Welcome to Wellat Trading Bot Integration

Wellat lets traders run bot-managed spot strategies: your bot software, hosted anywhere, sends trade signals to Wellat. Each signal is executed against the strategy's simulated track record (virtual balance, live market prices) and simultaneously mirrored as real orders for every copier of the strategy.

The Bot Gateway

Your bot talks to one host:

https://bot.mywellat.com

All bot endpoints live under /bot/v1/spot. The gateway authenticates your signature, durably records your signal, hands it to the trading engine, and streams the execution result back in the same HTTP response. Requests and responses are JSON.

Key properties of the API

HMAC-signed requests — your secret never travels over the wire. See Authentication.
Idempotent by design — every order carries a client-generated idempotency-key; retrying a request can never double-execute a trade. See Signal Lifecycle & Recovery.
Spot only (v1) — market, limit, stop-market and stop-limit orders.
Sizing by risk, not quantity — every signal commits a percentage of the strategy's free balance. See Trading.

Integration flow

Step	Where	What
1	Wellat dashboard	Enable 2FA (Profile → Security)
2	Wellat dashboard / platform API	Create an API key pair (secret shown once)
3	Your bot server	Implement request signing
4	Your bot server	Verify against `POST /bot/v1/spot/test`
5	Wellat app	Create a bot-managed strategy bound to your API key
6	Your bot server	Send order signals — the key identifies the strategy

📘
Two kinds of authentication
Step 2 is a platform call made with your normal dashboard session (Authorization: Bearer <token>), and step 5 happens in the Wellat app — you, the trader, perform them once. Steps 3–6 are bot-signed requests your bot makes continuously with its HMAC credentials. Your bot never uses a session token, and your dashboard never uses the bot secret.

Continue to Account Setup.