Read time … min

AI-native runtime for CEX.IO trading strategies

Author in Cursor, Claude Code or any AI IDE. Deploy from GitHub into a managed cloud runtime with first-class MCP control, logs and region selection.

By the TradingHost engineering team

Section 01 · At a glance

At a glance

Venue
CEX.IO
Venue type
Crypto exchange (institutional + retail)
Asset class
Crypto (spot, institutional aggregated liquidity)
Supported products
Spot trading on major pairs through retail REST/WebSocket. CEX.IO Prime offers institutional aggregated liquidity over FIX 4.4 with separate REST and WebSocket tiers. US traffic blocked on Prime tiers despite FCA MLR registration.
Runtime model
Containerised strategy runtime
Deployment source
GitHub
Languages
Any language that runs in a container
Common integrations
CEX.IO Prime REST and WebSocket, CEX.IO Prime FIX 4.4, CCXT (retail spot), custom connectors
AI workflow integration
MCP control surface for Cursor, Claude Code, GitHub Copilot and CLI agents
TradingHost role
Runtime, deployment, logs, health checks, region selection, MCP control
CEX.IO role
Exchange account, API access, market access, execution venue
Affiliation
TradingHost is independent and is not affiliated with CEX.IO.

Section 02 · What CEX.IO offers

What CEX.IO offers

CEX.IO operates both a retail spot exchange and CEX.IO Prime, an institutional aggregated-liquidity desk with FIX 4.4 protocol support. The Prime Liquidity API uses three-header authentication (X-AGGR-KEY, X-AGGR-TIMESTAMP, X-AGGR-SIGNATURE) where the signature hashes action + timestamp + body, not the raw body. The 300-messages- per-minute Prime cap and the Funds External (withdrawal) permission isolation are both distinctive features. US traffic is blocked on Prime tiers despite the parent entity's FCA MLR registration. Endpoint specifics change over time. The shape is durable; the precise tier numbers and product lists live in CEX.IO's docs.

Markets and strategy patterns

  • Institutional spot strategies on CEX.IO Prime aggregated liquidity
  • FIX 4.4-driven order management for Prime clients
  • REST/WebSocket spot trading on retail surfaces
  • Cross-venue arbitrage paired with non-CEX.IO spot venues
  • Permission-scoped withdrawal isolation (Funds External separated)
  • WebSocket private channel order and balance streams
  • TWAP and VWAP execution against aggregated Prime liquidity
  • KYC-tier-gated fiat funding flow integrations

API surface

Product surfaces
CEX.IO retail spot via REST and WebSocket. CEX.IO Prime offers institutional aggregated liquidity over FIX 4.4, REST and WebSocket with separate tiers. The Prime Liquidity API enforces a 300 messages per minute hard cap with 429 backoff. US traffic is blocked on Prime tiers despite the parent entity's FCA MLR registration.
Connection methods
CEX.IO Prime REST and WebSocket with three-header authentication (X-AGGR-KEY, X-AGGR-TIMESTAMP, X-AGGR-SIGNATURE). FIX 4.4 protocol support for institutional Prime Liquidity clients. Retail surfaces use a separate REST/WebSocket signing scheme. Each surface is rate-limited independently.
Authentication
CEX.IO Prime signed requests use HMAC over action + timestamp + body (not raw body), signed with a base64-decoded secret, emitted as X-AGGR-SIGNATURE. API key permissions split into Read, Trade, Funds Internal, Funds Wallet and Funds External (withdrawal). Strategies should never need Funds External scope. Permissions are scoped per key.

For specifics, refer to CEX.IO

Specific endpoints, rate-limit weights, symbol lists, fee tiers and version history live in CEX.IO's documentation. Treat these as the source of truth.

Section 03 · Build with AI

Build your CEX.IO strategy with AI

Pick an integration method, fork a TradingHost framework starter, and author your strategy in an AI IDE. Cursor, Claude Code, GitHub Copilot and CLI-based AI agents all work with the same GitHub-native deployment loop.

