NDAX Exchange Setup
Connect your NDAX account to SignalBee in minutes. This guide walks you through creating and configuring API keys with the exact permissions needed for automated trading.
Important: NDAX requires three values for API authentication: API Key, Secret Key, AND your numeric User ID. You must save all three when creating your key.
Prerequisites
Before you begin, make sure you have:
- Verified NDAX account - Identity verification (KYC) completed
- 2FA enabled on NDAX - Required for API key creation
- Canadian residency - May be required (NDAX primarily serves Canadian traders)
- SignalBee account - Ready to connect an exchange
- Password manager - For storing your API credentials securely (you need to save THREE values)
Security Note: NDAX requires 2FA (two-factor authentication) to create API keys. If you haven't enabled 2FA yet, go to Settings → Security in your NDAX account.
About NDAX
NDAX (National Digital Asset Exchange) is a Canadian cryptocurrency exchange known for its regulatory compliance and CAD trading pairs. Key highlights:
- Canadian focus - Designed specifically for Canadian traders
- FINTRAC registered - Compliant with Canadian money services business regulations
- CAD trading pairs - Direct trading against Canadian Dollar
- Bank integration - Interac e-Transfer and wire transfer support for easy CAD deposits/withdrawals
Who should use NDAX: Canadian traders wanting direct CAD on/off ramps and regulatory compliance. Ideal if you prefer trading in Canadian dollars without going through USD stablecoins.
Creating Your API Key
Follow these steps to create an API key on NDAX:
Step 1: Log In to NDAX
- Go to ndax.io
- Log in with your email and password
- Complete 2FA verification if prompted
Step 2: Navigate to API Management
- Click your profile icon in the top-right corner
- Select Settings from the dropdown menu
- Click API Keys in the left sidebar
- You'll see a list of your existing API keys (if any)
Step 3: Create a New API Key
- Click the Create API Key button
- You'll be presented with the API configuration screen
Step 4: Enter API Key Details
- Enter a descriptive label:
SignalBee Trading - A clear label helps you identify this key's purpose later
Tip: Use specific labels like "SignalBee-Spot" or "SignalBee-Main" if you plan to create multiple keys for different purposes.
Step 5: Note Your User ID
- Find your numeric User ID on the API settings page — it is shown alongside your API keys
- Save your User ID together with the API key and secret
Note: The User ID identifies your NDAX user account to the trading API. Every API request SignalBee sends is signed with your API key, secret, and User ID together.
Step 6: Configure Permissions
- Check the permission boxes as described in the Configuring Permissions section below
- Enable Read and Trade permissions
- Never enable the Withdrawal permission
Step 7: Complete Security Verification
- Enter your 2FA code from your authenticator app
- Click Confirm to create your key
- Wait for the system to generate your credentials
Step 8: Copy Your Keys IMMEDIATELY
After creation, your credentials will be displayed:
| Value | Can View Later? | Action Required |
|---|---|---|
| API Key | ✅ Yes | Copy and save |
| Secret Key | ❌ NO - Never shown again | Copy immediately! |
| User ID | ✅ Yes (API settings page) | Copy and save |
Warning: If you navigate away without copying your Secret Key, you'll need to delete this API key and create a new one. There is no way to recover a Secret Key.
Save all three values in your password manager now before proceeding.
Configuring Permissions
NDAX has a straightforward permission system. This is critical for security.
Required Permissions
| Permission | Enable? | Why |
|---|---|---|
| Read | ✅ Yes | Allows SignalBee to check your balances and account info |
| Trade | ✅ Yes | Allows SignalBee to place and manage spot orders |
Never Enable These Permissions
| Permission | Enable? | Why |
|---|---|---|
| Withdraw | ❌ NEVER | SignalBee never needs withdrawal access. Enabling this is a serious security risk. |
Security Note: Even if your API key is somehow compromised, funds cannot be withdrawn without withdrawal permission enabled. This is your most important security protection.
Three-Credential Setup
NDAX uses a three-value credential model, comparable to OKX and KuCoin (which use a passphrase as their third value):
| Exchange | Credentials Required |
|---|---|
| NDAX | 3 values: API Key + Secret Key + User ID |
| OKX | 3 values: API Key + Secret Key + Passphrase |
| KuCoin | 3 values: API Key + Secret Key + Passphrase |
| Binance | 2 values: API Key + Secret Key |
| LBank | 2 values: API Key + Secret Key |
Every request is signed with all three values together — a leaked API key alone is not enough to authenticate.
