Installations
npm install bybit-api
Developer Guide
Typescript
Yes
Module System
CommonJS
Node Version
20.11.0
NPM Version
10.2.4
Score
62
Supply Chain
74.3
Quality
87.9
Maintenance
100
Vulnerability
98.6
License
Releases
v3.0.1: Complete integration for all REST API & WebSocket Groups
Published on 19 Sept 2022
Spot clients for REST & Websockets
Published on 15 Aug 2021
Reduced webpack bundle & missing inverse APIs.
Published on 12 Jun 2021
Inverse Futures Support
Published on 06 Mar 2021
Fix custom base URL parameter
Published on 18 Feb 2021
Linear USDT Support
Published on 16 Feb 2021
Contributors
Languages
TypeScript (98.88%)
JavaScript (1.12%)
Developer
Download Statistics
Total Downloads
301,666
Last Day
373
Last Week
6,767
Last Month
42,881
Last Year
184,779
GitHub Statistics
264 Stars
968 Commits
84 Forks
9 Watching
2 Branches
24 Contributors
Sponsor this package
Package Meta Information
Latest Version
3.10.27
Package Id
bybit-api@3.10.27
Unpacked Size
650.50 kB
Size
121.70 kB
File Count
217
NPM Version
10.2.4
Node Version
20.11.0
Publised On
18 Nov 2024
Total Downloads
Cumulative downloads
Total Downloads
301,666
Last day
-87.5%
373
Compared to previous day
Last week
-40.9%
6,767
Compared to previous week
Last month
40.6%
42,881
Compared to previous month
Last year
119%
184,779
Compared to previous year
Daily Downloads
Weekly Downloads
Monthly Downloads
Yearly Downloads
Dependencies
3
Dev Dependencies
12
Optional Dependencies
5
Node.js & JavaScript SDK for Bybit REST API & WebSockets
Node.js & JavaScript SDK for the Bybit REST APIs and WebSockets:
- Complete integration with all Bybit REST APIs & WebSockets.
- Actively maintained with a modern, promise-driven interface.
- TypeScript support (with type declarations for most API requests & responses).
- Over 450 end-to-end tests making real API calls & WebSocket connections, validating any changes before they reach npm.
- Robust WebSocket integration with configurable connection heartbeats & automatic reconnect then resubscribe workflows.
- Event driven messaging.
- Smart websocket persistence
- Automatically handle silent websocket disconnections through timed heartbeats, including the scheduled 24hr disconnect.
- Automatically handle listenKey persistence and expiration/refresh.
- Emit
reconnected
event when dropped connection is restored.
- Proxy support via axios integration.
- Active community support & collaboration in telegram: Node.js Algo Traders.
Installation
npm install --save bybit-api
Issues & Discussion
- Issues? Check the issues tab.
- Discuss & collaborate with other node devs? Join our Node.js Algo Traders engineering community on telegram.
- Follow our announcement channel for real-time updates on X/Twitter
Related projects
Check out my related JavaScript/TypeScript/Node.js projects:
- Try my REST API & WebSocket SDKs:
- Try my misc utilities:
- Check out my examples:
Documentation
Most methods accept JS objects. These can be populated using parameters specified by Bybit's API documentation, or check the type definition in each class within the github repository (see table below for convenient links to each class).
- Bybit API Docs
- REST Endpoint Function List
- TSDoc Documentation (generated using typedoc via npm module)
Structure
This connector is fully compatible with both TypeScript and pure JavaScript projects, while the connector is written in TypeScript. A pure JavaScript version can be built using npm run build
, which is also the version published to npm.
The version on npm is the output from the build
command and can be used in projects without TypeScript (although TypeScript is definitely recommended).
- src - the whole connector written in TypeScript
- lib - the JavaScript version of the project (built from TypeScript). This should not be edited directly, as it will be overwritten with each release.
- examples - examples & demonstrations. Contributions are welcome!
REST API Clients
Bybit has several API groups (originally one per product). Each generation is labelled with the version number (e.g. v1/v2/v3/v5). New projects & developments should use the newest available API generation (e.g. use the V5 APIs instead of V3).
Refer to the V5 interface mapping page for more information on which V5 endpoints can be used instead of previous V3 endpoints.
