Read time … min

AI-native runtime for Crypto.com Exchange trading strategies

Author in Cursor, Claude Code or any AI IDE. Deploy from GitHub into a managed cloud runtime with first-class MCP control, logs and region selection.

By the TradingHost engineering team

Section 01 · At a glance

At a glance

Venue
Crypto.com Exchange (operated by Foris DAX Limited, Cayman Islands)
Venue type
Centralised crypto exchange
Asset class
Crypto (spot, derivatives perpetuals, margin)
Supported products
Spot, perpetual derivatives, margin. Derivatives are offered by separately licensed Crypto.com affiliates and are geo-restricted (excluded jurisdictions include the United States, United Kingdom, Singapore and ~110 others per Crypto.com's help-centre list).
Runtime model
Containerised strategy runtime
Deployment source
GitHub
Languages
Any language that runs in a container
Common integrations
Native Crypto.com Exchange v1 API, CCXT (`cryptocom`), FIX 4.4 (GEN 3.0, institutional), custom HTTP / WebSocket clients
AI workflow integration
MCP control surface for Cursor, Claude Code, GitHub Copilot and CLI agents
TradingHost role
Runtime, deployment, logs, health checks, region selection, MCP control
Crypto.com Exchange role
Exchange account, API key issuance, market access, execution venue, custody
Affiliation
TradingHost is independent and is not affiliated with Crypto.com, Foris DAX Limited, or any Crypto.com group entity.

Section 02 · What Crypto.com Exchange offers

What Crypto.com Exchange offers

Crypto.com Exchange offers spot, perpetual derivatives and margin trading via a unified v1 API that exposes REST, WebSocket and FIX 4.4 surfaces. Strategies authenticate with HMAC-SHA256-signed API keys; master and sub-account hierarchies are first-class, and a separate UAT sandbox is hosted on `uat-api.3ona.co`. Endpoint specifics change over time. The shape is durable; the precise rate-limit quotas, error codes and `-PERP` instrument lists live in Crypto.com's docs.

Markets and strategy patterns

  • Spot market making across CRO and stablecoin pairs
  • Perpetual basis and funding-rate capture on `-PERP` instruments
  • Cross-venue spot vs perp arbitrage (single venue, two product surfaces)
  • Margin-funded directional execution with isolated risk per sub-account
  • Advanced Order Management (post-Jan-2026) trigger / TP / SL orchestration via `private/advanced/create-order`
  • Broker-tagged execution with `broker_id` for fee-rebate strategies
  • Latency-sensitive flow over FIX 4.4 for institutional desks
  • Multi-strategy fan-out under one master account using sub-account isolation

API surface

Product surfaces
Spot, perpetual derivatives, margin via the unified Exchange v1 API. Staking, Earn and savings products are not algo-tradable. Sandbox lives at uat-api.3ona.co / uat-stream.3ona.co with separate keys.
Connection methods
REST and WebSocket. The previous Derivatives v1 API has been folded into Exchange v1; Spot v2.1 was a prior generation. WebSocket runs on two streams: User API at `wss://stream.crypto.com/exchange/v1/user`, Market Data at `wss://stream.crypto.com/exchange/v1/market`. FIX 4.4 (GEN 3.0) endpoint for institutional accounts.
Authentication
HMAC-SHA256 over `method + id + api_key + parameter_string + nonce`, signed with API secret. Master / sub-account hierarchy via `private/get-accounts`. Optional per-key IP whitelist (required for keys with trading or withdrawal permissions).

Section 03 · Build with AI

Build your Crypto.com Exchange strategy with AI

Pick an integration method, fork a TradingHost framework starter, and author your strategy in an AI IDE. Cursor, Claude Code, GitHub Copilot and CLI-based AI agents all work with the same GitHub-native deployment loop.

  • Native Crypto.com Exchange v1 API

    Direct control over Crypto.com Exchange-specific behaviour, account data and order execution logic. Single unified key addresses spot, margin and perpetual derivatives; supports `broker_id` tagging for fee-rebate flows and the Advanced Order Management endpoints for TP/SL and trigger orders.

