$npx -y skills add asterdex/aster-skills-hub --skill aster-api-spot-auth-v1HMAC SHA256 signed requests for Aster Spot API v1 (main). Base sapi.asterdex.com, /api/v1/. Use when calling TRADE, USER_DATA, or USER_STREAM. Signed; algorithm same as aster-api-auth-v1.
| 1 | # Aster Spot API Authentication (v1) |
| 2 | |
| 3 | **Base:** https://sapi.asterdex.com. Path prefix: `/api/v1/`. API key + secret **case sensitive**. Signed: send timestamp, signature; optional recvWindow (default 5000 ms, keep ≤ 5000). |
| 4 | |
| 5 | | Param | Description | |
| 6 | |-------|--------------| |
| 7 | | X-MBX-APIKEY | API key (header) | |
| 8 | | timestamp | Current time, ms | |
| 9 | | recvWindow | Request valid this long after timestamp | |
| 10 | | signature | HMAC SHA256(totalParams, secretKey), hex | |
| 11 | |
| 12 | **Signature:** Same as [aster-api-auth-v1](skills/aster-api-auth-v1/SKILL.md): totalParams = query + body; HMAC SHA256(secretKey, totalParams) → hex; add signature to query or body; header X-MBX-APIKEY. |
| 13 | |
| 14 | **Timing:** Server accepts if `timestamp < serverTime+1000` and `serverTime - timestamp <= recvWindow`. Use GET /api/v1/time if clock skew. |
| 15 | |
| 16 | Payload shapes: [reference.md](reference.md). |