Here are the available REST clients and the corresponding API groups described in the documentation:
Class | Description |
---|---|
[ V5 API ] | The new unified V5 APIs (successor to previously fragmented APIs for all API groups). To learn more about the V5 API, please read the V5 upgrade guideline. |
RestClientV5 | Unified V5 all-in-one REST client for all V5 REST APIs |
WebsocketClient | All WebSocket Events (Public & Private for all API categories) |
[ Derivatives v3 ] | The Derivatives v3 APIs (successor to the Futures V2 APIs) |
UnifiedMarginClient | Derivatives (v3) Unified Margin APIs |
ContractClient | Derivatives (v3) Contract APIs. |
[ Other ] | Other standalone API groups |
CopyTradingClient | Copy Trading APIs |
AccountAssetClientV3 | Account Asset V3 APIs |
Deprecated/Obsolete APIs
The following API clients are for previous generation REST APIs and will be removed in the next major release. Some have already stopped working (because bybit stopped supporting them). You should use the V5 APIs for all new development.
Click me to see the list of APIs
Class | Description |
---|---|
[ Futures v2 ] | The Futures v2 APIs |
Inverse Perpetual Futures (v2) APIs | |
USDT Perpetual Futures (v2) APIs | |
Inverse Futures (v2) APIs | |
[ Spot ] | The spot APIs |
SpotClientV3 | Spot Market (v3) APIs |
Spot Market (v1) APIs | |
[ USDC Contract ] | The USDC Contract APIs |
USDCPerpetualClient | USDC Perpetual APIs |
USDCOptionClient | USDC Option APIs |
Account Asset V1 APIs |
Examples for using each client can be found in:
- the examples folder.
- the awesome-crypto-examples repository.
If you're missing an example, you're welcome to request one. Priority will be given to github sponsors.
Usage
Create API credentials on Bybit's website:
All REST clients have can be used in a similar way. However, method names, parameters and responses may vary depending on the API category you're using!
Not sure which function to call or which parameters to use? Click the class name in the table above to look at all the function names (they are in the same order as the official API docs), and check the API docs for a list of endpoints/parameters/responses.
The following is a minimal example for using the REST clients included with this SDK. For more detailed examples, refer to the examples folder in the repository on GitHub:
1const { 2 InverseClient, 3 LinearClient, 4 InverseFuturesClient, 5 SpotClientV3, 6 UnifiedMarginClient, 7 USDCOptionClient, 8 USDCPerpetualClient, 9 AccountAssetClient, 10 CopyTradingClient, 11 RestClientV5, 12} = require('bybit-api'); 13 14const restClientOptions = { 15 /** Your API key. Optional, if you plan on making private api calls */ 16 key?: string; 17 18 /** Your API secret. Optional, if you plan on making private api calls */ 19 secret?: string; 20 21 /** Set to `true` to connect to testnet. Uses the live environment by default. */ 22 testnet?: boolean; 23 24 /** Override the max size of the request window (in ms) */ 25 recv_window?: number; 26 27 /** Default: false. If true, we'll throw errors if any params are undefined */ 28 strict_param_validation?: boolean; 29 30 /** 31 * Optionally override API protocol + domain 32 * e.g baseUrl: 'https://api.bytick.com' 33 **/ 34 baseUrl?: string; 35 36 /** Default: true. whether to try and post-process request exceptions. */ 37 parse_exceptions?: boolean; 38 39 /** Default: false. Enable to parse/include per-API/endpoint rate limits in responses. */ 40 parseAPIRateLimits?: boolean; 41 42 /** Default: false. Enable to throw error if rate limit parser fails */ 43 throwOnFailedRateLimitParse?: boolean; 44}; 45 46const API_KEY = 'xxx'; 47const API_SECRET = 'yyy'; 48const useTestnet = false; 49 50const client = new RestClientV5({ 51 key: API_KEY, 52 secret: API_SECRET, 53 testnet: useTestnet, 54 // Optional: enable to try parsing rate limit values from responses 55 // parseAPIRateLimits: true 56}, 57 // requestLibraryOptions 58); 59 60// For public-only API calls, simply don't provide a key & secret or set them to undefined 61// const client = new RestClientV5({}); 62 63client.getAccountInfo() 64 .then(result => { 65 console.log("getAccountInfo result: ", result); 66 }) 67 .catch(err => { 68 console.error("getAccountInfo error: ", err); 69 }); 70 71client.getOrderbook({ category: 'linear', symbol: 'BTCUSD' }) 72 .then(result => { 73 console.log("getOrderBook result: ", result); 74 }) 75 .catch(err => { 76 console.error("getOrderBook error: ", err); 77 });
WebSockets
All API groups can be used via a shared WebsocketClient
. However, to listen to multiple API groups at once, you will need to make one WebsocketClient instance per API group.
