AI-native runtime for Crypto.com Exchange trading strategies
Author in Cursor, Claude Code or any AI IDE. Deploy from GitHub into a managed cloud runtime with first-class MCP control, logs and region selection.
Section 01 · At a glance
At a glance
- Venue
- Crypto.com Exchange (operated by Foris DAX Limited, Cayman Islands)
- Venue type
- Centralised crypto exchange
- Asset class
- Crypto (spot, derivatives perpetuals, margin)
- Supported products
- Spot, perpetual derivatives, margin. Derivatives are offered by separately licensed Crypto.com affiliates and are geo-restricted (excluded jurisdictions include the United States, United Kingdom, Singapore and ~110 others per Crypto.com's help-centre list).
- Runtime model
- Containerised strategy runtime
- Deployment source
- GitHub
- Languages
- Any language that runs in a container
- Common integrations
- Native Crypto.com Exchange v1 API, CCXT (`cryptocom`), FIX 4.4 (GEN 3.0, institutional), custom HTTP / WebSocket clients
- AI workflow integration
- MCP control surface for Cursor, Claude Code, GitHub Copilot and CLI agents
- TradingHost role
- Runtime, deployment, logs, health checks, region selection, MCP control
- Crypto.com Exchange role
- Exchange account, API key issuance, market access, execution venue, custody
- Affiliation
- TradingHost is independent and is not affiliated with Crypto.com, Foris DAX Limited, or any Crypto.com group entity.
Section 02 · What Crypto.com Exchange offers
What Crypto.com Exchange offers
Crypto.com Exchange offers spot, perpetual derivatives and margin trading via a unified v1 API that exposes REST, WebSocket and FIX 4.4 surfaces. Strategies authenticate with HMAC-SHA256-signed API keys; master and sub-account hierarchies are first-class, and a separate UAT sandbox is hosted on `uat-api.3ona.co`. Endpoint specifics change over time. The shape is durable; the precise rate-limit quotas, error codes and `-PERP` instrument lists live in Crypto.com's docs.
Markets and strategy patterns
- Spot market making across CRO and stablecoin pairs
- Perpetual basis and funding-rate capture on `-PERP` instruments
- Cross-venue spot vs perp arbitrage (single venue, two product surfaces)
- Margin-funded directional execution with isolated risk per sub-account
- Advanced Order Management (post-Jan-2026) trigger / TP / SL orchestration via `private/advanced/create-order`
- Broker-tagged execution with `broker_id` for fee-rebate strategies
- Latency-sensitive flow over FIX 4.4 for institutional desks
- Multi-strategy fan-out under one master account using sub-account isolation
API surface
- Product surfaces
- Spot, perpetual derivatives, margin via the unified Exchange v1 API. Staking, Earn and savings products are not algo-tradable. Sandbox lives at uat-api.3ona.co / uat-stream.3ona.co with separate keys.
- Connection methods
- REST and WebSocket. The previous Derivatives v1 API has been folded into Exchange v1; Spot v2.1 was a prior generation. WebSocket runs on two streams: User API at `wss://stream.crypto.com/exchange/v1/user`, Market Data at `wss://stream.crypto.com/exchange/v1/market`. FIX 4.4 (GEN 3.0) endpoint for institutional accounts.
- Authentication
- HMAC-SHA256 over `method + id + api_key + parameter_string + nonce`, signed with API secret. Master / sub-account hierarchy via `private/get-accounts`. Optional per-key IP whitelist (required for keys with trading or withdrawal permissions).
For specifics, refer to Crypto.com
Specific endpoints, rate-limit quotas, instrument lists, fee tiers and version history live in Crypto.com's documentation. Treat these as the source of truth.
Section 03 · Build with AI
Build your Crypto.com Exchange strategy with AI
Pick an integration method, fork a TradingHost framework starter, and author your strategy in an AI IDE. Cursor, Claude Code, GitHub Copilot and CLI-based AI agents all work with the same GitHub-native deployment loop.
Native Crypto.com Exchange v1 API
Direct control over Crypto.com Exchange-specific behaviour, account data and order execution logic. Single unified key addresses spot, margin and perpetual derivatives; supports `broker_id` tagging for fee-rebate flows and the Advanced Order Management endpoints for TP/SL and trigger orders.
