AI-native runtime for CEX.IO trading strategies
Author in Cursor, Claude Code or any AI IDE. Deploy from GitHub into a managed cloud runtime with first-class MCP control, logs and region selection.
Section 01 · At a glance
At a glance
- Venue
- CEX.IO
- Venue type
- Crypto exchange (institutional + retail)
- Asset class
- Crypto (spot, institutional aggregated liquidity)
- Supported products
- Spot trading on major pairs through retail REST/WebSocket. CEX.IO Prime offers institutional aggregated liquidity over FIX 4.4 with separate REST and WebSocket tiers. US traffic blocked on Prime tiers despite FCA MLR registration.
- Runtime model
- Containerised strategy runtime
- Deployment source
- GitHub
- Languages
- Any language that runs in a container
- Common integrations
- CEX.IO Prime REST and WebSocket, CEX.IO Prime FIX 4.4, CCXT (retail spot), custom connectors
- AI workflow integration
- MCP control surface for Cursor, Claude Code, GitHub Copilot and CLI agents
- TradingHost role
- Runtime, deployment, logs, health checks, region selection, MCP control
- CEX.IO role
- Exchange account, API access, market access, execution venue
- Affiliation
- TradingHost is independent and is not affiliated with CEX.IO.
Section 02 · What CEX.IO offers
What CEX.IO offers
CEX.IO operates both a retail spot exchange and CEX.IO Prime, an institutional aggregated-liquidity desk with FIX 4.4 protocol support. The Prime Liquidity API uses three-header authentication (X-AGGR-KEY, X-AGGR-TIMESTAMP, X-AGGR-SIGNATURE) where the signature hashes action + timestamp + body, not the raw body. The 300-messages- per-minute Prime cap and the Funds External (withdrawal) permission isolation are both distinctive features. US traffic is blocked on Prime tiers despite the parent entity's FCA MLR registration. Endpoint specifics change over time. The shape is durable; the precise tier numbers and product lists live in CEX.IO's docs.
Markets and strategy patterns
- Institutional spot strategies on CEX.IO Prime aggregated liquidity
- FIX 4.4-driven order management for Prime clients
- REST/WebSocket spot trading on retail surfaces
- Cross-venue arbitrage paired with non-CEX.IO spot venues
- Permission-scoped withdrawal isolation (Funds External separated)
- WebSocket private channel order and balance streams
- TWAP and VWAP execution against aggregated Prime liquidity
- KYC-tier-gated fiat funding flow integrations
API surface
- Product surfaces
- CEX.IO retail spot via REST and WebSocket. CEX.IO Prime offers institutional aggregated liquidity over FIX 4.4, REST and WebSocket with separate tiers. The Prime Liquidity API enforces a 300 messages per minute hard cap with 429 backoff. US traffic is blocked on Prime tiers despite the parent entity's FCA MLR registration.
- Connection methods
- CEX.IO Prime REST and WebSocket with three-header authentication (X-AGGR-KEY, X-AGGR-TIMESTAMP, X-AGGR-SIGNATURE). FIX 4.4 protocol support for institutional Prime Liquidity clients. Retail surfaces use a separate REST/WebSocket signing scheme. Each surface is rate-limited independently.
- Authentication
- CEX.IO Prime signed requests use HMAC over action + timestamp + body (not raw body), signed with a base64-decoded secret, emitted as X-AGGR-SIGNATURE. API key permissions split into Read, Trade, Funds Internal, Funds Wallet and Funds External (withdrawal). Strategies should never need Funds External scope. Permissions are scoped per key.
For specifics, refer to CEX.IO
Specific endpoints, rate-limit weights, symbol lists, fee tiers and version history live in CEX.IO's documentation. Treat these as the source of truth.
Section 03 · Build with AI
Build your CEX.IO strategy with AI
Pick an integration method, fork a TradingHost framework starter, and author your strategy in an AI IDE. Cursor, Claude Code, GitHub Copilot and CLI-based AI agents all work with the same GitHub-native deployment loop.
Native CEX.IO Prime API
Direct control over Prime aggregated liquidity, FIX 4.4 and X-AGGR-* signed REST/WebSocket.
Hummingbot
Framework-based deployments using Hummingbot strategy structure and configuration model.
Custom FIX connector
QuickFIX or your own internal trading engine targeting CEX.IO Prime FIX 4.4.
Framework support for CEX.IO products
Framework coverage is uneven for CEX.IO. CCXT exposes CEX.IO retail spot through the unified cex class. Hummingbot and Freqtrade do not list CEX.IO in their officially supported connectors. FIX 4.4 is an institutional protocol surfaced by QuickFIX and equivalent libraries, not by retail crypto frameworks. Native CEX.IO Prime API access reaches the institutional aggregated-liquidity surface and FIX 4.4 directly.
✓ confirmed support per official framework docs. "no" indicates not officially documented as supported.
TradingHost does not force a framework. It runs your project.
Author with AI
The framework starters above pair naturally with AI IDEs. The TradingHost MCP control surface closes the loop: AI tools can inspect deployments, review logs and manage the runtime alongside you, never the trade execution path.