The WebsocketClient can be configured to a specific API group using the market parameter. These are the currently available API groups:
API Category | Market | Description |
---|---|---|
V5 Subscriptions | market: 'v5' | The v5 websocket topics for all categories under one market. Use the subscribeV5 method when subscribing to v5 topics. |
Older Websocket APIs
The following API groups are still available in the WebsocketClient but are deprecated and may no longer work. They will be removed in the next major release:
Click me to see the table
API Category | Market | Description |
---|---|---|
market: 'unifiedOption' | The derivatives v3 category for unified margin. Note: public topics only support options topics. If you need USDC/USDT perps, use unifiedPerp instead. | |
market: 'unifiedPerp' | The derivatives v3 category for unified margin. Note: public topics only support USDT/USDC perpetual topics - use unifiedOption if you need public options topics. | |
market: 'inverse' | The inverse v2 perps category. | |
market: 'linear' | The USDT/linear v2 perps category. | |
market: 'inverse' | The inverse futures v2 category uses the same market as inverse perps. | |
market: 'spotv3' | The spot v3 category. | |
market: 'spot' | The older spot v1 category. Use the spotv3 market if possible, as the v1 category does not have automatic re-subscribe if reconnected. | |
market: 'linear' | The copy trading category. Use the linear market to listen to all copy trading topics. | |
market: 'usdcPerp | The USDC perps category. | |
market: 'usdcOption' | The USDC options category. | |
market: 'contractUSDT' | The Contract V3 category (USDT perps) | |
market: 'contractInverse' | The Contract V3 category (inverse perps) |
WebSocket Examples
Here's a minimal example for using the websocket client. For more complete examples, look into the ws-* examples in the examples folder in the repo on GitHub.
1const { WebsocketClient } = require('bybit-api'); 2 3const API_KEY = 'xxx'; 4const PRIVATE_KEY = 'yyy'; 5 6const wsConfig = { 7 key: API_KEY, 8 secret: PRIVATE_KEY, 9 10 /* 11 The following parameters are optional: 12 */ 13 14 // Connects to livenet by default. Set testnet to true to use the testnet environment. 15 // testnet: true 16 17 // If you can, use the v5 market (the newest generation of Bybit's websockets) 18 market: 'v5', 19 20 // how long to wait (in ms) before deciding the connection should be terminated & reconnected 21 // pongTimeout: 1000, 22 23 // how often to check (in ms) that WS connection is still alive 24 // pingInterval: 10000, 25 26 // how long to wait before attempting to reconnect (in ms) after connection is closed 27 // reconnectTimeout: 500, 28 29 // recv window size for authenticated websocket requests (higher latency connections (VPN) can cause authentication to fail if the recv window is too small) 30 // recvWindow: 5000, 31 32 // config options sent to RestClient (used for time sync). See RestClient docs. 33 // restOptions: { }, 34 35 // config for axios used for HTTP requests. E.g for proxy support 36 // requestOptions: { } 37 38 // override which URL to use for websocket connections 39 // wsUrl: 'wss://stream.bytick.com/realtime' 40}; 41 42const ws = new WebsocketClient(wsConfig); 43 44// (before v5) subscribe to multiple topics at once 45ws.subscribe(['position', 'execution', 'trade']); 46 47// (before v5) and/or subscribe to individual topics on demand 48ws.subscribe('kline.BTCUSD.1m'); 49 50// (v5) subscribe to multiple topics at once 51ws.subscribeV5(['orderbook.50.BTCUSDT', 'orderbook.50.ETHUSDT'], 'linear'); 52 53// (v5) and/or subscribe to individual topics on demand 54ws.subscribeV5('position', 'linear'); 55ws.subscribeV5('publicTrade.BTC', 'option'); 56 57// Listen to events coming from websockets. This is the primary data source 58ws.on('update', (data) => { 59 console.log('update', data); 60}); 61 62// Optional: Listen to websocket connection open event (automatic after subscribing to one or more topics) 63ws.on('open', ({ wsKey, event }) => { 64 console.log('connection open for websocket with ID: ' + wsKey); 65}); 66 67// Optional: Listen to responses to websocket queries (e.g. the response after subscribing to a topic) 68ws.on('response', (response) => { 69 console.log('response', response); 70}); 71 72// Optional: Listen to connection close event. Unexpected connection closes are automatically reconnected. 73ws.on('close', () => { 74 console.log('connection closed'); 75}); 76 77// Optional: Listen to raw error events. Recommended. 78ws.on('error', (err) => { 79 console.error('error', err); 80});
See websocket-client.ts for further information.
