Invalid API Key - but only for certain actions (I've read the FAQ)

Solaxun · February 27, 2021, 12:16am

Accessing market data, over REST or Websockets works as expected. Trying to do anything account oriented (view account, submit test orders, etc.) rejects the API Key. I’ve verified that I whitelisted the appropriate IP (the market endpoints wouldn’t anyhow if this was the cause), and that I’ve enabled spot trading.

Further, I ran the binance provided tests here:

github.com

binance-exchange/binance-signature-examples/blob/master/python/spot.py

import hmac
import time
import hashlib
import requests
from urllib.parse import urlencode

""" This is a very simple script working on Binance API

- work with USER_DATA endpoint with no third party dependency
- work with testnet

Provide the API key and secret, and it's ready to go

Because USER_DATA endpoints require signature:
- call `send_signed_request` for USER_DATA endpoints
- call `send_public_request` for public endpoints

```python

python spot.py

This file has been truncated. show original

and can confirm that while the first (klines) example works, the subsequent 4 requests reject the API key. This indicates to me that send_signed_request seems to be where the problem is as that’s where the secret is actually used. I thought maybe there was something wrong with my API secret despite the fact that I simply cut/paste it, so I just created a new one and the same problem persists.

Additionally I temporarily removed the IP restrictions just as a test, and it has no effect. Any idea what would cause this behavior?

Solaxun · February 27, 2021, 11:19pm

Hi Tomas - most of the libraries default to api.binance.com, and if you’re not using the U.S. website api.binance.us then that should be fine and your problem is likely either the API key, or you selected IP access restrictions but didn’t whitelist your IP.

If you are using the U.S. version of Binance (which I doubt since you’re in Argentina), you need to change the API URL. I’m not sure which python library you are using, but assuming it’s this one, you can call the Client constructor with tld='us' to modify the base API URL:

client = Client(api_key, api_secret,tld='us').

Tomas_Marmay · March 7, 2021, 6:59pm

Thanks !!!

MJW · February 27, 2021, 1:06am

Already answered you in client.get_account_status() error (python)

Solaxun · February 27, 2021, 1:21am

With all due respect, I don’t think you answered my question.

As mentioned above, I’m not using a 3rd party library, I’m using Binance’s own example from their repo: https://github.com/binance-exchange/binance-signature-examples/blob/master/python/spot.py

The call to /api/v3/account which uses send_signed_request results in a 2015 invalid API Key... regardless of the fact that I’ve tried it now with two separately generated key pairs.

MJW · February 27, 2021, 1:34am

Final solution - Install POSTMAN and import the collections from https://github.com/binance/binance-api-postman (there’re instructions)
Then try your api key/secret there. Good luck and come back with something new

Solaxun · February 27, 2021, 4:35am

OK - here is something new then:

As expected, it still does not work. Below is a snippet of an example request URI which get’s a 2015 response, using Postman and the assosciated environments/collections you linked to. I realize it’s difficult to diagnose without having the key pair yourself, but at this point I’ve verified the behavior on two 3rd-party API’s, Binance’s Python example, and Binance’s Postman examples. Furthermore, I’ve tried this on two separately created key/value pairs. I think the problem is not on my end.

{{url}}/api/v3/order/test?symbol=BTCUSDT&side=SELL&type=LIMIT&timeInForce=GTC&quantity=0.01&price=9000&newClientOrderId=my_order_id_1&timestamp={{timestamp}}&signature={{signature}}

Solaxun · February 27, 2021, 6:32am

I’m not sure if it’s relevant, but I did notice while researching potential sources of the problem that the only checkboxes related to trading I can enable for the API Key are:

Can Read
Enable Spot Trading
Enable Withdrawals

I assume that since Enable Spot Trading was on, and the calls I was making were through the Spot API, that this should be sufficient. I noticed that other people have a variety of other trading related checkboxes, for example:

Some others have a checkbox which doesn’t differentiate between spot/margin and simply says “Enable Trading”. I don’t know if these are from older versions of the API, and I doubt they are the source of my problem, but thought I’d mention it as I’m out of ideas at this point.

The only other idea I have is that since the error message indicates it could also be IP address related, how could I confirm if my specific IP is blocked? I don’t mean blocked by my settings, as I’ve turned on all IP’s for now, but blocked by binance perhaps?

Solaxun · February 27, 2021, 7:35pm

The problem was that all the examples and libraries use api.binance.com while my account and API key were for api.binance.us. I would have expected that to be pretty high up in the FAQ or perhaps throw an error that is more descriptive, but figured I’d post here in case others run into this.

Tomas_Marmay · February 27, 2021, 10:52pm

Mann I have the same problem and it make me crazy, can you explain me how you fixed it ? I m trying to make like a bot in python using the api. I m from Argentina if this means something important in this error