# Upbit Open API (slim)

> Upbit, the Korean exchange run by Dunamu, has a REST and WebSocket Open API for KRW, BTC and USDT market data, orders, balances, deposits and withdrawals, with official SDKs, a CLI and agent skills but no MCP server.

- Full: https://www.anchorterminal.com/tools/upbit.md (~8,250 tokens) · this version ~2,030 tokens · JSON https://www.anchorterminal.com/tools/upbit.json · canonical https://www.anchorterminal.com/tools/upbit
- Index: https://www.anchorterminal.com/llms.txt · API: https://www.anchorterminal.com/api/v1/index.json · MCP: https://www.anchorterminal.com/mcp · Updated: 2026-11-04 · pricing https://www.anchorterminal.com/tools/upbit#pricing · reviews https://www.anchorterminal.com/tools/upbit#reviews
- Licence: CC BY 4.0, credit Anchor Terminal and link this page (https://www.anchorterminal.com/terms/#data)

**C · 54.7/100 · rank #860 of 1349 · #14 in Crypto exchanges · not agent-ready · confidence medium**


Assessment: Upbit's Open API has a mandatory IP allow-list, scoped keys with a default withdrawal lock, per-group rate limits with 429 and 418 signalling, an order-test endpoint, official SDKs, a CLI and agent skills with a CONFIRM gate. There is no MCP server, sandbox or status page, and the fees and terms sit on a host our crawler may not read.

## Facts

- Kind: HTTP API · vendor: Dunamu Inc. · category: Crypto exchanges · legal entity: Dunamu Inc. · provenance 66/100
- Packages: npm `@upbit-official/upbit-cli`, pypi `upbit-sdk`
- Auth: API key · pricing: Pay per use · x402: no · licence: unknown
- Probe metrics: not measured yet (probes haven't run)
- Surface listed: The Korean Open API (REST at api.upbit.com and WebSocket) read from docs.upbit.com, its llms.txt and Markdown twins, the upbit-official GitHub organisation, npm and the MCP registry on 3 November 2026. No account was made, no private endpoint was called and the CLI was not run
- MCP server: None found. Looked in the developer centre's AI agent section (SDKs, CLI, Skills, Strategy Toolkit, CCXT), the upbit-official GitHub organisation (six repositories) and the official MCP registry, whose only upbit entry is a third party's io.github.mrfentmen/upbit-mcp (stdio, 21 September 2026). solangii/upbit-mcp-server and BrainDAO/mcp-upbit are also third-party
- Key permissions: Functions chosen at issuance (the docs name withdrawal and say at least one must be picked; the full list is on the issuance screen); a mandatory public IPv4 allow-list; withdrawal safe-lock on by default for keys with withdrawal permission, lifted only in the app; up to 10 keys on the main pocket and 5 per sub-pocket; secret shown once; expiry period not stated. Withdrawal address registration is a separate step in the account
- Rate limits: Quotation 10 a second per IP per group (market, candle, trade, ticker, orderbook). Exchange per pocket, default 30 a second, order 12 a second, order-test 8 a second, cancel-all 1 per 2 seconds; travel-rule checks 1 per 10 minutes per deposit. WebSocket 5 connections a second, 5 messages a second and 100 a minute per connection; requests with an Origin header 1 per 10 seconds. 429 on a breach, 418 after repeats with a block duration, Remaining-Req header (min deprecated). Updated 7 October 2026
- Testnet: None. POST /v1/orders/test validates an order without placing it (v1.6.1, 27 October 2025)
- Countries: The Korean exchange, with KRW, BTC and USDT markets, Korean identity verification and 2FA for keys and a KRW bank account for fiat. Upbit Singapore, Indonesia and Thailand have separate docs at global-docs.upbit.com. No served or excluded country list was readable; the terms are on upbit.com, which disallows our crawler
- Fees: Unchecked. The fee page is on upbit.com, whose robots.txt disallows every path
- FIX and WebSocket: WebSocket public streams (ticker, trade, orderbook, candle) and private streams (my order, my asset, announcements, technical indicators for KRW markets). No FIX found in the docs
- Terms on automation: Unchecked. The Open API Terms of Use are on upbit.com. The technical support notice says sample code is for reference at the user's own responsibility and refers to those terms; the AI guide says commercial use or redistribution of the docs may breach them
- Agent tooling: SDKs (Python `upbit-sdk`, TypeScript, Go; Apache-2.0 on GitHub), CLI `@upbit-official/upbit-cli` 1.0.0, Skills `upbit-official/upbit-agent-skills` for Claude Code and Cursor with a CONFIRM gate, and a backtest-only Strategy Toolkit in beta. Pocket API supported across them
- Changelog: Ten notices on docs.upbit.com, dated items among them the SDK v1.1.0 (20 October 2026), the rate-limit page (7 October 2026) and the path-format change effective 16 November 2026
- Legal entity: Dunamu Inc. (두나무 주식회사), per the SDK licence and the developer centre's privacy policy