Logging
Customise logging
Pass a custom logger (or mutate the imported DefaultLogger class) which supports the log methods silly
, debug
, notice
, info
, warning
and error
, or override methods from the default logger as desired, as in the example below:
1const { WebsocketClient, DefaultLogger } = require('bybit-api'); 2 3// Disable all logging on the silly level 4const customLogger = { 5 ...DefaultLogger, 6 silly: () => {}, 7}; 8 9const ws = new WebsocketClient({ key: 'xxx', secret: 'yyy' }, customLogger);
Debug HTTP requests
In rare situations, you may want to see the raw HTTP requets being built as well as the API response. These can be enabled by setting the BYBITTRACE
env var to true
.
Browser Usage
Import
This is the "modern" way, allowing the package to be directly imported into frontend projects with full typescript support.
- Install these dependencies
1npm install crypto-browserify stream-browserify
- Add this to your
tsconfig.json
1{ 2 "compilerOptions": { 3 "paths": { 4 "crypto": [ 5 "./node_modules/crypto-browserify" 6 ], 7 "stream": [ 8 "./node_modules/stream-browserify" 9 ] 10}
- Declare this in the global context of your application (ex: in polyfills for angular)
1(window as any).global = window;
Webpack
This is the "old" way of using this package on webpages. This will build a minified js bundle that can be pulled in using a script tag on a website.
Build a bundle using webpack:
npm install
npm build
npm pack
The bundle can be found in dist/
. Altough usage should be largely consistent, smaller differences will exist. Documentation is still TODO - contributions welcome.
Contributions & Thanks
Have my projects helped you? Share the love, there are many ways you can show your thanks:
- Star & share my projects.
- Are my projects useful? Sponsor me on Github and support my effort to maintain & improve them: https://github.com/sponsors/tiagosiebler
- Have an interesting project? Get in touch & invite me to it.
- Or buy me all the coffee:
- ETH(ERC20):
0xA3Bda8BecaB4DCdA539Dc16F9C54a592553Be06C
- ETH(ERC20):
pixtron
An early generation of this library was started by @pixtron. If this library helps you to trade better on bybit, feel free to donate a coffee to @pixtron:
- BTC
1Fh1158pXXudfM6ZrPJJMR7Y5SgZUz4EdF
- ETH
0x21aEdeC53ab7593b77C9558942f0c9E78131e8d7
- LTC
LNdHSVtG6UWsriMYLJR3qLdfVNKwJ6GSLF
Contributions & Pull Requests
Contributions are encouraged, I will review any incoming pull requests. See the issues tab for todo items.
Star History
No vulnerabilities found.
Reason
30 commit(s) and 11 issue activity found in the last 90 days -- score normalized to 10
Reason
no dangerous workflow patterns detected
Reason
no binaries found in the repo
Reason
license file detected
Details
- Info: project has a license file: LICENSE.md:0
- Info: FSF or OSI recognized license: MIT License: LICENSE.md:0
Reason
1 existing vulnerabilities detected
Details
- Warn: Project is vulnerable to: GHSA-3xgq-45jj-v275
Reason
Found 8/10 approved changesets -- score normalized to 8
Reason
dependency not pinned by hash detected -- score normalized to 6
Details
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/e2etest.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/tiagosiebler/bybit-api/e2etest.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/e2etest.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/tiagosiebler/bybit-api/e2etest.yml/master?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/npmpublish.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/tiagosiebler/bybit-api/npmpublish.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/npmpublish.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/tiagosiebler/bybit-api/npmpublish.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/npmpublish.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/tiagosiebler/bybit-api/npmpublish.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/templates-readme.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/tiagosiebler/bybit-api/templates-readme.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/templates-readme.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/tiagosiebler/bybit-api/templates-readme.yml/master?enable=pin
- Info: 0 out of 6 GitHub-owned GitHubAction dependencies pinned
- Info: 0 out of 1 third-party GitHubAction dependencies pinned
- Info: 3 out of 3 npmCommand dependencies pinned
Reason
detected GitHub workflow tokens with excessive permissions
Details
- Warn: no topLevel permission defined: .github/workflows/e2etest.yml:1
- Info: topLevel 'contents' permission set to 'read': .github/workflows/npmpublish.yml:13
- Warn: topLevel 'contents' permission set to 'write': .github/workflows/templates-readme.yml:7
- Info: no jobLevel write permissions found
Reason
no effort to earn an OpenSSF best practices badge detected
Reason
project is not fuzzed
Details
- Warn: no fuzzer integrations found
Reason
security policy file not detected
Details
- Warn: no security policy file detected
- Warn: no security file to analyze
- Warn: no security file to analyze
- Warn: no security file to analyze
Reason
SAST tool is not run on all commits -- score normalized to 0
Details
- Warn: 0 commits out of 30 are checked with a SAST tool
Score
6
/10
Last Scanned on 2024-12-16
The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.
Learn More