Skip to main content

​
Production

Every REST endpoint lives under /v1/. There is no anonymous access — even market data requires a signed request.

​
Sandbox

Omnibook does not publish a separate sandbox environment. Integrate against production with small sizes, or run the local dev stack from the exchange repo if you need an isolated venue.

​
Signing is host-independent

The HMAC canonical string covers timestamp, METHOD, request-target, and body — not the hostname. The same signing code works against any deployment as long as you point BASE at the correct host. Query strings are part of the request target: sign /v1/rounds?limit=5, not /v1/rounds. WebSocket handshake signing is fixed:
See Authentication for the full signing contract.

​
Machine-readable specs

Download the generated contracts (also linked from the landing page): Run python3 scripts/sync-specs.py in the docs repo to regenerate from the exchange source of truth.