Section 04 · Run on TradingHost
Run your code on TradingHost
CEX.IO provides the exchange and API access. TradingHost provides the production environment where your CEX.IO-connected strategy runs.
Instead of running strategy code on a laptop, desktop machine, generic VPS or manually configured server, you deploy from GitHub into a TradingHost-managed container runtime.
You
- Your repo contains your code.
- Your deployment defines how it runs.
- Your strategy connects to CEX.IO.
TradingHost
- Keeps the runtime online.
- Surfaces logs and health checks.
- Region selection.
- Controlled deployment surface.
Deployment flow
- STEP 01
Connect GitHub
Authorise TradingHost to access your GitHub account.
- STEP 02
Link a repo or start from a framework
Point TradingHost at your existing strategy repo, or fork a TradingHost framework runtime (CCXT) for a working baseline against CEX.IO retail spot.
- STEP 03
Deploy into a TradingHost container
Pick a region (EU or US-East), supply the environment values your strategy needs (CEX.IO Prime API key, secret, FIX session config where relevant, etc.), and deploy. TradingHost builds your container from the repo and runs your strategy on managed Kubernetes infrastructure. No local Docker install required.
- STEP 04
Monitor logs and health
Watch live logs, health and runtime state from the TradingHost dashboard. The same surface is reachable through MCP from any AI IDE, so Cursor, Claude Code or a CLI agent can read deployment state and manage the runtime alongside you.
- STEP 05
Update and redeploy
Push changes to your GitHub main branch and TradingHost redeploys automatically.
Section 05 · Operational notes
Operational notes for CEX.IO
Things that bite you when you actually run a CEX.IO strategy in a containerised cloud runtime, not in CEX.IO's docs, not in framework READMEs. Every claim below is quoted or paraphrased from CEX.IO's own documentation; the deployment-side guidance is from running these strategies on TradingHost.
01 · 300 msg/min cap
CEX.IO Prime Liquidity API enforces 300 messages/min with 429 backoff
CEX.IO Prime caps signed requests at 300 messages per minute across the Liquidity API surface. Hitting the cap returns 429 responses; the client must back off until the rolling minute window clears. Strategies that drive market data through REST polling at high frequency will exhaust the budget quickly. The right pattern for Prime is WebSocket-driven market data and order updates, with REST reserved for actions that require it.
02 · X-AGGR auth
Three-header auth: X-AGGR-KEY, X-AGGR-TIMESTAMP, X-AGGR-SIGNATURE
CEX.IO Prime signed REST requests carry three headers: X-AGGR-KEY (your API key), X-AGGR-TIMESTAMP (request timestamp), and X-AGGR-SIGNATURE. The signature is HMAC over action + timestamp + body, signed with a base64-decoded secret. Note that the canonical signing input is action + timestamp + body, not raw body. Strategies that sign just the body return signature-error responses that look like wrong-secret errors. The base64-decoded secret detail also catches naive integrations that treat the secret as a UTF-8 string.
03 · FIX 4.4
FIX 4.4 protocol support for institutional Prime Liquidity clients
CEX.IO Prime supports FIX 4.4 alongside REST and WebSocket for institutional Prime Liquidity clients. FIX 4.4 carries its own session-management contract (logon, heartbeat, sequence number recovery on reconnect) that differs materially from REST/WebSocket. Strategies that target FIX should pin a battle-tested library such as QuickFIX, supervise the session state outside the strategy logic, and treat FIX session resets as recoverable runtime events rather than fatal errors.
04 · Permission isolation
API keys split into Read, Trade, Funds Internal, Funds Wallet, Funds External
CEX.IO API key permissions are split into five scopes: Read, Trade, Funds Internal (move balances between wallets within the account), Funds Wallet (move balances between sub-accounts), and Funds External (withdrawals). Strategies should never need Funds External; isolate withdrawal-capable keys on a separate manually-managed credential outside the container runtime. The five-way split is unusually granular and lets per-strategy keys carry exactly what the strategy needs, no more.
05 · US blocked on Prime
FCA MLR registration does not include US access; Prime tiers block US traffic
CEX.IO operates under FCA Money Laundering Regulations registration in the UK. That registration does not include US market access; CEX.IO Prime tiers block US-originating traffic at the venue boundary. A TradingHost runtime in the US-East region with US egress will see Prime endpoints refused regardless of account status. Pick a TradingHost region whose egress geography is consistent with both your user agreement and your own compliance posture; for Prime, the EU region is typically the right choice.
06 · Signed input
REST signature hashes action + timestamp + body, not raw body alone
A common silent failure on CEX.IO Prime is signing the wrong canonical input. The signature is HMAC of the concatenation action + timestamp + body, signed with the base64-decoded secret. Strategies that hash just the body, or the URL path, or that forget to base64-decode the secret, see signature-error responses that look like wrong-key errors. Unit-test the signing path against a known-good request before shipping; the cost of debugging this in production is high.
