Financial Information eXchange, or FIX, is a standard protocol which can be used to enter orders, submit cancel requests, and receive fills. FIX API users typically have existing software that runs FIX for order management. The baseline specification for the Exchange FIX API:
FIX5 Resets Saturdays at 1PM ETFIX5 Order Entry and Market Data customers will be logged out every Saturday at 1PM ET (6PM UTC).
Changes are deployed every Monday and Thursday at or near 2PM EST (7PM UTC). At that time, a logout message is sent from the server to indicate the session is ending. We do not deploy on US federal holidays.

​
Supported Endpoints

Production
Order Entry (FIX5.0): tcp+ssl://fix-ord.exchange.coinbase.com:6121
Market Data Snapshot Enabled (FIX5.0): tcp+ssl://fix-md.exchange.coinbase.com:6121
Market Data Snapshot Disabled (FIX5.0): tcp+ssl://fix-md.exchange.coinbase.com:6122
Dedicated Drop Copy (FIX5.0): tcp+ssl://fix-dc.exchange.coinbase.com:6122
Sandbox
Order Entry (FIX5.0): tcp+ssl://fix-ord.sandbox.exchange.coinbase.com:6121
Market Data Snapshot Enabled (FIX5.0): tcp+ssl://fix-md.sandbox.exchange.coinbase.com:6121
Market Data Snapshot Disabled (FIX5.0): tcp+ssl://fix-md.sandbox.exchange.coinbase.com:6122
Dedicated Drop Copy (FIX5.0): tcp+ssl://fix-dc.sandbox.exchange.coinbase.com:6122
Resend RequestsResend requests are not supported. Every connection establishes a new session and a new set of session sequence numbers.

​
FIX Gateway

Before logging onto a FIX session, clients must establish a secure connection to the FIX gateway. See the available endpoints above. TCP SSL If your FIX implementation does not support establishing a native TCP SSL connection, you must setup a local proxy such as stunnel to establish a secure connection to the FIX gateway. Static IP Coinbase Exchange does not support static IP addresses. If your firewall rules require a static IP address, you must create a TCP proxy server with a static IP address which is capable of resolving an IP address using DNS. AWS IP If connecting from servers outside of AWS which require firewall rules, use the AWS provided resources to determine how best to whitelist AWS IP ranges.
Changes are deployed every Monday and Thursday at or near 2PM EST (7PM UTC). At that time, a logout message is sent from the server to indicate the session is ending. We do not deploy on US federal holidays.

​
Ciphers

Coinbase Exchange supports TLSv1.2 with the following server ciphers:
RecommendLengthCipher SuiteElliptic Curve
Preferred128 bitsECDHE-RSA-AES128-GCM-SHA256Curve P-256 DHE 256
Accepted128 bitsECDHE-RSA-AES128-SHA256Curve P-256 DHE 256
Accepted256 bitsECDHE-RSA-AES256-GCM-SHA384Curve P-256 DHE 256
Accepted256 bitsECDHE-RSA-AES256-SHA384Curve P-256 DHE 256

​
SSL Tunnels

Exchange FIX API endpoints only accept TCP connections secured by SSL. If your FIX client library cannot establish an SSL connection natively, you must run a local proxy that establishes a secure connection and allows unencrypted local connections.