Request Withdrawal

POST /api/v1/account/withdraw

Request Body

Field	Type	Need	Description	Example
`”account”`	string	required	User’s wallet address	`42trU9A5…`
`“signature”`	string	required	Cryptographic signature	`5j1Vy9Uq…`
`“timestamp”`	integer	required	Current timestamp in milliseconds	`1716200000000`
`”amount”`	string	required	Amount to withdraw in USDC	`100.50`
`”idempotency_key”`	string	optional	Full UUID string. Prevents duplicate withdrawals. Required when the account has two-factor authentication on	`550e8400-e29b-41d4-a716-446655440000`
`”agent_wallet”`	string	optional	Agent wallet address	`69trU9A5…`
`“expiry_window”`	integer	optional	Signature expiry in milliseconds	`30000`
`”two_factor”`	object	conditional	Two-factor proof. Required when the account has two-factor authentication on. Not part of the signed payload. See below

{
  "account": "42trU9A5...",
  "signature": "5j1Vy9Uq...",
  "timestamp": 1716200000000,
  "amount": "100.50",
  "agent_wallet": "69trU9A5...",
  "expiry_window": 30000
}

Two-factor authentication

If the account’s owner has turned on two-factor authentication, every withdrawal needs a proof, including withdrawals that an agent wallet signs. To turn it on or manage factors, see Two-factor authentication.

Send an idempotency_key. A retry with the same key and the same request returns the first result, so a retry does not need a new code.
Send the proof in two_factor, outside the signed data. For an authenticator app, use {"type": "totp", "code": "123456"}. Recovery keys do not authorize withdrawals.

Status	Meaning
`428`	Proof required: send `two_factor`
`401`	Proof is wrong, expired, or already used
`429`	Too many proof attempts. Each signer gets 5 attempts per 5 minutes
`400`	`idempotency_key` is missing
`409`	The `idempotency_key` was used for a different request
`422`	The proof can’t be used here, for example a recovery key
`503`	Two-factor checks are unavailable. Retry later

Response

Status 200: Success

{
  "success": true,
  "data": {
    "batch_nonce": 42,
    "requested_amount": "100.500000",
    "fee_amount": "1.000000"
  }
}

Field	Type	Description
`'batch_nonce'`	integer	Nonce of the withdrawal batch
`'requested_amount'`	decimal string	Amount requested for withdrawal
`'fee_amount'`	decimal string	Fee deducted from the withdrawal

Status 400: Invalid request parameters
Status 409: idempotency_key already used for a different request. A retry of the same request returns the first result
Status 500: Internal server error

Code Example (Python)

import requests

payload = {
    "account": "42trU9A5...",
    "signature": "5j1Vy9Uq...",
    "timestamp": 1716200000000,
    "amount": "100.50"
}

response = requests.post(
    "/api/v1/account/withdraw",
    json=payload,
    headers={"Content-Type": "application/json"}
)

data = response.json()

​Request Body

​Two-factor authentication

​Response

​Code Example (Python)

Request Body

Two-factor authentication

Response

Code Example (Python)