OKX API 域名、IP 绑定、Key 过期与时间戳控制清单
本文正文暫以英文原文展示，翻譯版本需完成來源複核後再發布。
已验证事实边界
1. OKX publishes an API guide covering REST and WebSocket APIs. 2. OKX documentation describes regional API domain requirements for some registered user groups. 3. OKX documentation describes API key permissions including read, trade and withdraw. 4. OKX documentation recommends binding API keys to IP addresses and describes inactivity expiry for some unbound trade or withdraw keys. 5. OKX publishes a status page for maintenance and system information. 6. An OKX private integration must resolve region, permission, IP binding, timestamp and rate-limit controls before private API use.
收起完整分析
决策矩阵
文章表格：可橫向滑動，或聚焦表格區域後使用方向鍵。
| Check | What it means | Practical action | Unknown to keep explicit |
|---|---|---|---|
| Registered region | the usable API domain can depend on the user's registration route | record the correct domain before endpoint tests | future regional migration |
| Permission scope | read, trade and withdraw permissions have different blast radius | grant only the permission needed for the workflow | sub-account inherited policy |
| IP binding | IP binding can reduce key misuse but can also break failover | document public egress IPs and emergency rotation steps | NAT or proxy changes |
| Expiry | some unbound trade or withdraw keys can expire after inactivity | monitor last authenticated use and renewal owner | future policy changes |
| Timestamp | private REST signing depends on acceptable timestamp freshness | sync clocks and log skew without secrets | cross-host drift during failover |
| Rate limit | rate-limit behavior can differ by endpoint and account dimension | back off on limit errors and avoid retry storms | private bucket state |
| Stop rule | stop when domain, key, IP, timestamp or status evidence is unresolved | freeze private calls until controls are rechecked | support-only incident detail |
来源地图
- OKX Technical Support：OKX API Guide（okx-api-guide）
- OKX：OKX Status（okx-status）
- OKX：Third Party App IP Whitelist Launch（okx-ip-whitelist）
控制说明
1. Registered region
这一项要求读者先把公开来源翻译成操作规则。这里的含义是：the usable API domain can depend on the user's registration route。可执行动作是：record the correct domain before endpoint tests。仍然未知的是：future regional migration。因此本文不会把未知部分包装成安全承诺、收益承诺、官方背书、审批保证、恢复保证、可用性保证或注册诱导。
2. Permission scope
这里的含义是：read, trade and withdraw permissions have different blast radius。可执行动作是：grant only the permission needed for the workflow。仍然未知的是：sub-account inherited policy。
3. IP binding
这里的含义是：IP binding can reduce key misuse but can also break failover。可执行动作是：document public egress IPs and emergency rotation steps。仍然未知的是：NAT or proxy changes。
4. Expiry
这里的含义是：some unbound trade or withdraw keys can expire after inactivity。可执行动作是：monitor last authenticated use and renewal owner。仍然未知的是：future policy changes。
5. Timestamp
这里的含义是：private REST signing depends on acceptable timestamp freshness。可执行动作是：sync clocks and log skew without secrets。仍然未知的是：cross-host drift during failover。
6. Rate limit
这里的含义是：rate-limit behavior can differ by endpoint and account dimension。可执行动作是：back off on limit errors and avoid retry storms。仍然未知的是：private bucket state。
7. Stop rule
这里的含义是：stop when domain, key, IP, timestamp or status evidence is unresolved。可执行动作是：freeze private calls until controls are rechecked。仍然未知的是：support-only incident detail。
仍需明确的未知项
- future regional migration
- sub-account inherited policy
- NAT or proxy changes
- future policy changes
- cross-host drift during failover
- private bucket state
- support-only incident detail
实用结论
本文最有价值的地方是克制。OKX API 集成应先做域名与 key 控制映射，而不是直接写下单代码。当前 OKX 文档说明 regional API domain requirements、API key creation、permission types、IP binding recommendations、未绑定 IP 的 trade/withdraw key inactivity expiry、REST authentication headers、timestamp rejection risk 和 rate-limit behavior。实用结论是：调用任何私有接口前，应记录注册地区、API base domain、key permissions、IP bindings、passphrase custody、clock synchronization、request signing 和 rate-limit backoff。 用户应获得一个更清楚的核验路径，而不是一个看似肯定、实则无法由公开证据承担的承诺。
相關專題與工具:交易所 API 與行情資料核查
來源與證據
03- OKX API Guide · okx.com
- OKX Status · okx.com
- Third Party App IP Whitelist Launch · okx.com