Section 06 · Built for
Built for
TradingHost CEX.IO runtimes are best suited to:
- Developers building strategies in AI IDEs (Cursor, Claude Code)
- Systematic crypto traders
- Quant developers
- CEX.IO Prime institutional clients
- CCXT users
- Teams moving from VPS hosting to containerised deployment
Connecting GitHub and creating your first strategy is free.
Section 08 · FAQ
FAQ
No. TradingHost is independent and is not affiliated with CEX.IO.
No. Your strategy code connects to CEX.IO and sends instructions according to your own logic, account permissions and integration method. TradingHost provides the runtime where that code runs.
No. CEX.IO API access is provided by CEX.IO. You are responsible for your CEX.IO account, API permissions, credentials and compliance with CEX.IO’s terms.
No. TradingHost is the cloud runtime where your strategy code runs. We do not provide signals, AI prediction models or pre-built bots. With TradingHost you write or generate the strategy yourself (often with Cursor or Claude Code), keep it in GitHub as your code, and use TradingHost to run it in production. 3Commas, Cryptohopper and similar products own the strategy logic; TradingHost runs your strategy.
AWS and DigitalOcean give you raw compute. You handle OS updates, container orchestration, log shipping, secret rotation, region failover and uptime monitoring yourself. TradingHost gives you a managed runtime purpose-built for trading strategies: GitHub-native deployment, MCP-driven control from AI IDEs, log and health surfaces out of the box. If you want to operate the infrastructure yourself, AWS works. If you want the runtime as a managed service, TradingHost is the shorter path.
Yes. TradingHost runs Python strategies; pick the framework runtime that matches your stack or deploy your own repo.
Yes. TradingHost supports any language that can run inside a container.
Yes. CCXT exposes CEX.IO retail spot through the unified `cex` class. CEX.IO Prime aggregated liquidity is institutional and not a first-class CCXT market; for Prime, target the native Prime Liquidity API or FIX 4.4. See the CCXT framework runtime for the full setup story.
Yes. TradingHost is venue-agnostic at the runtime level: any code that can authenticate against CEX.IO Prime can run inside a container, including a FIX 4.4 session. The implication you have to design for is that FIX has its own session-management contract (logon, heartbeat, sequence-number recovery) that differs from REST/WebSocket. Pin a battle-tested library such as QuickFIX, supervise the session state outside the strategy logic, and treat FIX session resets as recoverable runtime events.
Yes, if your project is designed that way. You can run multiple strategy processes or services inside one runtime, or separate them into different runtimes for isolation and operational clarity. See the TradingHost runtime page for the multi-strategy model.
The fastest path is to fork a TradingHost framework runtime: CCXT for a ready-to-deploy retail spot project. Or connect your own GitHub strategy repo if you target the native Prime Liquidity API or FIX 4.4. Linking a GitHub repo and creating a strategy is free; runtime plans are listed on the pricing page.
In your GitHub-controlled secrets workflow. TradingHost reads them at runtime through GitHub repository secrets, environment secrets or your own approved secret-management process. TradingHost does not need custody of your Prime API key, secret or FIX session config. See platform secrets for the full handling model.
No. Strategies should never need Funds External (withdrawal) permission. CEX.IO splits API key permissions into five scopes: Read, Trade, Funds Internal, Funds Wallet and Funds External. Per-strategy keys with only the scopes that strategy needs contain the blast radius if a key leaks; isolate withdrawal-capable keys on a separate manually-managed credential outside the container runtime.
Yes. TradingHost supports MCP-based control for AI IDEs including Cursor, Claude Code, GitHub Copilot and CLI-based AI agents. AI tools can inspect deployments, review logs, restart strategies and manage runtime workflows. MCP is a control and observability surface, not the trade execution path. See the MCP control surface for the full picture.
Both. The MCP control surface works equally well from CLI-based agents (Claude Code CLI, custom MCP clients, scripted MCP calls) and from inside an IDE. The GitHub-native deployment loop also works without any AI tooling: a regular git push to your main branch triggers a redeploy.
The runtime detects the crash and exposes the relevant logs and health information. Where supported, the affected strategy can be restarted without disrupting other strategies running in the same container. Your strategy code is still responsible for safe error handling, duplicate-order protection and risk controls. See observability for the logs and health surface.
CEX.IO Prime signs HMAC over action + timestamp + body, not raw body alone, with a base64-decoded secret. Strategies that hash just the body, sign with the secret as a UTF-8 string instead of decoding from base64, or omit the action prefix see signature-error responses that look like wrong-key errors. Unit-test the signing path against a known-good request before shipping. See the Operational notes section above for the full guidance.
TradingHost runs in the EU and US-East regions. For CEX.IO Prime, the EU region is typically the right choice because US traffic is blocked on Prime tiers despite the parent entity's FCA MLR registration. Pick the region whose egress geography is consistent with both your user agreement and your own compliance posture. See the regions page for routing and proximity details.
No. TradingHost is focused on production runtime and deployment. Backtesting belongs in your research stack, framework or AlgoBuilder.