generated: '2026-07-20'
method: derived
source: openapi/matrixport-bitcom-openapi.yml
notes: >-
  Cross-cutting standards posture derived from the OpenAPI + SDK. No published compliance program
  (SOC 2 / ISO 27001 / PCI) was verified, so no Compliance pointer is asserted.
standards:
- id: oauth2
  conforms: false
  evidence: Auth is access-key + HMAC-SHA256 signing, not OAuth 2.0.
- id: oidc
  conforms: false
- id: rfc9457-problem-details
  conforms: false
  evidence: Errors use a code/message/data envelope, not application/problem+json.
- id: hmac-request-signing
  conforms: true
  evidence: HMAC-SHA256 signature over sorted params (authentication/matrixport-authentication.yml).
- id: websocket-streaming
  conforms: true
  evidence: Public/private WebSocket channels at wss://ws.bit.com (asyncapi/matrixport-websocket.yml).
- id: uri-path-versioning
  conforms: true
  evidence: All operations namespaced under /v1/.