- Scores: Reliability 42, Performance pending, Schema & documentation 66, Agent ergonomics 70, Security & auth 59, Payments & pricing 15, Task success pending, Maintenance & community 83, Transparency & trust 54 · total over the 7 assessed categories
- Why: Reliability, Read with the hosted lines. · Schema & documentation, No OpenAPI found; the reference is a readme.io site with a Markdown twin of every page (5 of 25). · Agent ergonomics, Graded on the REST API with the CLI. · Security & auth, Keys limited to chosen functions, a mandatory public IPv4 allow-list, a JWT per request with a fresh nonce, keys listed with expiry through… · Payments & pricing, No machine payment protocol (0). · Maintenance & community, Read as a closed service. · Transparency & trust, The editorial half.
- Sources: 22, open questions: 7, both in the full twin
- Capabilities: exchange.market-data, exchange.spot-trading, exchange.balances, exchange.transfers, market.crypto
- JSON: https://www.anchorterminal.com/api/v1/tools/upbit.json
- Verify (for the vendor): the badge `https://www.anchorterminal.com/badges/upbit.svg` or a link to https://www.anchorterminal.com/tools/upbit from a page on upbit.com or one of its subdomains, then `POST https://www.anchorterminal.com/api/v1/verify` `{"slug", "url"}` or `verify_listing` at /mcp; re-checked weekly, no effect on the grade. Snippets in the full twin.
- Support: open-api@upbit.com; https://docs.upbit.com/kr/page/upbit_open_api_support.md; https://docs.upbit.com; more in the full twin

## Before you call it

1. Ask the person for a key with only the functions the task needs and your server's public IPv4 address registered; a private or unregistered IP is refused
2. Sign every request with a fresh JWT (HS512, new nonce, SHA512 query hash) and branch on error.name, not error.message
3. Run POST /v1/orders/test before a live order; it costs nothing and shares the 8-a-second order-test group
4. Read Remaining-Req and keep orders under 12 a second per pocket; on 429 wait for the next second and on 418 wait out the stated block
5. Leave the withdrawal safe-lock on unless the person lifts it in the app, and send paths with single slashes and no trailing slash before 16 November 2026

## Connect

```bash
npm install -g @upbit-official/upbit-cli
```

```bash
curl 'https://api.upbit.com/v1/ticker?markets=KRW-BTC'
```
Full config and headless snippets are in the full page. Through letme (picks today, calling later): https://letme.dev/upbit

## Similar tools

| Tool | Grade | Score | Shared capabilities | Slim |
| --- | --- | --- | --- | --- |
| Gemini Exchange API | BB | 74.6 | exchange.market-data, exchange.spot-trading, exchange.balances, exchange.transfers, market.crypto | https://www.anchorterminal.com/tools/gemini-exchange.min.md |
| Kraken API | BB | 71 | exchange.spot-trading, exchange.market-data, exchange.balances, exchange.transfers, market.crypto | https://www.anchorterminal.com/tools/kraken.min.md |
| OKX API | B | 64.3 | exchange.spot-trading, exchange.market-data, exchange.balances, exchange.transfers, market.crypto | https://www.anchorterminal.com/tools/okx.min.md |
| Binance API | B | 63.2 | exchange.spot-trading, exchange.market-data, exchange.balances, exchange.transfers, market.crypto | https://www.anchorterminal.com/tools/binance.min.md |
| Coinbase Advanced Trade API | C | 61.7 | exchange.spot-trading, exchange.market-data, exchange.balances, exchange.transfers, market.crypto | https://www.anchorterminal.com/tools/coinbase-advanced-trade.min.md |


## Panel reviews (0, desk reviews from public material, no calls made)