Two domains are utilised for REST endpoints and WebSocket channels, the difference between the two being if the request is public, or requires authentication.
Endpoints that require authentication should use the domain:
(https | wss)://api.bitfinex.com/
Public endpoints should use the domain:
(https | wss)://api-pub.bitfinex.com/
In order to access the parts of the API which require authentication, you must generate an API key and an API secret using this page
You can generate as many API keys as you would like, and each of those keys can be customised in a few ways.
Your security is essential to us. For every authenticated action taken via the Bitfinex API, a nonce is required. Nonces are used to guard against replay attacks. If multiple requests arrive at the API with the wrong nonce (e.g. because of an async timing issue) the API will reject the request.
This means that you will need a separate API key for each client if you want to use multiple HTTP or WebSocket connections concurrently.
Updated almost 3 years ago