Basic Information

This page collects the operational facts that apply to every Rocky Perpetual Contracts endpoint.

Base URLs

Environment	Base URL
Devnet	https://demo.rocky.exchange
Mainnet	https://api.rocky.exchange

Content type

• Request bodies: application/json
• Query strings: standard URL-encoded form
• Responses: application/json (except /healthz / /readyz which return text/plain)

Versioning

Path-versioned. Breaking changes ship under a new version (/v1 → /v2); old versions stay until the next major release.

Rate limits

Devnet does not currently enforce limits. Production will apply per-API-key limits similar to the standard X-MBX-USED-WEIGHT-1M. Recommended self-throttling:

• Public market data: ≤ 5 req/sec/IP
• Signed endpoints: ≤ 10 req/sec/key

Authentication

Surface	Scheme
/v1/*	Session / JWT (MVP: user_id query)
/fapi/v1/*, /fapi/v2/*	X-MBX-APIKEY header + HMAC-SHA256 signature

See the FAPI signing walkthrough for full details.

Time synchronization

• All timestamp parameters are Unix milliseconds.
• Signed requests must satisfy |now − timestamp| ≤ recvWindow; default recvWindow = 5000, max 60000.