Changelog
SAPI version history, breaking changes, and API updates. Entries are tracked from the official SAPI v7.4 PDF and supplemented with production discoveries.
2026 — Percent-Encoding Required for HMAC Signatures
Binance now requires query string parameters to be percent-encoded before computing the HMAC-SHA256 signature. Previously, raw query strings were signed directly.
query = "asset=USDT&fiat=USD×tamp=1700000000000" sig = hmac_sha256(secret, query)
query = urllib.parse.urlencode(params) sig = hmac_sha256(secret, query) # urlencode handles percent-encoding
Impact: all HMAC-signed endpoints (auth: hmac, adaptive). Endpoints with headers-only or no auth are unaffected. AutoP2P uses urllib.parse.urlencode() which is compliant.
SAPI v7.4 Release
Official ReleaseVersion 7.4 of the Binance C2C SAPI PDF documentation. This is the most recent official release used as the primary reference for this documentation site.
Added — 6 new endpoints
POST /sapi/v1/c2c/chat/getRiskWarningTipsChat risk warning before order
POST /sapi/v1/c2c/chat/image/pre-signed-urlPre-signed S3 URL for image uploads
GET /sapi/v1/c2c/chat/retrieveChatCredentialWebSocket credential for real-time chat
GET /sapi/v1/c2c/chat/retrieveChatMessagesWithPaginationPaginated chat history
POST /sapi/v1/c2c/commission-rate/overviewCommission rate overview
POST /sapi/v1/c2c/commission-rate/takerTaker commission rate
Modified — 1 endpoint
POST /sapi/v1/c2c/ads/updatePrice-only update pattern documented: sending only advNo + price eliminates error 187049. Sending surplusAmount in the same request triggers volume-sync errors.
Removed — 7 endpoints
The following endpoints were deprecated and removed in v7.4. They may still respond on older Binance API versions but should not be used in new integrations.
Future Changes Tracking
The following are known areas where Binance may introduce breaking changes. Monitor these when upgrading:
Signature encoding
Percent-encoding enforcement is rolling out. See breaking change above.
EP-37 URL path
AutoP2P uses /user/getPayMethodByUserId (POST). PDF documents /paymentMethod/getPayMethodByUserId (GET). Monitor for deprecation of either path.
Adaptive auth endpoints
EP-13 and EP-24 use adaptive auth (tries HMAC, falls back to api-key, then headers). Binance may standardize auth requirements.
BAPI search endpoint (EP-0)
p2p.binance.com/bapi/c2c/v2 is an undocumented public endpoint. No SLA guarantee. May require stealth headers to avoid rate limiting.