CCXT
Common interface across Crypto.com Exchange and other crypto exchanges. CCXT marks `cryptocom` as certified, pro-tier with spot, margin and swap capability flags. Treat CCXT as a convenience layer; the post-Jan-2026 Advanced Order Management endpoints follow the native Exchange v1 contract.
FIX 4.4 (GEN 3.0)
Institutional FIX endpoint for latency-sensitive desks. Operates alongside the REST and WebSocket surfaces; onboarding is gated by Crypto.com institutional account review.
Custom HTTP / WebSocket client
Your own internal trading engine or proprietary Crypto.com Exchange integration over the public REST and WebSocket endpoints.
Framework support for Crypto.com Exchange products
Coverage varies by framework. The native Crypto.com Exchange v1 API and CCXT `cryptocom` both span spot, perp and margin under a single unified key. Freqtrade has no official Crypto.com Exchange support and only reaches the venue via CCXT generic compatibility, spot only. Hummingbot's `crypto_com` connector was flagged outdated after the GEN 3 API upgrade and is not on Hummingbot's current exchanges list; for production, prefer native v1 or CCXT.
✓ confirmed support per official framework docs. "no" indicates not officially documented as supported. "via CCXT" indicates the framework only reaches Crypto.com through generic CCXT compatibility. "stale connector" indicates an existing connector that has not tracked the venue's API upgrades. Workflow links target /workflows/ pages currently in authoring.
TradingHost does not force a framework. It runs your project.
Author with AI
The framework starters above pair naturally with AI IDEs. The TradingHost MCP control surface closes the loop: AI tools can inspect deployments, review logs and manage the runtime alongside you, never the trade execution path.
Section 04 · Run on TradingHost
Run your code on TradingHost
Crypto.com Exchange provides the exchange and API access. TradingHost provides the production environment where your Crypto.com Exchange-connected strategy runs.
Instead of running strategy code on a laptop, desktop machine, generic VPS or manually configured server, you deploy from GitHub into a TradingHost-managed container runtime.
You
- Your repo contains your code.
- Your deployment defines how it runs.
- Your strategy connects to Crypto.com Exchange.
TradingHost
- Keeps the runtime online.
- Surfaces logs and health checks.
- Region selection.
- Controlled deployment surface.
Deployment flow
- STEP 01
Connect GitHub
Authorise TradingHost to access your GitHub account.
- STEP 02
Link a repo or start from a framework
Point TradingHost at your existing strategy repo, or fork a TradingHost framework runtime (CCXT or your own native Crypto.com Exchange starter) for a working baseline.
- STEP 03
Deploy into a TradingHost container
Pick a region (EU or US-East), supply the environment values your strategy needs (Crypto.com Exchange API keys, base URLs for production or UAT, etc.), and deploy. TradingHost builds your container from the repo and runs your strategy on managed Kubernetes infrastructure. No local Docker install required.
- STEP 04
Monitor logs and health
Watch live logs, health and runtime state from the TradingHost dashboard. The same surface is reachable through MCP from any AI IDE, so Cursor, Claude Code or a CLI agent can read deployment state and manage the runtime alongside you.
- STEP 05
Update and redeploy
Push changes to your GitHub main branch and TradingHost redeploys automatically.
Section 05 · Operational notes
Operational notes for Crypto.com Exchange
Things that bite you when you actually run a Crypto.com Exchange strategy in a containerised cloud runtime, not in Crypto.com's docs, not in framework READMEs. Every claim below is quoted or paraphrased from Crypto.com's own documentation; the deployment-side guidance is from running these strategies on TradingHost.
01 · API migration
Advanced Order Management API rollout (Dec 2025 to Jan 2026)
Crypto.com migrated trigger orders to `private/advanced/create-order` on 2025-12-17 08:00 UTC, and Take Profit / Stop Loss order creation and cancellation followed on 2026-01-28 08:00 UTC. Code that previously hit `private/create-order` for TP/SL or trigger orders must move to the advanced endpoint and the `user.advanced.order` subscription. Strategies that did not update before the cutover lost conditional-order functionality.
