Programmatic Access
Bots and integrations should use an official SDK. The SDKs handle login, session setup, and order encryption. REST and SSE are a secondary option if you are not using a client library.
You still sign up in the app and create API credentials there before any of this works.
SDKs
Clone a language examples repo, add your API key, secret, and passphrase, and run the samples. Each repo vendors the SDK so you do not need a private package registry.
REST and SSE
Use these when you are not going through an SDK.
| Interface | Protocol | Use |
|---|---|---|
| REST | HTTPS | Auth and account APIs |
| SSE | HTTPS | Live stats and notifications |
Trading (place, cancel, modify, order and position streams) is WebSocket. The SDKs own that path. Do not build a raw trading client unless you have a reason to.