How AI is applied across API Evangelist and APIs.io. Read my AI disclosure →
API Evangelist API Evangelist
Discovery
Learnings
Guidance
Toolbox
Alignment
API Evangelist LLC

WhiteBIT Authentication API

OAuth 2.0 authentication endpoints for obtaining and refreshing access tokens.Available Scopes (requested during client setup):- general: General API access- show.userinfo: Access to basic user information- users.read: Read user data- users.email.read: Read user email information- users.kyc.read: Information about whether a user has passed KYC verification- orders.read: Read trading orders- orders.create: Create trading orders- orders.delete: Delete trading orders- balances.read: Read account balances- markets.read: Read market information- deals.read: Read trading deals- orders_history.read: Read order history- users.transactions.read: Read user transactions- users.converts.read: Read currency conversion history- users.balances.read: Read user account balances- users.orders.read: Read user orders- users.deals.read: Read user deals- apikeys.create: Issue an OAuth-bound API key during the consent flow- apikeys.read: Read OAuth-issued API key state and retrieve its secret once- apikeys.delete: Delete an OAuth-issued API key linked to the partner

WhiteBIT Authentication API is one of 25 APIs that WhiteBIT publishes on the APIs.io network, described by a machine-readable OpenAPI specification.

This API exposes 20 JSON Schema definitions.

Tagged areas include Authentication. The published artifact set on APIs.io includes an OpenAPI specification, API documentation, and 20 JSON Schemas.

This API exposes 3 operations across 3 paths. It is described by OpenAPI 3.2.0, at version 1.0.0.

Requests are made against 2 base URLs: https://whitebit.com, https://whitebit.eu.

3 operations 3 paths 0 schemas 1 GET2 POST

Metadata

The identity and technical contract details declared by the specification.

Specification
OpenAPI 3.2.0
API Version
1.0.0
Servers
https://whitebit.com
https://whitebit.eu
Authentication
HTTP Bearer
Resource Areas
1

Authentication & Security 1

WhiteBIT Authentication API declares 1 security scheme for authenticating requests. It accepts HTTP bearer tokens (JWT) (BearerAuth).

  • BearerAuth — OAuth 2.0 Bearer Token authentication. Include the access token in the Authorization header. Example: Authorization: Bearer YOURACCESSTOKEN

Paths & Operations 3

Across 3 paths, the API surfaces 3 operations — 1 GET, 2 POST. Each is listed below with its method, path, parameters, and response codes.

Authentication 3

OAuth 2.0 authentication endpoints for obtaining and refreshing access tokens.

GET
/auth/login
OAuth 2.0 Authorization
getAuthLogin 2 params → 302
POST
/oauth2/token
Get Access Token
postOauth2Token body → 200401422
POST
/oauth2/refresh_token
Refresh Token
postOauth2RefreshToken body → 200400

Specification

The full machine-readable OpenAPI contract behind this narrative.

Source

whitebit-authentication-api-openapi.yml Raw ↑

Other APIs WhiteBIT publishes across the network.

WhiteBIT WebSocket API
WhiteBIT Account Endpoints API
WhiteBIT Address Checker API
WhiteBIT Codes API
WhiteBIT Collateral Trading API
WhiteBIT Convert API
WhiteBIT Credit Line API
WhiteBIT Crypto Lending - Fixed API
WhiteBIT Crypto Lending - Flex API
WhiteBIT Deposit API
WhiteBIT Fees API
WhiteBIT JWT API
Where this information came from

This is an independent, third-party profile of WhiteBIT Authentication API, published by API Evangelist. We do not operate, host, resell, or support these APIs, and we are not affiliated with or endorsed by the company unless stated above. Everything here is built from publicly available information — the company's own site, developer portal, documentation, public repositories, and the specifications it publishes for public use. Nothing is obtained by breaching a system, defeating an access control, or using credentials.

The Kin Score and Agent Readiness rating are independently calculated assessments of a company's public API artifacts, scored against a published rubric. They are not certifications, endorsements, security assessments, or audits.

Corrections, re-scores, and removal are free — no partnership or purchase required, and you do not need to justify the request. A removed company is recorded as unrated, never scored zero for having asked. Acknowledgement within one business day; removal within two.

info@apievangelist.com · Read the full data-sourcing policy →
On a security or compliance team? Put security in the subject line and you will get a person, not a form — we will tell you exactly which public URLs this profile was built from.