02 · Venue distinction
Exchange API is not the App API
Crypto.com runs two distinct platforms. The Crypto.com Exchange (web, crypto.com/exchange) exposes a public, documented HMAC-signed API; the Crypto.com App (retail wallet) does not have a public trading API. API keys generated inside the App will not authenticate against the Exchange and vice versa; this is the single most common onboarding failure.
03 · Derivatives access
Geo-restricted and entity-segmented
Derivatives are operated by separately licensed Crypto.com affiliates (Foris DAX MT Limited internationally; Crypto.com Derivatives North America / CDNA in the US). Roughly 110 jurisdictions are excluded from the international derivatives venue, including the US, UK and Singapore. Spot API keys do not automatically grant derivatives trading even on accounts in eligible regions.
04 · Rate limiting
Per-method, per-channel quotas
Per-method REST quotas are tight: `private/create-order`, `private/cancel-order` and `private/cancel-all-orders` are capped at 15 requests per 100 ms; `private/get-order-detail` at 30 per 100 ms; `private/get-trades` and `private/get-order-history` at 1 per second; all other private methods at 3 per 100 ms. Public REST is 100 rps per IP. WebSocket: 150 rps on User API, 100 rps on Market Data. Breaching returns `42901` (HTTP 429).
05 · WebSocket lifecycle
30s heartbeat, 1s warm-up
The server emits a heartbeat every 30 seconds; the client must reply with `public/respond-heartbeat` using the matching `id` within 5 seconds or the socket is closed. Crypto.com explicitly recommends sleeping 1 second between WebSocket open and first request to avoid rate-limit on connect. Termination codes to handle: 1000 (normal), 1006 (abnormal), 1013 (server restart, requires reconnect with backoff).
06 · Environments
UAT sandbox is on a separate host
Production hits api.crypto.com and stream.crypto.com. The UAT sandbox lives on uat-api.3ona.co and uat-stream.3ona.co and uses separate API keys. Strategies must read base URLs from environment variables rather than hardcoding api.crypto.com, or sandbox runs will silently hit production.
07 · Auth errors
Nonce, signature, and IP failure modes
Three error codes dominate auth issues: `40101` (not authenticated, key or signature wrong), `40102` (nonce drifts more than 60 seconds from server time), and `40103` (request IP is not in the key's whitelist). Running a container in a region whose egress IP differs from the whitelisted IP is the most common cause of `40103` after a redeploy.
Section 06 · Built for
Built for
TradingHost Crypto.com Exchange runtimes are best suited to:
- Developers building strategies in AI IDEs (Cursor, Claude Code)
- Systematic crypto traders
- Quant developers
- CCXT users
- Teams moving from VPS hosting to containerised deployment
Connecting GitHub and creating your first strategy is free.
Section 08 · FAQ
FAQ
No. TradingHost is independent and is not affiliated with Crypto.com, Foris DAX Limited, or any Crypto.com group entity.
No. Your strategy code connects to Crypto.com Exchange and sends instructions according to your own logic, account permissions and integration method. TradingHost provides the runtime where that code runs.
No. Crypto.com Exchange API access is provided by Crypto.com. You are responsible for your Crypto.com Exchange account, API permissions, credentials and compliance with Crypto.com’s terms.
No. TradingHost is the cloud runtime where your strategy code runs. We do not provide signals, AI prediction models or pre-built strategies. With TradingHost you write or generate the strategy yourself (often with Cursor or Claude Code), keep it in GitHub as your code, and use TradingHost to run it in production. 3Commas, Cryptohopper and similar products own the strategy logic; TradingHost runs your strategy.
AWS and DigitalOcean give you raw compute. You handle OS updates, container orchestration, log shipping, secret rotation, region failover and uptime monitoring yourself. TradingHost gives you a managed runtime purpose-built for trading strategies: GitHub-native deployment, MCP-driven control from AI IDEs, log and health surfaces out of the box. If you want to operate the infrastructure yourself, AWS works. If you want the runtime as a managed service, TradingHost is the shorter path.
Yes. TradingHost runs Python strategies; pick the framework runtime that matches your stack or deploy your own repo.
