asterdex/aster-api-auth-v3
skills/aster-api-auth-v3/SKILL.md
EIP-712 signed requests for Aster Futures API v3. Nonce, signature payload, request format. Use when calling TRADE, USER_DATA, USER_STREAM, or MARKET_DATA.
$ install --global
skillsauthnpx skillsauth add asterdex/aster-skills-hub aster-api-auth-v3Install this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Apr 3, 2026, 10:52 AM4.1s2 files scanned
SKILL.md
- name:
- aster-api-auth-v3
- description:
- EIP-712 signed requests for Aster Futures API v3. Nonce, signature payload, request format. Use when calling TRADE, USER_DATA, USER_STREAM, or MARKET_DATA.
Aster API Authentication
Base: https://fapi.asterdex.com. Signed: send timestamp (ms), signature; optional recvWindow (default 5000, ≤5000).
| Param | Description | |-------|--------------| | user | Main account wallet | | signer | API wallet | | nonce | Current time, microseconds | | signature | EIP-712 (hex) |
Nonce: Current system time in µs; invalid if ±~5s. Prefer monotonic (e.g. now_s×1e6 + sequence). Example: see reference.
Signing: (1) Param string: key=value, sort ASCII, all strings; include nonce, user, signer. (2) EIP-712: domain name "AsterSignTransaction", version "1", chainId 1666, verifyingContract "0x0000...0000"; type "Message", field "msg" = param string. (3) Encode typed data, sign with API wallet private key (ECDSA), hex. (4) Add signature to query or body; POST/DELETE: application/x-www-form-urlencoded. Security: Env vars for user, signer, key. GET /fapi/v3/time if clock skew.
Note on chainId 1666 (SEC-08): The chainId 1666 used in the EIP-712 signing domain is an off-chain signing identifier specific to AsterDex. It is NOT the Harmony ONE network chainId, even though Harmony uses the same number. This chainId is used exclusively for API request signing and has no relation to the on-chain deposit chainId (ETH=1, BSC=56, Arbitrum=42161). Do not confuse the two.
Payload shapes: reference.md.
Related Skills
asterdex/aster-deposit-fund
tools
VerifiedTrustedCommunity
Deposit funds to Aster from a wallet; private key from env. Use when the user wants to deposit to Aster or fund an Aster account.
62SKILL.mdUpdated Apr 3, 2026
asterdex/aster-api-websocket-v3
development
VerifiedTrustedCommunity
WebSocket market + user data streams for Aster Futures API v3. Subscription model, stream names, listenKey. Use when implementing real-time market or user events (orders, balance, positions). listenKey = signed; see aster-api-auth-v3.
62SKILL.mdUpdated Apr 3, 2026
asterdex/aster-api-websocket-v1
development
VerifiedTrustedCommunity
WebSocket market + user data streams for Aster Futures API v1. Subscription model, stream names, listenKey (/fapi/v1/listenKey). Use when implementing real-time market or user events (orders, balance, positions). listenKey = signed; see aster-api-auth-v1.
62SKILL.mdUpdated Apr 3, 2026
asterdex/aster-api-trading-v3
development
VerifiedTrustedCommunity
Place, cancel, batch, and query orders for Aster Futures API v3 (/fapi/v3/). Use when placing/canceling orders or querying open/historical. Signed; see aster-api-auth-v3.
62SKILL.mdUpdated Apr 3, 2026