Skip to main content
Errors use a JSON envelope with a stable upper-case code and human-readable message.
Do not parse message for control flow. Use HTTP status and error.code for programmatic handling.

Common Status Codes

Retry Guidance

For a signed withdrawal retry, keep the exact body and its business idempotency_key, then generate a new timestamp, nonce, and signature for the new HTTP attempt. See Withdrawals. Do not apply generic retry logic that changes the withdrawal body.

Required Headers

Use X-Api-Key on authenticated endpoints. Use Content-Type: application/json on JSON writes. Use Idempotency-Key on order create, cancel, and replace requests.