Yes. TradingHost supports any language that can run inside a container.
Yes. CCXT exposes Crypto.com as exchange id `cryptocom` and lists it as certified, pro-tier with spot, margin and swap capability flags. Treat CCXT as a convenience layer; rate-limit semantics and the post-Jan-2026 Advanced Order Management endpoints follow the native Exchange v1 contract. See the CCXT framework runtime for the full setup story.
Yes, if your project is designed that way. You can run multiple strategy processes or services inside one runtime, or separate them into different runtimes for isolation and operational clarity. Crypto.com Exchange's master / sub-account hierarchy pairs naturally with this: each strategy can address its own sub-account under a single master key. See the TradingHost runtime page for the multi-strategy model.
The fastest path is to fork a TradingHost framework runtime such as CCXT for a ready-to-deploy project, or connect your own GitHub strategy repo. Linking a GitHub repo and creating a strategy is free; runtime plans are listed on the pricing page.
In your GitHub-controlled secrets workflow. TradingHost reads them at runtime through GitHub repository secrets, environment secrets or your own approved secret-management process. TradingHost does not need custody of your API key and secret. See platform secrets for the full handling model.
No. Strategies should never need withdrawal permissions. Crypto.com requires IP whitelisting on keys with trading or withdrawal permissions; keep withdrawal scope off your strategy keys and manage withdrawals separately.
Yes. TradingHost supports MCP-based control for AI IDEs including Cursor, Claude Code, GitHub Copilot and CLI-based AI agents. AI tools can inspect deployments, review logs, restart strategies and manage runtime workflows. MCP is a control and observability surface, not the trade execution path. See the MCP control surface for the full picture.
Both. The MCP control surface works equally well from CLI-based agents (Claude Code CLI, custom MCP clients, scripted MCP calls) and from inside an IDE. The GitHub-native deployment loop also works without any AI tooling: a regular git push to your main branch triggers a redeploy.
The runtime detects the crash and exposes the relevant logs and health information. Where supported, the affected strategy can be restarted without disrupting other strategies running in the same container. Your strategy code is still responsible for safe error handling, duplicate-order protection and risk controls. See observability for the logs and health surface.
40101 means the HMAC-SHA256 signature, key, or signed-parameter ordering is wrong; recheck the signed string `method + id + api_key + parameter_string + nonce` and the ascending sort of parameter keys. 40102 means your nonce is more than 60 seconds out of step with Crypto.com's server clock; sync NTP. 40103 means your request IP is not in the API key's whitelist; trading and withdrawal keys require an IP whitelist. See the Operational notes section above for the full guidance.
The Crypto.com Exchange is the trading venue with the public, documented v1 API used for algo trading; this is what TradingHost integrates with. The Crypto.com App is the retail wallet and consumer product; it does not publish a trading API. API keys are generated in the Exchange web UI under User Center > API, not in the mobile App.
Take Profit and Stop Loss order creation and cancellation moved from `private/create-order` to `private/advanced/create-order` on 2026-01-28 08:00 UTC, after trigger orders migrated on 2025-12-17 08:00 UTC. Strategies must now call the advanced endpoint for conditional orders and subscribe to `user.advanced.order` for state updates. Plain limit and market orders continue on `private/create-order`.
On the international venue the unified Exchange v1 API key can address spot, margin and perpetuals in one credential, but the underlying derivatives entitlement is bound to the account, not the key. Derivatives must be enabled on the account and the account must be in a non-excluded jurisdiction. In the US, derivatives run on a separately licensed affiliate (CDNA) with its own onboarding.
Freqtrade can reach Crypto.com via CCXT but is not officially supported by the Freqtrade team. Hummingbot's `crypto_com` connector is flagged outdated since the GEN 3 API upgrade and is not on Hummingbot's current exchanges list; treat it as unsupported and use CCXT or native v1 directly.
TradingHost runs in the EU and US-East regions. Pick the region closest to the matching engine your strategy depends on. See the regions page for routing and proximity details.
No. TradingHost is focused on production runtime and deployment. Backtesting belongs in your research stack, framework or AlgoBuilder.