Binance Authentication

All trading endpoints require either HMAC SHA256, RSA, or Ed25519 signed requests. Always detect the key type before signing, do not assume HMAC.

Base URLs

Required Headers

• X-MBX-APIKEY: your_api_key
• User-Agent: binance-fiat/1.1.0 (Skill)

Signing Process

Step 1: Build Query String

Include all parameters plus timestamp (current Unix time in milliseconds): transactionType=...&timestamp=1234567890123

Optional: Add recvWindow (default 5000ms) for timestamp tolerance.

Step 2: Percent‑Encode Parameters

Before generating the signature, percent‑encode all parameter names and values using UTF‑8 encoding according to RFC 3986. Unreserved characters that must not be encoded: A-Z a-z 0-9 - _ . ~

• Chinese characters example: symbol=这是测试币456

Percent‑encoded: symbol=%E8%BF%99%E6%98%AF%E6%B5%8B%E8%AF%95%E5%B8%81456

Important: The exact encoded query string must be used for both signing and the HTTP request.

Step 3: Generate Signature

Generate the signature from the encoded query string.

HMAC SHA256 signature

Create HMAC SHA256 signature of the query string using your secret key:

# Example using openssl
echo -n "transactionType=...&timestamp=1234567890123" | \
  openssl dgst -sha256 -hmac "your_secret_key"

RSA signature

Create RSA signature of the query string using your private key:

# Example using openssl
echo -n "transactionType=...&timestamp=1234567890123" | \
  openssl dgst -sha256 -sign private_key.pem | base64

Ed25519 signature

Create Ed25519 signature of the query string using your private key:

# Example using openssl
echo -n "transactionType=...&timestamp=1234567890123" | \
  openssl pkeyutl -sign -inkey private_key.pem | base64

Step 4: Append Signature

Add signature parameter to the query string: transactionType=...&timestamp=1234567890123&signature=abc123...

Step 5: Add Product User Agent Header

Include User-Agent header with the following string: binance-fiat/1.1.0 (Skill)

Complete Example

Request:

curl -X GET "https://api.binance.com/sapi/v1/fiat/orders" \
  -H "X-MBX-APIKEY: your_api_key" \
  -H "User-Agent: binance-fiat/1.1.0 (Skill)" \
  -d "transactionType=...&timestamp=1234567890123&signature=..."

#!/bin/bash
API_KEY="your_api_key"
SECRET_KEY="your_secret_key"
BASE_URL="https://api.binance.com"  

# Get current timestamp
TIMESTAMP=$(date +%s000)

# Build query string (without signature)
QUERY="transactionType=...&timestamp=${TIMESTAMP}"

# Generate signature
# For HMAC SHA256:
SIGNATURE=$(echo -n "$QUERY" | openssl dgst -sha256 -hmac "$SECRET_KEY" | cut -d' ' -f2)

# For RSA or Ed25519, replace the above line with the appropriate signing command.
##  RSA:
# SIGNATURE=$(echo -n "$QUERY" | openssl dgst -sha256 -sign private_key.pem | base64)

##  Ed25519:
# SIGNATURE=$(echo -n "$QUERY" | openssl pkeyutl -sign -inkey private_key.pem | base64)

# Make request
curl -X GET "${BASE_URL}/sapi/v1/fiat/orders?${QUERY}&signature=${SIGNATURE}" \
  -H "X-MBX-APIKEY: ${API_KEY}"\
  -H "User-Agent: binance-fiat/1.1.0 (Skill)"

Security Notes

• Never share your secret key
• Use IP whitelist in Binance API settings
• Enable only required permissions (spot trading, no withdrawals)