  • Native CEX.IO Prime API

    Direct control over Prime aggregated liquidity, FIX 4.4 and X-AGGR-* signed REST/WebSocket.

  • CCXT

    Common interface across CEX.IO retail spot and other crypto exchanges.

  • Hummingbot

    Framework-based deployments using Hummingbot strategy structure and configuration model.

  • Custom FIX connector

    QuickFIX or your own internal trading engine targeting CEX.IO Prime FIX 4.4.

Framework support for CEX.IO products

Framework coverage is uneven for CEX.IO. CCXT exposes CEX.IO retail spot through the unified cex class. Hummingbot and Freqtrade do not list CEX.IO in their officially supported connectors. FIX 4.4 is an institutional protocol surfaced by QuickFIX and equivalent libraries, not by retail crypto frameworks. Native CEX.IO Prime API access reaches the institutional aggregated-liquidity surface and FIX 4.4 directly.

FrameworkSpotFIX 4.4Options
Native CEX.IO PrimeSupportedSupportedNot documented as supported
CCXTSupportedNot documented as supportedNot documented as supported
HummingbotNot documented as supportedNot documented as supportedNot documented as supported
FreqtradeNot documented as supportedNot documented as supportedNot documented as supported

✓ confirmed support per official framework docs. "no" indicates not officially documented as supported.

TradingHost does not force a framework. It runs your project.

Author with AI

The framework starters above pair naturally with AI IDEs. The TradingHost MCP control surface closes the loop: AI tools can inspect deployments, review logs and manage the runtime alongside you, never the trade execution path.

Section 04 · Run on TradingHost

Run your code on TradingHost

CEX.IO provides the exchange and API access. TradingHost provides the production environment where your CEX.IO-connected strategy runs.

Instead of running strategy code on a laptop, desktop machine, generic VPS or manually configured server, you deploy from GitHub into a TradingHost-managed container runtime.

You

  • Your repo contains your code.
  • Your deployment defines how it runs.
  • Your strategy connects to CEX.IO.

TradingHost

  • Keeps the runtime online.
  • Surfaces logs and health checks.
  • Region selection.
  • Controlled deployment surface.

Deployment flow

  1. STEP 01

    Connect GitHub

    Authorise TradingHost to access your GitHub account.

  2. STEP 02

    Link a repo or start from a framework

    Point TradingHost at your existing strategy repo, or fork a TradingHost framework runtime (CCXT) for a working baseline against CEX.IO retail spot.

  3. STEP 03

    Deploy into a TradingHost container

    Pick a region (EU or US-East), supply the environment values your strategy needs (CEX.IO Prime API key, secret, FIX session config where relevant, etc.), and deploy. TradingHost builds your container from the repo and runs your strategy on managed Kubernetes infrastructure. No local Docker install required.

  4. STEP 04

    Monitor logs and health

    Watch live logs, health and runtime state from the TradingHost dashboard. The same surface is reachable through MCP from any AI IDE, so Cursor, Claude Code or a CLI agent can read deployment state and manage the runtime alongside you.

  5. STEP 05

    Update and redeploy

    Push changes to your GitHub main branch and TradingHost redeploys automatically.

Section 05 · Operational notes

Operational notes for CEX.IO

Things that bite you when you actually run a CEX.IO strategy in a containerised cloud runtime, not in CEX.IO's docs, not in framework READMEs. Every claim below is quoted or paraphrased from CEX.IO's own documentation; the deployment-side guidance is from running these strategies on TradingHost.

  1. 01 · 300 msg/min cap

    CEX.IO Prime Liquidity API enforces 300 messages/min with 429 backoff

    CEX.IO Prime caps signed requests at 300 messages per minute across the Liquidity API surface. Hitting the cap returns 429 responses; the client must back off until the rolling minute window clears. Strategies that drive market data through REST polling at high frequency will exhaust the budget quickly. The right pattern for Prime is WebSocket-driven market data and order updates, with REST reserved for actions that require it.

