# Crypto.com Exchange API (slim)

> Crypto.com Exchange's trading API for spot, perpetuals, margin, staking and trading bots, through REST, WebSocket and FIX with HMAC-signed API keys. Crypto.com's cdcx-cli adds an MCP server, agent skills and local paper trading.

- Full: https://www.anchorterminal.com/tools/crypto-com-exchange.md (~9,500 tokens) · this version ~2,380 tokens · JSON https://www.anchorterminal.com/tools/crypto-com-exchange.json · canonical https://www.anchorterminal.com/tools/crypto-com-exchange
- Index: https://www.anchorterminal.com/llms.txt · API: https://www.anchorterminal.com/api/v1/index.json · MCP: https://www.anchorterminal.com/mcp · Updated: 2026-11-04 · pricing https://www.anchorterminal.com/tools/crypto-com-exchange#pricing · reviews https://www.anchorterminal.com/tools/crypto-com-exchange#reviews
- Licence: CC BY 4.0, credit Anchor Terminal and link this page (https://www.anchorterminal.com/terms/#data)

**D · 46.8/100 · rank #1100 of 1349 · #20 in Crypto exchanges · not agent-ready · confidence low**


Assessment: Crypto.com is one of two exchanges here with an official MCP server, cdcx-cli, whose 95 generated tools are grouped by service and gated by safety tier. The API docs, OpenAPI file, terms and trading rules refused or hid from our reader, so rate limits, key permissions and the automated-trading clauses are unchecked, and cdcx has no release since June 2026.

## Facts

- Kind: HTTP API · vendor: Foris DAX Limited (Crypto.com) · category: Crypto exchanges · legal entity: Foris DAX Limited · provenance 77/100
- Local only (stdio): npm `@cryptocom/cdcx-cli`
- Auth: API key · pricing: Pay per use · x402: no · licence: Proprietary hosted API under the Exchange terms and conditions, which our reader couldn't load. cdcx-cli, the official CLI and MCP server, is MIT or Apache-2.0
- Probe metrics: not measured yet (probes haven't run)
- Surface listed: The hosted Exchange API at api.crypto.com/exchange/v1 as an agent calls it, read from crypto.com's Exchange pages (API overview, fees, privacy notice), the cdcx-cli and crypto-agent-trading repositories (shallow clone and READMEs), npm, status.crypto.com, the MCP registry and the help centre on 3 November 2026. The API docs host and the OpenAPI host refused robots.txt and were not fetched. No account, key, session or order
- MCP server: Official. `cdcx mcp` in github.com/crypto-com/cdcx-cli (Rust, MIT or Apache-2.0), stdio, 95 tools generated from the OpenAPI spec at run time, enabled by service group, with read, sensitive_read, mutate and dangerous tiers. npm `@cryptocom/cdcx-cli` 1.2.3 (repository tag v1.2.6, 18 June 2026). Authenticates with the Exchange API key and secret from the environment or config file. Not in the official MCP registry
- Key permissions: Keys are made under Settings > API Keys with 2FA. The official skills say to recommend IP whitelisting in production, that withdrawal addresses must be pre-approved, and the App skill's key has no withdrawal permission. The permission list itself (read, trade, withdraw) is on the docs host we couldn't read
- Rate limits: Unchecked. They are documented on exchange-docs.crypto.com, which answered 403 to robots.txt. cdcx's README does not state them
- Testnet or sandbox: UAT at https://uat-api.3ona.co/exchange/v1 with wss://uat-stream.3ona.co market and user streams, selected in cdcx with `--env uat`; the Exchange skill calls it a sandbox for institutional users. cdcx also has a local paper-trading engine (`cdcx paper`) with no credentials and no MCP tools
- Countries served: Unchecked for the Exchange; its terms loaded empty. The App's geo-restrictions article of 12 May 2026 lists about 70 restricted countries and regions (China, Russia, Iran, Cuba, North Korea, Venezuela, Indonesia and others), New York state and five Ukrainian regions, and says it covers the App
- Fees at the lowest tier: Spot 0.2500% maker and 0.5000% taker under $10,000 of 30-day volume, 0.2425% and 0.4850% with a CRO balance; 0.08% and 0.18% at $500,000 or more. Derivatives fees not on the page; liquidation fee 0.5%
- FIX and WebSocket: REST and WebSocket for spot, perpetuals and OTC (`user.order.{instrument_name}` streams); FIX for spot, perpetuals and the Predictions DCM and FCM venues; REST and WebSocket for Predictions coming soon, per the Exchange API page
- Terms on automated trading: Unchecked. The terms and conditions and trading rules pages at crypto.com/exchange-pro/en-US/document/ draw their text by script and loaded empty. The Exchange API page says only that it is built for automated trading
- Agent skills: crypto-com/crypto-agent-trading holds a Crypto.com App skill (market buys, sells, swaps, balances, a kill switch; Apache-2.0) and an Exchange spot skill documenting 52 endpoints with order groups (OCO, OTO, OTOCO) that requires explicit user confirmation before a production trade (MIT). cdcx-cli ships 13 more skill files
- Legal entity: Foris DAX Limited, an exempted company in the Cayman Islands (registration QH-354886), named as the Exchange's data controller in its privacy notice of 12 March 2025. Regional affiliates (Foris DAX MT Limited in Malta, Foris DAX Middle East FZE) run local services
- Status: status.crypto.com, a Statuspage site shared with the App and Card; the Exchange is named in two of 25 entries since 18 August 2026 and there is no Exchange API component
- Prices: Spot maker fee, Level 1 (under $10,000 of 30-day volume) 0.25% percentage fee; Spot taker fee, Level 1 0.5% percentage fee