  • CCXT

    Common interface across Crypto.com Exchange and other crypto exchanges. CCXT marks `cryptocom` as certified, pro-tier with spot, margin and swap capability flags. Treat CCXT as a convenience layer; the post-Jan-2026 Advanced Order Management endpoints follow the native Exchange v1 contract.

  • FIX 4.4 (GEN 3.0)

    Institutional FIX endpoint for latency-sensitive desks. Operates alongside the REST and WebSocket surfaces; onboarding is gated by Crypto.com institutional account review.

  • Custom HTTP / WebSocket client

    Your own internal trading engine or proprietary Crypto.com Exchange integration over the public REST and WebSocket endpoints.

Framework support for Crypto.com Exchange products

Coverage varies by framework. The native Crypto.com Exchange v1 API and CCXT `cryptocom` both span spot, perp and margin under a single unified key. Freqtrade has no official Crypto.com Exchange support and only reaches the venue via CCXT generic compatibility, spot only. Hummingbot's `crypto_com` connector was flagged outdated after the GEN 3 API upgrade and is not on Hummingbot's current exchanges list; for production, prefer native v1 or CCXT.

FrameworkSpotPerpMargin
Native Crypto.com Exchange v1SupportedSupportedSupported
CCXT (`cryptocom`)SupportedSupportedSupported
FreqtradePartially supportedNot documented as supportedNot documented as supported
HummingbotPartially supportedNot documented as supportedNot documented as supported

✓ confirmed support per official framework docs. "no" indicates not officially documented as supported. "via CCXT" indicates the framework only reaches Crypto.com through generic CCXT compatibility. "stale connector" indicates an existing connector that has not tracked the venue's API upgrades. Workflow links target /workflows/ pages currently in authoring.

TradingHost does not force a framework. It runs your project.

Author with AI

The framework starters above pair naturally with AI IDEs. The TradingHost MCP control surface closes the loop: AI tools can inspect deployments, review logs and manage the runtime alongside you, never the trade execution path.

Section 04 · Run on TradingHost

Run your code on TradingHost

Crypto.com Exchange provides the exchange and API access. TradingHost provides the production environment where your Crypto.com Exchange-connected strategy runs.

Instead of running strategy code on a laptop, desktop machine, generic VPS or manually configured server, you deploy from GitHub into a TradingHost-managed container runtime.

You

  • Your repo contains your code.
  • Your deployment defines how it runs.
  • Your strategy connects to Crypto.com Exchange.

TradingHost

  • Keeps the runtime online.
  • Surfaces logs and health checks.
  • Region selection.
  • Controlled deployment surface.

Deployment flow

  1. STEP 01

    Connect GitHub

    Authorise TradingHost to access your GitHub account.

  2. STEP 02

    Link a repo or start from a framework

    Point TradingHost at your existing strategy repo, or fork a TradingHost framework runtime (CCXT or your own native Crypto.com Exchange starter) for a working baseline.

  3. STEP 03

    Deploy into a TradingHost container

    Pick a region (EU or US-East), supply the environment values your strategy needs (Crypto.com Exchange API keys, base URLs for production or UAT, etc.), and deploy. TradingHost builds your container from the repo and runs your strategy on managed Kubernetes infrastructure. No local Docker install required.

  4. STEP 04

    Monitor logs and health

    Watch live logs, health and runtime state from the TradingHost dashboard. The same surface is reachable through MCP from any AI IDE, so Cursor, Claude Code or a CLI agent can read deployment state and manage the runtime alongside you.

  5. STEP 05

    Update and redeploy

    Push changes to your GitHub main branch and TradingHost redeploys automatically.

Section 05 · Operational notes

Operational notes for Crypto.com Exchange

Things that bite you when you actually run a Crypto.com Exchange strategy in a containerised cloud runtime, not in Crypto.com's docs, not in framework READMEs. Every claim below is quoted or paraphrased from Crypto.com's own documentation; the deployment-side guidance is from running these strategies on TradingHost.

  1. 01 · API migration

    Advanced Order Management API rollout (Dec 2025 to Jan 2026)

    Crypto.com migrated trigger orders to `private/advanced/create-order` on 2025-12-17 08:00 UTC, and Take Profit / Stop Loss order creation and cancellation followed on 2026-01-28 08:00 UTC. Code that previously hit `private/create-order` for TP/SL or trigger orders must move to the advanced endpoint and the `user.advanced.order` subscription. Strategies that did not update before the cutover lost conditional-order functionality.

