360X
API ReferenceRESTWebsocketsFIX
SupportStatusWebsite
API ReferenceRESTWebsocketsFIX
SupportStatusWebsite
  1. FIX
  • Introduction
  • Getting Started
  • Connectivity Setup
  • Authentication
  • Session Management
  • Instrument Discovery
  • Market Data
  • Order Management
  • Request for Quote (RFQ)
  • Message Reference
  • Error Handling
  • Code Examples
  • Troubleshooting
  • Support & Ressources
  • Appendix
  • Exchange FIX Dictionary Downloads
  1. FIX

Authentication

OAuth 2.0 Authentication#

360X FIX API uses OAuth 2.0 client credentials for authentication. Authentication occurs during the initial Logon (MsgType=A) message.

Authentication Flow#

Logon Message (35=A)#

Purpose:
The Logon message initiates a FIX session and authenticates the client using OAuth 2.0 credentials. It must be the first message sent after establishing a TCP connection.
When to Use:
Immediately after TCP connection is established
After any disconnection to re-establish the session
At the start of each trading day (if configured for daily sessions)
Business Context:
Authentication is the gateway to all trading operations. The Logon message includes OAuth credentials (client_id and client_secret) which are validated against the 360X authentication service. Upon successful authentication, the session becomes active and ready for business messages.

Logon Tags#

TagNameRequiredDescriptionExample
98EncryptMethodY0 = None0
108HeartBtIntYHeartbeat interval (seconds)30
553UsernameYOAuth client_idmy_client_id
554PasswordYOAuth client_secretmy_secret_key

Example Logon Message#

8=FIXT.1.1|9=XXX|35=A|49=CLIENT01|56=360X|34=1|52=20260309-14:30:00|
553=your_client_id|554=your_client_secret|
98=0|108=30|
10=XXX|

Logon Response#

Success: Server responds with Logon Accept (35=A)
8=FIXT.1.1|9=XXX|35=A|49=360X|56=CLIENT01|34=1|52=20260309-14:30:01|
98=0|108=30|
10=XXX|
Failure: Server responds with Logout (35=5) and terminates connection
8=FIXT.1.1|9=XXX|35=5|49=360X|56=CLIENT01|34=1|52=20260309-14:30:01|
58=client_id and/or client_secret is wrong or missing|
10=XXX|

Authentication Errors#

Error TypeText (Tag 58)Cause
Invalid Credentialsclient_id and/or client_secret is wrong or missingIncorrect OAuth credentials
System ErrorSomething went wrong. Try again laterBackend authentication service unavailable

Obtaining Credentials#

OAuth credentials (client_id and client_secret) are provided by 360X upon account setup. Contact your 360X account representative to request credentials.
Modified at 2026-03-09 15:06:12
Previous
Connectivity Setup
Next
Session Management