Chart Price Stream

Live chart price (candlestick/kline) data for every supported pair, streamed over socket.io. Use it to drive strategy decisions without polling. For depth, see the Order Book Stream — same connection model, different namespace and payload.

Connecting

Authentication

You authenticate once, at connection time, with the same credentials and HMAC scheme as the signed REST routes (see Authentication). Individual messages are not signed.

The signed message is fixed — method GET, path /bot/v1/market, empty body, no separators:

message = timestamp + "GET" + "/bot/v1/market"

The three values travel in the socket.io auth object:

import { io } from 'socket.io-client';
import { createHmac } from 'crypto';

const socket = io('wss://bot.mywellat.com/bot/v1/market', {
  transports: ['websocket'],
  auth: () => {
    // A FUNCTION, not an object — re-signs on every reconnect attempt.
    const timestamp = String(Date.now());
    const signature = createHmac('sha256', process.env.WELLAT_BOT_SECRET_KEY)
      .update(`${timestamp}GET/bot/v1/market`)
      .digest('hex');
    return { apiKey: process.env.WELLAT_BOT_API_KEY, timestamp, signature };
  },
  reconnection: true,
  reconnectionDelay: 1_000,
  reconnectionDelayMax: 30_000,
  randomizationFactor: 0.5,
});

import hashlib, hmac, os, time
import socketio

def fresh_auth():
    ts = str(int(time.time() * 1000))
    sig = hmac.new(
        os.environ["WELLAT_BOT_SECRET_KEY"].encode(),  # key = secret STRING
        f"{ts}GET/bot/v1/market".encode(),
        hashlib.sha256,
    ).hexdigest()
    return {"apiKey": os.environ["WELLAT_BOT_API_KEY"], "timestamp": ts, "signature": sig}

sio = socketio.Client()
# python-socketio has no auth callback — call fresh_auth() again before
# every reconnect attempt in your own retry loop.
sio.connect(
    "wss://bot.mywellat.com",
    namespaces=["/bot/v1/market"],
    transports=["websocket"],
    auth=fresh_auth(),
)

Tools that can set handshake headers but not the auth object (Postman, plain WS clients) may instead send the same three values as x-bot-api-key, x-bot-timestamp, x-bot-signature headers.

Subscribing

Send a subscribe event (no ack — the confirmation is the subscribed event):

{ "pair": "BTCUSDT", "timeframe": "1m" }

pair is case-insensitive and must be in the supported list; timeframe must be one of the values GET /bot/v1/spot/pairs returns in data.timeframes (see Trading Pairs). Send unsubscribe with the same payload to stop.

Events

The marketData payload

{
  "event": "kline",
  "pair": "BTCUSDT",
  "timeframe": "1m",
  "candle": {
    "open": "64210.15000000",
    "high": "64288.00000000",
    "low": "64199.42000000",
    "close": "64270.31000000",
    "startTime": 1783402560000,
    "closeTime": 1783402619999,
    "volume": "12.48310000",
    "isFinal": false
  }
}

• OHLCV values are strings preserving exact decimal precision — parse with a decimal library, not Number, wherever the value feeds an order.
• startTime / closeTime are Unix milliseconds.

Limits

Subscribe only to what your strategy reads, and prefer one connection with many subscriptions over many connections with one each.

Errors

Branch on code, never on message:

Reliability checklist

• auth passed as a function so reconnects re-sign
• Re-subscribe to everything on every connect, then backfill from REST
• Candles upserted by startTime, never appended
• Signals fire on isFinal: true only
• Staleness watchdog running — a quiet market and a dead stream look identical from outside
• UPSTREAM_UNAVAILABLE degrades to REST polling, with an alert
• Last-acted startTime tracked, so replayed candles never double-fire an entry

Next: Order Book Stream — live depth on a second namespace.