SignalBee
Docs/Exchange Guides

XT.com Exchange Setup

Connect your XT.com account to SignalBee in minutes. This guide walks you through creating and configuring API keys with the exact permissions needed for automated trading.


Prerequisites

Before you begin, make sure you have:

  • Verified XT.com account - Identity verification (KYC) completed
  • 2FA enabled on XT.com - Required for API key creation
  • SignalBee account - Ready to connect an exchange
  • Password manager - For storing your API credentials securely

Security Note: XT.com requires 2FA (two-factor authentication) to create API keys. If you haven't enabled 2FA yet, go to ProfileSecurity in your XT.com account.


About XT.com

XT.com is a global cryptocurrency exchange with an extensive selection of trading pairs. Key highlights:

  • Global exchange - Serves traders worldwide with a diverse asset selection
  • Wide altcoin selection - Extensive list of altcoins and emerging tokens
  • Competitive fees - 0.2% maker/taker fees on spot markets
  • XT token benefits - Native token offers fee discounts and other perks
  • Simple API setup - Straightforward two-credential authentication (like Binance)
  • Testnet available - Test your integration without risking real funds

Creating Your API Key

Follow these steps to create an API key on XT.com:

Step 1: Log In to XT.com

  1. Go to www.xt.com
  2. Log in with your email and password
  3. Complete 2FA verification if prompted

Step 2: Navigate to API Management

  1. Click your profile icon in the top-right corner
  2. Select API Management from the dropdown menu
  3. You'll see a list of your existing API keys (if any)

Step 3: Create a New API Key

  1. Click the Create API button
  2. You'll be presented with the API configuration screen

Step 4: Enter a Label

  1. Enter a descriptive label: SignalBee Trading
  2. A clear label helps you identify this key's purpose later

Tip: Use specific labels like "SignalBee-Spot" or "SignalBee-Main" if you plan to create multiple keys for different purposes.

Step 5: Configure Permissions

  1. Check the permission boxes as described in the Configuring Permissions section below
  2. Enable Read and Spot Trade permissions
  3. Never enable the Withdrawal permission

Step 6: Complete Security Verification

  1. Enter your 2FA code from your authenticator app
  2. Click Confirm to create your key
  3. Wait for the system to generate your credentials

Step 7: Copy Your Keys IMMEDIATELY

After creation, your credentials will be displayed:

  • API Key - Can be viewed later in your API Management page
  • Secret Key - Shown only ONCE - Copy it immediately!
KeyCan View Later?Action Required
API KeyYesCopy and save
Secret KeyNO - Never shown againCopy immediately!

Warning: If you navigate away without copying your Secret Key, you'll need to delete this API key and create a new one. There is no way to recover a Secret Key.

Save both keys in your password manager now before proceeding.


Configuring Permissions

XT.com has a straightforward permission system. This is critical for security.

Required Permissions

PermissionEnable?Why
ReadYesAllows SignalBee to check your balances and account info
Spot TradeYesAllows SignalBee to place and manage spot orders

Never Enable These Permissions

PermissionEnable?Why
WithdrawNEVERSignalBee never needs withdrawal access. Enabling this is a serious security risk.

Security Note: Even if your API key is somehow compromised, funds cannot be withdrawn without withdrawal permission enabled. This is your most important security protection.

Simple Two-Credential Setup

XT.com uses a simple credential model similar to Binance:

ExchangeCredentials Required
XT.com2 values: API Key + Secret Key
Binance2 values: API Key + Secret Key
LBank2 values: API Key + Secret Key
WhiteBIT2 values: API Key + Secret Key
OKX3 values: API Key + Secret Key + Passphrase
KuCoin3 values: API Key + Secret Key + Passphrase

This makes XT.com one of the simpler exchanges to configure.


IP Whitelist Configuration

IP whitelisting restricts your API key to only work from specific IP addresses. This is optional but adds a strong security layer.

Why Use IP Whitelisting?

ScenarioWithout WhitelistWith Whitelist
SignalBee places tradeWorksWorks
Attacker tries stolen keyCould workBlocked

Even if your API key is somehow exposed, it won't work from unauthorized IP addresses.

SignalBee Server IP Addresses

Note: Contact support@signalbee.trade to request SignalBee's current production IP addresses for whitelisting. We maintain static IPs specifically for exchange API calls and will notify you before any infrastructure changes.

How to Configure IP Whitelisting

  1. In API Management, find your SignalBee API key
  2. Click Edit next to the key
  3. Enable IP Address Restriction
  4. Enter each SignalBee IP address provided by support
  5. Click Save
  6. Complete 2FA verification if prompted

If You Skip IP Whitelisting

If you choose not to use IP whitelisting:

  1. Leave IP restrictions disabled
  2. Understand this is less secure but still safe if withdrawals are disabled
  3. Your other security measures (no withdrawal permission) still protect your funds

Adding to SignalBee

Now connect your XT.com API key to SignalBee:

Step 1: Go to Exchanges Page

  1. Log in to your SignalBee account
  2. Navigate to Exchanges in the main menu

Step 2: Add New Exchange

  1. Click the Add Exchange button
  2. Select XT.com from the exchange list

Step 3: Enter Your Credentials

XT.com uses a simple two-value API system:

  1. API Key - Paste your XT.com API key
  2. Secret Key - Paste your XT.com Secret key
  3. Label (optional) - Enter a name like "XT.com Main Account"

Note: XT.com requires only 2 credentials (API Key + Secret Key). This is simpler than exchanges like OKX or KuCoin that require an additional passphrase.