IP Whitelist Configuration
IP whitelisting restricts your API key to only work from specific IP addresses. This is optional but adds a strong security layer.
Why Use IP Whitelisting?
| Scenario | Without Whitelist | With Whitelist |
|---|---|---|
| SignalBee places trade | ✅ Works | ✅ Works |
| Attacker tries stolen key | ⚠️ Could work | ❌ Blocked |
Even if your API key is somehow exposed, it won't work from unauthorized IP addresses.
SignalBee Server IP Addresses
Note: Contact support@signalbee.trade to request SignalBee's current production IP addresses for whitelisting. We maintain static IPs specifically for exchange API calls and will notify you before any infrastructure changes.
How to Configure IP Whitelisting
- In API Keys settings, find your SignalBee API key
- Click Edit next to the key
- Enable IP Address Restriction
- Enter each SignalBee IP address provided by support
- Click Save
- Complete 2FA verification if prompted
If You Skip IP Whitelisting
If you choose not to use IP whitelisting:
- Leave IP restrictions disabled
- Understand this is less secure but still safe if withdrawals are disabled
- Your other security measures (no withdrawal permission, three-value signing) still protect your funds
Adding to SignalBee
Now connect your NDAX API key to SignalBee:
Step 1: Go to Exchanges Page
- Log in to your SignalBee account
- Navigate to Exchanges in the main menu
Step 2: Add New Exchange
- Click the Add Exchange button
- Select NDAX from the exchange list
Step 3: Enter Your Credentials
NDAX requires three fields:
- API Key - Paste your NDAX API key
- Secret Key - Paste your NDAX Secret key
- User ID - Enter the numeric User ID shown on your NDAX API settings page
Warning: The User ID is the number NDAX assigns to your user account. It is NOT your email address or NDAX login password.
Step 4: Test the Connection
- Click Save and Test Connection
- Wait for SignalBee to verify your credentials
- Look for the ✅ success message
Step 5: Verify Your Setup
After successful connection:
- Your NDAX balances should appear in SignalBee
- Check that your expected assets are listed
- Balances confirm the Read permission is working
Tip: If balances don't appear, verify that Read permission is enabled on your API key.
NDAX-Specific Considerations
Ticker Format
NDAX uses uppercase underscore-separated ticker symbols. SignalBee converts automatically:
| SignalBee Format | NDAX Format |
|---|---|
| BTC-CAD | BTC_CAD |
| ETH-CAD | ETH_CAD |
| BTC-USDT | BTC_USDT |
| LTC-CAD | LTC_CAD |
No action needed! Your webhook symbols work directly with NDAX - SignalBee handles the conversion automatically.
Supported Order Types
Order types available through SignalBee on NDAX:
| Order Type | Supported | Notes |
|---|---|---|
| Market Order | ✅ Yes | Executes immediately at best available price |
| Limit Order | ✅ Yes | GTC (Good-Til-Canceled) default; IOC and FOK available |
| Stop-Loss / Take-Profit | ❌ Not via SignalBee | NDAX's API has native stop order types, but SignalBee does not currently send them for NDAX |
Canadian Dollar (CAD) Focus
NDAX is optimized for Canadian traders:
- Primary quote currency is CAD - Most pairs trade against Canadian Dollar
- Direct fiat support - Deposit/withdraw CAD via Interac e-Transfer or wire
- Limited pair selection - Fewer pairs than global exchanges, focused on major cryptocurrencies
- Canadian banking - Designed to work with Canadian financial institutions
Tip: If you need to trade obscure altcoins, consider using a global exchange. NDAX focuses on major cryptocurrencies with CAD liquidity.
Minimum Order Sizes
NDAX enforces minimum order values. Orders below these minimums will be rejected:
| Typical Minimum | Notes |
|---|---|
| Varies by pair | Check NDAX trading interface |
Tip: Check NDAX's trading rules for current minimum order sizes for specific pairs.
Trading Fees
| Fee Type | Rate |
|---|---|
| Spot Trading | Check NDAX for current rates |
Tip: Check NDAX's fee schedule for the most current rates and any volume-based discounts.