  2. 02 · Venue distinction

    Exchange API is not the App API

    Crypto.com runs two distinct platforms. The Crypto.com Exchange (web, crypto.com/exchange) exposes a public, documented HMAC-signed API; the Crypto.com App (retail wallet) does not have a public trading API. API keys generated inside the App will not authenticate against the Exchange and vice versa; this is the single most common onboarding failure.

  3. 03 · Derivatives access

    Geo-restricted and entity-segmented

    Derivatives are operated by separately licensed Crypto.com affiliates (Foris DAX MT Limited internationally; Crypto.com Derivatives North America / CDNA in the US). Roughly 110 jurisdictions are excluded from the international derivatives venue, including the US, UK and Singapore. Spot API keys do not automatically grant derivatives trading even on accounts in eligible regions.

  4. 04 · Rate limiting

    Per-method, per-channel quotas

    Per-method REST quotas are tight: `private/create-order`, `private/cancel-order` and `private/cancel-all-orders` are capped at 15 requests per 100 ms; `private/get-order-detail` at 30 per 100 ms; `private/get-trades` and `private/get-order-history` at 1 per second; all other private methods at 3 per 100 ms. Public REST is 100 rps per IP. WebSocket: 150 rps on User API, 100 rps on Market Data. Breaching returns `42901` (HTTP 429).

  5. 05 · WebSocket lifecycle

    30s heartbeat, 1s warm-up

    The server emits a heartbeat every 30 seconds; the client must reply with `public/respond-heartbeat` using the matching `id` within 5 seconds or the socket is closed. Crypto.com explicitly recommends sleeping 1 second between WebSocket open and first request to avoid rate-limit on connect. Termination codes to handle: 1000 (normal), 1006 (abnormal), 1013 (server restart, requires reconnect with backoff).

  6. 06 · Environments

    UAT sandbox is on a separate host

    Production hits api.crypto.com and stream.crypto.com. The UAT sandbox lives on uat-api.3ona.co and uat-stream.3ona.co and uses separate API keys. Strategies must read base URLs from environment variables rather than hardcoding api.crypto.com, or sandbox runs will silently hit production.

  7. 07 · Auth errors

    Nonce, signature, and IP failure modes

    Three error codes dominate auth issues: `40101` (not authenticated, key or signature wrong), `40102` (nonce drifts more than 60 seconds from server time), and `40103` (request IP is not in the key's whitelist). Running a container in a region whose egress IP differs from the whitelisted IP is the most common cause of `40103` after a redeploy.

Section 06 · Built for

Built for

TradingHost Crypto.com Exchange runtimes are best suited to:

  • Developers building strategies in AI IDEs (Cursor, Claude Code)
  • Systematic crypto traders
  • Quant developers
  • CCXT users
  • Teams moving from VPS hosting to containerised deployment

Connecting GitHub and creating your first strategy is free.

Section 08 · FAQ

FAQ

No. TradingHost is independent and is not affiliated with Crypto.com, Foris DAX Limited, or any Crypto.com group entity.

No. Your strategy code connects to Crypto.com Exchange and sends instructions according to your own logic, account permissions and integration method. TradingHost provides the runtime where that code runs.

No. Crypto.com Exchange API access is provided by Crypto.com. You are responsible for your Crypto.com Exchange account, API permissions, credentials and compliance with Crypto.com’s terms.

No. TradingHost is the cloud runtime where your strategy code runs. We do not provide signals, AI prediction models or pre-built strategies. With TradingHost you write or generate the strategy yourself (often with Cursor or Claude Code), keep it in GitHub as your code, and use TradingHost to run it in production. 3Commas, Cryptohopper and similar products own the strategy logic; TradingHost runs your strategy.

AWS and DigitalOcean give you raw compute. You handle OS updates, container orchestration, log shipping, secret rotation, region failover and uptime monitoring yourself. TradingHost gives you a managed runtime purpose-built for trading strategies: GitHub-native deployment, MCP-driven control from AI IDEs, log and health surfaces out of the box. If you want to operate the infrastructure yourself, AWS works. If you want the runtime as a managed service, TradingHost is the shorter path.