- Scores: Reliability 50, Performance pending, Schema & documentation 42, Agent ergonomics 50, Security & auth 54, Payments & pricing 40, Task success pending, Maintenance & community 29, Transparency & trust 55 · total over the 7 assessed categories
- Why: Reliability, Read with the hosted lines on the Exchange API at api.crypto.com. · Schema & documentation, An OpenAPI spec exists, since cdcx-cli generates its 95 commands and tools from it at run time, but its host (exchange-developer.crypto.com)… · Agent ergonomics, Graded on the REST API as an agent calls it, with the MCP server noted. · Security & auth, HMAC-SHA256 API keys made with 2FA; IP whitelisting and pre-approved withdrawal addresses per the official skill, and revocation from the Ex… · Payments & pricing, No machine payment protocol (0). · Maintenance & community, Read as a closed service with an open CLI. · Transparency & trust, The editorial half.
- Sources: 19, open questions: 9, both in the full twin
- Capabilities: exchange.market-data, exchange.spot-trading, exchange.derivatives, exchange.balances, exchange.transfers, exchange.staking, market.crypto
- JSON: https://www.anchorterminal.com/api/v1/tools/crypto-com-exchange.json
- Verify (for the vendor): the badge `https://www.anchorterminal.com/badges/crypto-com-exchange.svg` or a link to https://www.anchorterminal.com/tools/crypto-com-exchange from a page on crypto.com or one of its subdomains, or the README at the root of github.com/crypto-com/cdcx-cli, then `POST https://www.anchorterminal.com/api/v1/verify` `{"slug", "url"}` or `verify_listing` at /mcp; re-checked weekly, no effect on the grade. Snippets in the full twin.
- Support: Discord https://discord.gg/cryptocom; contact@crypto.com; https://help.crypto.com/en; https://chat.crypto.com/; https://status.crypto.com/; more in the full twin

## Before you call it

1. Enable only the service groups the task needs with `cdcx mcp config --enable trade,account` (the default serves `market` alone), and leave `--allow-dangerous` off unless the person asks for withdrawals or cancel-all
2. Rehearse on `--env uat` or `cdcx paper` first; production keys trade real funds, and the skill requires explicit user confirmation before each live order
3. Put the key in CDCX_API_KEY and CDCX_API_SECRET or `~/.config/cdcx/config.toml` at 0600; there is no key flag, and the key should have no withdrawal permission and an IP allow-list
4. Pass `acknowledged: true` on mutate tools and `--dry-run` while testing; read the tool's generated schema before calling, since the docs host is unreadable to agents without a browser
5. Check the person's country against Crypto.com's geo-restriction article and the Exchange terms before trading; New York and about 70 countries are excluded from the App, and the Exchange list was unreadable

## Connect

```bash
curl -sSfL https://raw.githubusercontent.com/crypto-com/cdcx-cli/main/install.sh | sh
```

```bash
curl https://api.crypto.com/exchange/v1/public/get-tickers
```
Full config and headless snippets are in the full page. Through letme (picks today, calling later): https://letme.dev/crypto-com-exchange

## Similar tools

| Tool | Grade | Score | Shared capabilities | Slim |
| --- | --- | --- | --- | --- |
| Gemini Exchange API | BB | 74.6 | exchange.market-data, exchange.spot-trading, exchange.derivatives, exchange.balances, exchange.transfers, exchange.staking, market.crypto | https://www.anchorterminal.com/tools/gemini-exchange.min.md |
| Kraken API | BB | 71 | exchange.spot-trading, exchange.market-data, exchange.derivatives, exchange.balances, exchange.transfers, exchange.staking, market.crypto | https://www.anchorterminal.com/tools/kraken.min.md |
| OKX API | B | 64.3 | exchange.spot-trading, exchange.market-data, exchange.derivatives, exchange.balances, exchange.transfers, exchange.staking, market.crypto | https://www.anchorterminal.com/tools/okx.min.md |
| Binance API | B | 63.2 | exchange.spot-trading, exchange.market-data, exchange.derivatives, exchange.balances, exchange.transfers, exchange.staking, market.crypto | https://www.anchorterminal.com/tools/binance.min.md |
| Bitfinex API | C | 58.4 | exchange.market-data, exchange.spot-trading, exchange.derivatives, exchange.balances, exchange.transfers, exchange.staking, market.crypto | https://www.anchorterminal.com/tools/bitfinex.min.md |


## Panel reviews (0, desk reviews from public material, no calls made)