Step 4: Test the Connection

  1. Click Save and Test Connection
  2. Wait for SignalBee to verify your credentials
  3. Look for the success message

Step 5: Verify Your Setup

After successful connection:

  1. Your XT.com balances should appear in SignalBee
  2. Check that your expected assets are listed
  3. Balances confirm the Read permission is working

Tip: If balances don't appear, verify that Read permission is enabled on your API key.


XT.com-Specific Considerations

Ticker Format

XT.com uses lowercase underscore-separated ticker symbols. SignalBee converts automatically:

SignalBee FormatXT.com Format
BTC-USDTbtc_usdt
ETH-USDCeth_usdc
SOL-BTCsol_btc
XRP-USDTxrp_usdt

No action needed! Your webhook symbols work directly with XT.com - SignalBee handles the conversion automatically.

Supported Order Types

XT.com spot trading supports the following order types:

Order TypeSupportedNotes
Market OrderYesExecutes immediately at best available price
Limit OrderYesExecutes at specified price or better
Stop-LossNoNot available on XT.com
Stop-Loss-LimitNoNot available on XT.com
Take-ProfitNoNot available on XT.com

Important: XT.com only supports Market and Limit orders for spot trading. If your trading strategy requires stop-loss or take-profit orders, these must be managed at the strategy level rather than as native exchange orders.

HMAC-SHA256 Authentication

XT.com uses HMAC-SHA256 for request signing, the same algorithm used by most major exchanges including Binance and MEXC.

What this means for you:

  • SignalBee handles this automatically - no action required
  • Your credentials work exactly like other exchanges
  • Standard signing is completely transparent to you

Note: You don't need to understand the technical details. Just provide your API Key and Secret Key, and SignalBee handles the rest.

Testnet Available

XT.com provides a testnet for testing your integration without real funds:

EnvironmentURLPurpose
Productionwww.xt.comLive trading with real funds
Testnettestnet.xt.comPractice trading with test funds

Tip: Consider testing your webhook setup on the XT.com testnet first before going live. Create separate API keys for testnet testing.

Minimum Order Sizes

XT.com enforces minimum order values. Orders below these minimums will be rejected:

RequirementDescription
Min AmountMinimum quantity of base asset
Min ValueMinimum value of order (price × quantity)

Tip: Check XT.com's trading rules for current minimum order sizes for specific pairs. If you receive "Min Amount" or "Min Value" errors, increase your order size.

Trading Fees

Fee TypeRate
Maker0.2%
Taker0.2%

XT.com offers fee discounts for XT token holders. Check XT.com's fee schedule for details on VIP tiers and XT token discounts.

API Rate Limits

  • XT.com allows 10 requests per second per user and 1000 requests per minute per IP
  • SignalBee handles rate limiting automatically
  • If you see rate limit errors, reduce your signal frequency or check for duplicate webhooks

Wide Altcoin Selection

XT.com lists many altcoins and emerging tokens:

  • Verify your desired trading pairs are listed on XT.com before setting up webhooks
  • Check XT.com's markets page for the current list of available pairs
  • Some tokens may have limited liquidity - consider this when placing larger orders

Troubleshooting

Common XT.com-specific errors and solutions:

ErrorCodeLikely CauseSolution
Invalid API Key307Wrong or deleted API keyRe-copy API key carefully from XT.com
Invalid Signature308Wrong secret keyRe-copy Secret Key exactly. If lost, create new key.
Insufficient Balance102Not enough fundsDeposit funds or reduce order size
Order Not Found103, 121-124Invalid order IDOrder may have been filled or cancelled already
Invalid Symbol104Wrong trading pairVerify pair is listed on XT.com
Min Amount105Order quantity too smallIncrease order quantity above minimum
Min Value106Order value too lowIncrease quantity or price above minimum
Invalid Order107, 400Bad order parametersCheck price and quantity are valid
Rate Limit429Too many API requestsWait and retry (automatic). Reduce request frequency.
Server Error500+XT.com server issueWait and retry. Usually temporary.

Connection Test Fails?

If your connection test fails in SignalBee:

  1. Double-check both keys - Copy-paste errors are the most common issue
  2. Verify permissions - Ensure Read and Spot Trade permissions are enabled
  3. Check IP whitelist - Disable IP restriction temporarily to test
  4. Wait a few minutes - New API keys may take 1-2 minutes to propagate
  5. Check XT.com status - Verify XT.com is not under maintenance

For persistent issues, see our Error Codes Reference or contact support@signalbee.trade.


Security Best Practices

Follow this checklist to keep your XT.com account secure:

XT.com Account Security

  • Enable 2FA with Google Authenticator - more secure than SMS
  • Use a unique, strong password for XT.com (not reused from other sites)
  • Enable email notifications for account activity
  • Review login history regularly for unauthorized access

API Key Security

  • Create a dedicated API key just for SignalBee - don't reuse keys across services
  • Never enable withdrawal permission - SignalBee never needs it
  • Consider IP whitelisting for maximum security
  • Never share your Secret Key via email, chat, or screenshots
  • Store keys in a password manager (1Password, Bitwarden, etc.)

Ongoing Security

  • Review your API keys periodically in XT.com - delete any you don't recognize
  • Rotate API keys every 90 days as a security habit
  • Monitor trade history on XT.com for any unauthorized activity

Security Note: Even with all these precautions, the most important protection is never enabling withdrawal permission. Without this permission, your funds cannot be moved off the exchange even if everything else is compromised.