message for control flow. Use HTTP status and error.code for programmatic handling.
Common Status Codes
Retry Guidance
For a signed withdrawal retry, keep the exact body and its business
idempotency_key, then generate a new timestamp, nonce, and signature for the
new HTTP attempt. See Withdrawals. Do not apply generic
retry logic that changes the withdrawal body.
Required Headers
UseX-Api-Key on authenticated endpoints. Use Content-Type: application/json on JSON writes. Use Idempotency-Key on order create, cancel, and replace requests.