Yes. TradingHost runs Python strategies; pick the framework runtime that matches your stack or deploy your own repo.

Yes. TradingHost supports any language that can run inside a container.

Yes. CCXT exposes Crypto.com as exchange id `cryptocom` and lists it as certified, pro-tier with spot, margin and swap capability flags. Treat CCXT as a convenience layer; rate-limit semantics and the post-Jan-2026 Advanced Order Management endpoints follow the native Exchange v1 contract. See the CCXT framework runtime for the full setup story.

Yes, if your project is designed that way. You can run multiple strategy processes or services inside one runtime, or separate them into different runtimes for isolation and operational clarity. Crypto.com Exchange's master / sub-account hierarchy pairs naturally with this: each strategy can address its own sub-account under a single master key. See the TradingHost runtime page for the multi-strategy model.

The fastest path is to fork a TradingHost framework runtime such as CCXT for a ready-to-deploy project, or connect your own GitHub strategy repo. Linking a GitHub repo and creating a strategy is free; runtime plans are listed on the pricing page.

In your GitHub-controlled secrets workflow. TradingHost reads them at runtime through GitHub repository secrets, environment secrets or your own approved secret-management process. TradingHost does not need custody of your API key and secret. See platform secrets for the full handling model.

No. Strategies should never need withdrawal permissions. Crypto.com requires IP whitelisting on keys with trading or withdrawal permissions; keep withdrawal scope off your strategy keys and manage withdrawals separately.

Yes. TradingHost supports MCP-based control for AI IDEs including Cursor, Claude Code, GitHub Copilot and CLI-based AI agents. AI tools can inspect deployments, review logs, restart strategies and manage runtime workflows. MCP is a control and observability surface, not the trade execution path. See the MCP control surface for the full picture.

Both. The MCP control surface works equally well from CLI-based agents (Claude Code CLI, custom MCP clients, scripted MCP calls) and from inside an IDE. The GitHub-native deployment loop also works without any AI tooling: a regular git push to your main branch triggers a redeploy.

The runtime detects the crash and exposes the relevant logs and health information. Where supported, the affected strategy can be restarted without disrupting other strategies running in the same container. Your strategy code is still responsible for safe error handling, duplicate-order protection and risk controls. See observability for the logs and health surface.

40101 means the HMAC-SHA256 signature, key, or signed-parameter ordering is wrong; recheck the signed string `method + id + api_key + parameter_string + nonce` and the ascending sort of parameter keys. 40102 means your nonce is more than 60 seconds out of step with Crypto.com's server clock; sync NTP. 40103 means your request IP is not in the API key's whitelist; trading and withdrawal keys require an IP whitelist. See the Operational notes section above for the full guidance.

The Crypto.com Exchange is the trading venue with the public, documented v1 API used for algo trading; this is what TradingHost integrates with. The Crypto.com App is the retail wallet and consumer product; it does not publish a trading API. API keys are generated in the Exchange web UI under User Center > API, not in the mobile App.

Take Profit and Stop Loss order creation and cancellation moved from `private/create-order` to `private/advanced/create-order` on 2026-01-28 08:00 UTC, after trigger orders migrated on 2025-12-17 08:00 UTC. Strategies must now call the advanced endpoint for conditional orders and subscribe to `user.advanced.order` for state updates. Plain limit and market orders continue on `private/create-order`.

On the international venue the unified Exchange v1 API key can address spot, margin and perpetuals in one credential, but the underlying derivatives entitlement is bound to the account, not the key. Derivatives must be enabled on the account and the account must be in a non-excluded jurisdiction. In the US, derivatives run on a separately licensed affiliate (CDNA) with its own onboarding.

Freqtrade can reach Crypto.com via CCXT but is not officially supported by the Freqtrade team. Hummingbot's `crypto_com` connector is flagged outdated since the GEN 3 API upgrade and is not on Hummingbot's current exchanges list; treat it as unsupported and use CCXT or native v1 directly.

TradingHost runs in the EU and US-East regions. Pick the region closest to the matching engine your strategy depends on. See the regions page for routing and proximity details.

No. TradingHost is focused on production runtime and deployment. Backtesting belongs in your research stack, framework or AlgoBuilder.