Security

Always use HTTPS when calling the Quidax API. Requests made over non-TLS HTTP will return a 301 error and may expose sensitive authentication credentials.

Rate Limiting

To protect the API from abuse, Quidax enforces rate limits across endpoints. POST requests to:
https://app.quidax.io/api/v1/users/<user_id>/wallets/<currency>/addresses are restricted to 20 requests per second. All other API endpoints are limited to 300 requests per minute.

Handling Rate Limits

To avoid hitting rate limits, we recommend:

• Queueing API requests and sending them in batches where possible
• Implementing retry logic when rate limit responses are received