  2. 02 · X-AGGR auth

    Three-header auth: X-AGGR-KEY, X-AGGR-TIMESTAMP, X-AGGR-SIGNATURE

    CEX.IO Prime signed REST requests carry three headers: X-AGGR-KEY (your API key), X-AGGR-TIMESTAMP (request timestamp), and X-AGGR-SIGNATURE. The signature is HMAC over action + timestamp + body, signed with a base64-decoded secret. Note that the canonical signing input is action + timestamp + body, not raw body. Strategies that sign just the body return signature-error responses that look like wrong-secret errors. The base64-decoded secret detail also catches naive integrations that treat the secret as a UTF-8 string.

  3. 03 · FIX 4.4

    FIX 4.4 protocol support for institutional Prime Liquidity clients

    CEX.IO Prime supports FIX 4.4 alongside REST and WebSocket for institutional Prime Liquidity clients. FIX 4.4 carries its own session-management contract (logon, heartbeat, sequence number recovery on reconnect) that differs materially from REST/WebSocket. Strategies that target FIX should pin a battle-tested library such as QuickFIX, supervise the session state outside the strategy logic, and treat FIX session resets as recoverable runtime events rather than fatal errors.

  4. 04 · Permission isolation

    API keys split into Read, Trade, Funds Internal, Funds Wallet, Funds External

    CEX.IO API key permissions are split into five scopes: Read, Trade, Funds Internal (move balances between wallets within the account), Funds Wallet (move balances between sub-accounts), and Funds External (withdrawals). Strategies should never need Funds External; isolate withdrawal-capable keys on a separate manually-managed credential outside the container runtime. The five-way split is unusually granular and lets per-strategy keys carry exactly what the strategy needs, no more.

  5. 05 · US blocked on Prime

    FCA MLR registration does not include US access; Prime tiers block US traffic

    CEX.IO operates under FCA Money Laundering Regulations registration in the UK. That registration does not include US market access; CEX.IO Prime tiers block US-originating traffic at the venue boundary. A TradingHost runtime in the US-East region with US egress will see Prime endpoints refused regardless of account status. Pick a TradingHost region whose egress geography is consistent with both your user agreement and your own compliance posture; for Prime, the EU region is typically the right choice.

  6. 06 · Signed input

    REST signature hashes action + timestamp + body, not raw body alone

    A common silent failure on CEX.IO Prime is signing the wrong canonical input. The signature is HMAC of the concatenation action + timestamp + body, signed with the base64-decoded secret. Strategies that hash just the body, or the URL path, or that forget to base64-decode the secret, see signature-error responses that look like wrong-key errors. Unit-test the signing path against a known-good request before shipping; the cost of debugging this in production is high.

Section 06 · Built for

Built for

TradingHost CEX.IO runtimes are best suited to:

  • Developers building strategies in AI IDEs (Cursor, Claude Code)
  • Systematic crypto traders
  • Quant developers
  • CEX.IO Prime institutional clients
  • CCXT users
  • Teams moving from VPS hosting to containerised deployment

Connecting GitHub and creating your first strategy is free.

Section 08 · FAQ

FAQ

No. TradingHost is independent and is not affiliated with CEX.IO.

No. Your strategy code connects to CEX.IO and sends instructions according to your own logic, account permissions and integration method. TradingHost provides the runtime where that code runs.

No. CEX.IO API access is provided by CEX.IO. You are responsible for your CEX.IO account, API permissions, credentials and compliance with CEX.IO’s terms.

No. TradingHost is the cloud runtime where your strategy code runs. We do not provide signals, AI prediction models or pre-built bots. With TradingHost you write or generate the strategy yourself (often with Cursor or Claude Code), keep it in GitHub as your code, and use TradingHost to run it in production. 3Commas, Cryptohopper and similar products own the strategy logic; TradingHost runs your strategy.

