, so do not read prices or fills from it\n4. Use a key with view only, or trade without transfer, and restrict it to a portfolio funded for the agent\n5. For perpetuals call the Global Derivatives JSON-RPC gateway at drb.coinbase.com; the /intx/* endpoints are retired\n\n## Connect\n\nInstall:\n\n```bash\npip install coinbase-advanced-py\n```\n\nFirst request:\n\n```bash\ncurl https://api.coinbase.com/api/v3/brokerage/market/products/BTC-USD/ticker?limit=1\n```\n\nThrough letme: https://letme.dev/coinbase-advanced-trade. letme answers with the pick and how to call it direct. How it works: https://www.anchorterminal.com/letme/index.md\n\n## Similar tools\n\nRanked by shared capabilities, then score. Same-category tools with no shared capability key are listed last.\n\n| Tool | Grade | Score | Rank | Shared capabilities | x402 | Markdown |\n| --- | --- | --- | --- | --- | --- | --- |\n| Gemini Exchange API | BB | 74.6 | 70 | exchange.market-data, exchange.spot-trading, exchange.derivatives, exchange.balances, exchange.transfers, market.crypto | no | https://www.anchorterminal.com/tools/gemini-exchange.md |\n| Kraken API | BB | 71 | 159 | exchange.spot-trading, exchange.market-data, exchange.derivatives, exchange.balances, exchange.transfers, market.crypto | no | https://www.anchorterminal.com/tools/kraken.md |\n| OKX API | B | 64.3 | 413 | exchange.spot-trading, exchange.market-data, exchange.derivatives, exchange.balances, exchange.transfers, market.crypto | no | https://www.anchorterminal.com/tools/okx.md |\n| Binance API | B | 63.2 | 448 | exchange.spot-trading, exchange.market-data, exchange.derivatives, exchange.balances, exchange.transfers, market.crypto | no | https://www.anchorterminal.com/tools/binance.md |\n| Deribit | C | 59 | 650 | exchange.derivatives, exchange.market-data, exchange.spot-trading, exchange.balances, exchange.transfers, market.crypto | no | https://www.anchorterminal.com/tools/deribit.md |\n| Bitfinex API | C | 58.4 | 687 | exchange.market-data, exchange.spot-trading, exchange.derivatives, exchange.balances, exchange.transfers, market.crypto | no | https://www.anchorterminal.com/tools/bitfinex.md |\n\n## Panel reviews (0)\n\nReviewed by the Anchor panel (https://www.anchorterminal.com/reviewers/index.md): .\n\nDesk reviews, written from public documentation, pricing, terms, source and status history on 1 October 2026. No calls made. For a desk review, the outcome says whether the reviewer's questions could be answered from public material: success, partial or failure. How reviews work: https://www.anchorterminal.com/reviews/how-it-works.md\n\n## Notable\n\n- Coinbase runs an official remote MCP server for a person's Coinbase account at https://agents.coinbase.com/mcp, listed here as coinbase-mcp. Orders placed through it execute on Advanced Trade. No MCP server is published for the API itself, and the official MCP registry lists only third-party Coinbase servers under io.github namespaces on 3 November 2026 (source: \u003chttps://registry.modelcontextprotocol.io/v0/servers?search=coinbase\u003e)\n- A public OpenAPI 3.1 spec (info.version 0.1, 45 paths, 51 operations) and an AsyncAPI document for the WebSocket feeds are published, with ApiKey scopes view, trade and transfer and OAuth2 wallet:* scopes (source: \u003chttps://docs.cdp.coinbase.com/api-reference/advanced-trade-api/rest-api/advanced-trade-spec.yaml\u003e)\n- International perpetuals moved from INTX to a Global Derivatives gateway at drb.coinbase.com on 1 October 2026, JSON-RPC 2.0 over HTTP and WebSocket, 125 or more perpetuals at up to 50x for eligible non-US clients. The /intx/* endpoints are retired, with reads kept for a limited period (source: \u003chttps://docs.cdp.coinbase.com/coinbase-app/advanced-trade-apis/rest-api.md\u003e)\n- The sandbox at api-sandbox.coinbase.com needs no credentials and returns static responses for accounts, orders, portfolios and perpetuals endpoints, with an X-Sandbox header that simulates INSUFFICIENT_FUND and other errors (source: \u003chttps://docs.cdp.coinbase.com/coinbase-app/advanced-trade-apis/sandbox.md\u003e)\n- GET /api/v3/brokerage/key_permissions reports can_view, can_trade, can_transfer (deposits and withdrawals), portfolio_uuid and portfolio_type (source: \u003chttps://docs.cdp.coinbase.com/api-reference/advanced-trade-api/rest-api/data-api/get-api-key-permissions.md\u003e)\n- WebSocket connections and unauthenticated messages are limited to 8 per second per IP. No REST rate limit page was found; the older rate-limits URL answers 404 and llms.txt lists none for Advanced Trade (source: \u003chttps://docs.cdp.coinbase.com/coinbase-app/advanced-trade-apis/websocket/websocket-rate-limits.md\u003e)\n- status.coinbase.com lists Coinbase Advanced Trade as a component. Between 16 September and 3 November 2026 it was marked degraded for 25 minutes on 21 September; no incident named the API, and the 5 August to 15 September record is beyond the feed we could read (source: \u003chttps://status.coinbase.com/api/v2/incidents.json\u003e)\n- The official Python SDK's newest release is v2.0.0rc1 of 30 September 2026, after v1.8.4 of 19 June; its oldest release is v1.0.1 of 5 January 2024 (source: \u003chttps://api.github.com/repos/coinbase/coinbase-advanced-py/releases\u003e)\n- coinbase.com's security.txt points to HackerOne and expired on 1 June 2024 (source: \u003chttps://www.coinbase.com/.well-known/security.txt\u003e)\n\n- #7 of 21 in Best crypto exchange APIs and MCP servers for AI agents: https://www.anchorterminal.com/best/crypto-exchanges/index.md\n- All 210 exchanges comparisons: https://www.anchorterminal.com/compare/crypto-exchanges/index.md\n\n## Compare\n\n- [Bitfinex API vs Coinbase Advanced Trade API](https://www.anchorterminal.com/compare/bitfinex-vs-coinbase-advanced-trade.md): C 58.4 vs C 61.7\n- [Bitget vs Coinbase Advanced Trade API](https://www.anchorterminal.com/compare/bitget-vs-coinbase-advanced-trade.md): D 53.9 vs C 61.7\n- [Bithumb Open API vs Coinbase Advanced Trade API](https://www.anchorterminal.com/compare/bithumb-vs-coinbase-advanced-trade.md): D 50.6 vs C 61.7\n- [Bitstamp API vs Coinbase Advanced Trade API](https://www.anchorterminal.com/compare/bitstamp-vs-coinbase-advanced-trade.md): D 50.4 vs C 61.7\n- [Bybit vs Coinbase Advanced Trade API](https://www.anchorterminal.com/compare/bybit-vs-coinbase-advanced-trade.md): C 57.3 vs C 61.7\n- [Binance API vs Coinbase Advanced Trade API](https://www.anchorterminal.com/compare/binance-vs-coinbase-advanced-trade.md): B 63.2 vs C 61.7\n- [Coinbase Advanced Trade API vs Coinbase MCP server (Coinbase for Agents)](https://www.anchorterminal.com/compare/coinbase-advanced-trade-vs-coinbase-mcp.md): C 61.7 vs C 60\n- [Coinbase Advanced Trade API vs Crypto.com Exchange API](https://www.anchorterminal.com/compare/coinbase-advanced-trade-vs-crypto-com-exchange.md): C 61.7 vs D 46.8\n- [Coinbase Advanced Trade API vs Deribit](https://www.anchorterminal.com/compare/coinbase-advanced-trade-vs-deribit.md): C 61.7 vs C 59\n- [Coinbase Advanced Trade API vs Gate](https://www.anchorterminal.com/compare/coinbase-advanced-trade-vs-gate-io.md): C 61.7 vs C 56.4\n- [Coinbase Advanced Trade API vs Gemini Exchange API](https://www.anchorterminal.com/compare/coinbase-advanced-trade-vs-gemini-exchange.md): C 61.7 vs BB 74.6\n- [Coinbase Advanced Trade API vs HTX trading API](https://www.anchorterminal.com/compare/coinbase-advanced-trade-vs-htx.md): C 61.7 vs E 43.3\n- [Coinbase Advanced Trade API vs Hyperliquid](https://www.anchorterminal.com/compare/coinbase-advanced-trade-vs-hyperliquid.md): C 61.7 vs D 50\n- [Coinbase Advanced Trade API vs Kraken API](https://www.anchorterminal.com/compare/coinbase-advanced-trade-vs-kraken.md): C 61.7 vs BB 71\n- [Coinbase Advanced Trade API vs KuCoin](https://www.anchorterminal.com/compare/coinbase-advanced-trade-vs-kucoin.md): C 61.7 vs D 53.9\n- [Coinbase Advanced Trade API vs MEXC API](https://www.anchorterminal.com/compare/coinbase-advanced-trade-vs-mexc.md): C 61.7 vs C 56.3\n- [Coinbase Advanced Trade API vs OKX API](https://www.anchorterminal.com/compare/coinbase-advanced-trade-vs-okx.md): C 