Base URL
Authentication
Most endpoints require authentication via scoped API tokens with HMAC-SHA256 request signing:| Method | Headers | Use case |
|---|---|---|
| Scoped API Token (HMAC) | lmts-api-key, lmts-timestamp, lmts-signature | All integrations — traders, bots, partners, delegated signing |
Public endpoints like market browsing and orderbook data do not require authentication. Legacy API keys (
X-API-Key) are still supported for existing users but are no longer issued.Endpoint Groups
Authentication
Derive and manage scoped API tokens for authentication.
API Tokens
Scoped API token management for partner integrations — derive, list, and revoke HMAC-authenticated tokens.
Markets
Browse active markets, search, get details and feed events.
Trading
Create and cancel orders, batch order status, orderbook, historical prices, and user orders.
Partner Accounts
Create and manage sub-accounts for partner integrations.
Portfolio
Positions, trades, PnL chart, history, points, and allowance.
Public Portfolio
Public user positions, traded volume, and PnL data.
Key Concepts
| Concept | Description |
|---|---|
| Venue system | Each CLOB market has a venue with exchange and adapter addresses. Fetch via GET /markets/:slug. See Venue System. |
| EIP-712 signing | Orders are signed using the venue’s exchange address as verifyingContract. See EIP-712 Signing. |
| Order types | GTC (Good Till Cancelled) stays on the orderbook. FOK (Fill or Kill) executes immediately or cancels. |
| Token IDs | Each market has YES and NO position IDs returned in positionIds. Use these as tokenId in orders. |
| USDC decimals | USDC on Base has 6 decimals. Amounts are scaled by 1e6. |
WebSocket API
For real-time orderbook and position updates, see the WebSocket Events reference. URL:wss://ws.limitless.exchange | Namespace: /markets
Rate Limits
Rate limits are applied per API token, not per domain or IP address.| Limit | Value |
|---|---|
| Max concurrent requests | 2 |
| Min delay between calls | 300ms |