API Rate Limits
- NDAX enforces rate limits on API requests
- SignalBee handles rate limiting automatically
- If you see rate limit errors, reduce your signal frequency or check for duplicate webhooks
No Testnet Available
Important: NDAX does not offer a public testnet for spot trading.
| Testing Approach | Recommendation |
|---|---|
| Production testing | Start with very small order sizes |
| Signal verification | Test webhook delivery before enabling live trading |
| Order validation | Use limit orders to control execution price |
Tip: Start with small order sizes (e.g., $10-20 CAD) when first testing your SignalBee integration with NDAX.
Time Synchronization
Every NDAX API request carries a millisecond timestamp nonce. SignalBee synchronizes with the server clock automatically - no action required on your part.
Troubleshooting
Common NDAX-specific errors and solutions:
| Error | Wire response | Likely Cause | Solution |
|---|---|---|---|
| Insufficient Funds | Not_Enough_Funds (code 101) | Not enough balance for the order | Deposit funds or reduce order size. |
| Server Error | Server Error (code 102) | NDAX server issue | Wait and retry. Usually temporary. SignalBee retries automatically. |
| Order Not Found | Resource Not Found (code 104) | Invalid order ID | Order may have been filled or cancelled already. |
| Invalid Symbol | Invalid InstrumentId (code 100) | Wrong trading pair | Check pair is listed on NDAX. |
| Authentication Failed | HTTP 404 on private endpoints | Wrong API key, secret, or User ID | NDAX hides private endpoints from invalid credentials. Re-copy all THREE values carefully. |
| Rate Limit | HTTP 429 | Too many API requests | Wait and retry. Reduce signal frequency if persistent. |
| IP Not Whitelisted | HTTP 403 | IP restriction blocking request | Add SignalBee IPs to whitelist or disable IP restriction. |
Connection Test Fails?
If your connection test fails in SignalBee:
- Verify all THREE values - API Key, Secret Key, AND User ID must all be correct
- Check the User ID - Most common error. This is the numeric ID from your NDAX API settings page, not your email or password.
- Double-check Secret Key - Copy exactly as shown, with no extra spaces
- Wait a few minutes - New API keys may take 1-2 minutes to activate
- Verify permissions - Ensure Read and Trade permissions are enabled
- Check IP whitelist - Disable IP restriction temporarily to test
- Check NDAX status - Verify NDAX is not under maintenance
Common User ID Mistakes
| Mistake | Solution |
|---|---|
| Using your email or login password | Use the numeric User ID from the API settings page |
| Using the Account ID | If both are shown, the User ID is the one associated with your login, not the trading account |
| Extra spaces copied | Remove any leading/trailing spaces |
For persistent issues, see our Error Codes Reference or contact support@signalbee.trade.
Security Best Practices
Follow this checklist to keep your NDAX account secure:
NDAX Account Security
- Enable 2FA with Google Authenticator - more secure than SMS
- Use a unique, strong password for NDAX (not reused from other sites)
- Enable email notifications for account activity
- Review login history regularly for unauthorized access
API Key Security
- Create a dedicated API key just for SignalBee - don't reuse keys across services
- Never enable withdrawal permission - SignalBee never needs it
- Consider IP whitelisting for maximum security
- Never share your Secret Key via email, chat, or screenshots
- Store all THREE credentials in a password manager (1Password, Bitwarden, etc.)
Ongoing Security
- Review your API keys periodically in NDAX - delete any you don't recognize
- Rotate API keys every 90 days as a security habit
- Monitor trade history on NDAX for any unauthorized activity
- Keep your email secure - it's used for NDAX account recovery
Canadian Regulatory Compliance
NDAX is registered with FINTRAC (Financial Transactions and Reports Analysis Centre of Canada):
- Your account activity is subject to Canadian AML/KYC regulations
- NDAX may request additional verification for large transactions
- This regulatory oversight provides additional protection for your funds
Security Note: Even with all these precautions, the most important protection is never enabling withdrawal permissions. Without this permission, your funds cannot be moved off the exchange even if everything else is compromised.
Related Resources
- API Key Best Practices - General API key security guidance
- Security Overview - How SignalBee protects your data
- Error Codes Reference - Common error messages explained
- OKX Exchange Setup - Similar three-value authentication system
- KuCoin Exchange Setup - Similar three-value authentication system