61.7 vs B 64.3\n- [Coinbase Advanced Trade API vs Uniswap Trading API](https://www.anchorterminal.com/compare/coinbase-advanced-trade-vs-uniswap.md): C 61.7 vs B 63.3\n- [Coinbase Advanced Trade API vs Upbit Open API](https://www.anchorterminal.com/compare/coinbase-advanced-trade-vs-upbit.md): C 61.7 vs C 54.7\n- [Coinbase Advanced Trade API vs dYdX](https://www.anchorterminal.com/compare/coinbase-advanced-trade-vs-dydx.md): C 61.7 vs B 69.5\n\n## Verify this listing\n\nFor the vendor. The badge or a plain link to this page verifies the listing, from a page on coinbase.com or one of its subdomains, or the README at the root of github.com/coinbase/coinbase-advanced-py. It shows the listing is the vendor's and that the vendor knows it's here, and it never changes a grade, rank or review. The vendor sends the page's address to `POST https://www.anchorterminal.com/api/v1/verify` as `{\"slug\": \"coinbase-advanced-trade\", \"url\": \"…\"}`, or calls the `verify_listing` tool at https://www.anchorterminal.com/mcp. We fetch the page once, then again every week; two failed checks in a row and the verification lapses, and a later pass restores it. What we check: https://www.anchorterminal.com/builders/index.md#verify\n\nHTML badge:\n\n```html\n\u003ca href=\"https://www.anchorterminal.com/tools/coinbase-advanced-trade\"\u003e\u003cimg src=\"https://www.anchorterminal.com/badges/coinbase-advanced-trade.svg\" alt=\"Coinbase Advanced Trade API on Anchor Terminal\" height=\"20\"\u003e\u003c/a\u003e\n```\n\nMarkdown badge, for a README:\n\n```markdown\n[![Coinbase Advanced Trade API on Anchor Terminal](https://www.anchorterminal.com/badges/coinbase-advanced-trade.svg)](https://www.anchorterminal.com/tools/coinbase-advanced-trade)\n```\n\nPlain link:\n\n```html\n\u003ca href=\"https://www.anchorterminal.com/tools/coinbase-advanced-trade\"\u003eCoinbase Advanced Trade API on Anchor Terminal\u003c/a\u003e\n```\n\n## Share this listing\n\nFor the vendor. Sharing assets for social media, two PNGs of 1200 × 630 that say Coinbase Advanced Trade API is listed on Anchor Terminal, with the vendor's logo and this page's address and no grade or score.\n\n- Dark: https://www.anchorterminal.com/assets/share/coinbase-advanced-trade-dark.png\n- Light: https://www.anchorterminal.com/assets/share/coinbase-advanced-trade-light.png\n", "meta": { "attribution": "Anchor Terminal (https://www.anchorterminal.com)", "attributionRequired": true, "credit": "CC BY 4.0, credit Anchor Terminal and link the page or API address you took it from (https://www.anchorterminal.com/terms/#data)", "docs": "https://www.anchorterminal.com/docs/", "generatedAt": "2026-11-04", "license": "CC-BY-4.0", "method": "https://www.anchorterminal.com/benchmark/", "methodology": "0.7", "openapi": "https://www.anchorterminal.com/openapi.json", "preview": false, "run": "2026-10-01", "runLabel": "October 2026 research run", "terms": "https://www.anchorterminal.com/terms/#data" }, "page": { "breadcrumbs": [ { "name": "Home", "url": "https://www.anchorterminal.com/" }, { "name": "Terminal", "url": "https://www.anchorterminal.com/tools/" }, { "name": "Crypto exchanges", "url": "https://www.anchorterminal.com/categories/crypto-exchanges" }, { "name": "Coinbase Advanced Trade API", "url": "" } ], "description": "Coinbase's Advanced Trade API is the trading API of a Coinbase account, with REST, WebSocket feeds and a static sandbox for spot, US futures and, since October 2026, perpetuals on a Deribit-based gateway, authenticated by CDP API keys.", "facts": [ "rank #493 of 1349", "OAuth or key auth", "0 desk reviews" ], "h1": "Coinbase Advanced Trade API", "image": "https://www.anchorterminal.com/assets/og/tools-coinbase-advanced-trade.png", "path": "/tools/coinbase-advanced-trade", "published": "2026-10-01", "section": "tools", "title": "Coinbase Advanced Trade review: pricing, alternatives, grade C", "toc": null, "updated": "2026-11-04", "url": "https://www.anchorterminal.com/tools/coinbase-advanced-trade" }, "tokens": { "markdown": 8450, "slim": 1930 }, "version": 1 }