AWS and DigitalOcean give you raw compute. You handle OS updates, container orchestration, log shipping, secret rotation, region failover and uptime monitoring yourself. TradingHost gives you a managed runtime purpose-built for trading strategies: GitHub-native deployment, MCP-driven control from AI IDEs, log and health surfaces out of the box. If you want to operate the infrastructure yourself, AWS works. If you want the runtime as a managed service, TradingHost is the shorter path.

Yes. TradingHost runs Python strategies; pick the framework runtime that matches your stack or deploy your own repo.

Yes. TradingHost supports any language that can run inside a container.

Yes. CCXT exposes CEX.IO retail spot through the unified `cex` class. CEX.IO Prime aggregated liquidity is institutional and not a first-class CCXT market; for Prime, target the native Prime Liquidity API or FIX 4.4. See the CCXT framework runtime for the full setup story.

Yes. TradingHost is venue-agnostic at the runtime level: any code that can authenticate against CEX.IO Prime can run inside a container, including a FIX 4.4 session. The implication you have to design for is that FIX has its own session-management contract (logon, heartbeat, sequence-number recovery) that differs from REST/WebSocket. Pin a battle-tested library such as QuickFIX, supervise the session state outside the strategy logic, and treat FIX session resets as recoverable runtime events.

Yes, if your project is designed that way. You can run multiple strategy processes or services inside one runtime, or separate them into different runtimes for isolation and operational clarity. See the TradingHost runtime page for the multi-strategy model.

The fastest path is to fork a TradingHost framework runtime: CCXT for a ready-to-deploy retail spot project. Or connect your own GitHub strategy repo if you target the native Prime Liquidity API or FIX 4.4. Linking a GitHub repo and creating a strategy is free; runtime plans are listed on the pricing page.

In your GitHub-controlled secrets workflow. TradingHost reads them at runtime through GitHub repository secrets, environment secrets or your own approved secret-management process. TradingHost does not need custody of your Prime API key, secret or FIX session config. See platform secrets for the full handling model.

No. Strategies should never need Funds External (withdrawal) permission. CEX.IO splits API key permissions into five scopes: Read, Trade, Funds Internal, Funds Wallet and Funds External. Per-strategy keys with only the scopes that strategy needs contain the blast radius if a key leaks; isolate withdrawal-capable keys on a separate manually-managed credential outside the container runtime.

Yes. TradingHost supports MCP-based control for AI IDEs including Cursor, Claude Code, GitHub Copilot and CLI-based AI agents. AI tools can inspect deployments, review logs, restart strategies and manage runtime workflows. MCP is a control and observability surface, not the trade execution path. See the MCP control surface for the full picture.

Both. The MCP control surface works equally well from CLI-based agents (Claude Code CLI, custom MCP clients, scripted MCP calls) and from inside an IDE. The GitHub-native deployment loop also works without any AI tooling: a regular git push to your main branch triggers a redeploy.

The runtime detects the crash and exposes the relevant logs and health information. Where supported, the affected strategy can be restarted without disrupting other strategies running in the same container. Your strategy code is still responsible for safe error handling, duplicate-order protection and risk controls. See observability for the logs and health surface.

CEX.IO Prime signs HMAC over action + timestamp + body, not raw body alone, with a base64-decoded secret. Strategies that hash just the body, sign with the secret as a UTF-8 string instead of decoding from base64, or omit the action prefix see signature-error responses that look like wrong-key errors. Unit-test the signing path against a known-good request before shipping. See the Operational notes section above for the full guidance.

TradingHost runs in the EU and US-East regions. For CEX.IO Prime, the EU region is typically the right choice because US traffic is blocked on Prime tiers despite the parent entity's FCA MLR registration. Pick the region whose egress geography is consistent with both your user agreement and your own compliance posture. See the regions page for routing and proximity details.

No. TradingHost is focused on production runtime and deployment. Backtesting belongs in your research stack, framework or AlgoBuilder.