> ## Documentation Index > Fetch the complete documentation index at: https://docs.totalis.trade/llms.txt > Use this file to discover all available pages before exploring further. # List operations > List your account's on-chain operations. Requires one of: - a key for your account with `account:read` - a key for a maker with `vault:read` A wallet session for the account also works, with no scope limit, sent from its `Origin`. ## OpenAPI ````yaml /hyperliquid/openapi.json get /v1/me/operations openapi: 3.1.1 info: title: Totalis Hyperliquid API description: >- REST API for Totalis singles and parlays on Hyperliquid HIP-4 outcome markets, for client integrations and external market makers. There are three ways in, each sent as `Authorization: Bearer `: - **Scoped API key** (`ttk_`), for servers, bots and market makers. The account owner creates it in the Totalis app, or a wallet-session user creates one with `POST /v1/me/api-keys` and a fresh wallet signature (see API keys). It acts for one account, yours or a maker's, with only the scopes it holds, and needs no `Origin`. - **Wallet session**, for users who bring their own wallet to a partner's web page. The page signs the wallet in with `POST /v1/auth/wallet-challenges` and `POST /v1/auth/wallet-sessions`; the session is bound to the page's registered `Origin` and must be sent from it. Pages may also label their traffic with their publishable browser key in `X-Totalis-Partner: tpb_...`. - **Partner server key** (`tpk_`), only for `POST /v1/partner/wallet-admissions`, which lets a new wallet open its account during the invite-only launch. Server to server, never in a browser, and never with an `Origin`. Public market reads need no credential. A credential only authenticates: every bet, cash-out and withdrawal also carries the wallet or maker signature the HyperEVM contract verifies. An external wallet sends `POST /v1/core-exits` to move its vault cash to HyperCore before a HyperCore order. For access, partner credentials (origins, browser and server keys), builder codes or staging, email [founders@totalis.trade](mailto:founders@totalis.trade). Amounts are base-10 strings in native USDC atomic units, large identifiers are decimal strings, and every command `POST` requires an `Idempotency-Key` header. Every error is `{error: {code, message, retry, request_id, field_violations}}`. `code` is stable; each operation lists the codes it returns per status. `retry` is `NEVER` (stop), `BACKOFF` (resend the same request with the same `Idempotency-Key` after `Retry-After` seconds) or `REFRESH` (re-read state, then send a new request with a new key). `field_violations` names invalid inputs by JSON pointer, such as `/legs/0/side`. version: 162.0.0-accept-before servers: - url: https://hip4-api.totalis.trade description: Production public edge - url: https://hip4-api-staging.totalis.trade description: Staging and chain-998 public edge security: [] tags: - name: Markets description: >- HIP-4 questions and markets, their sides and price history. No API key needed. - name: RFQs & Quotes description: >- RFQs and the quotes that answer them: what a taker calls, then what a maker calls. - name: Positions description: Positions the account holds, or its maker backs. - name: Account description: >- The account a key acts for: identity, balances, activity, operations, withdrawals, deposits and HyperCore exits. - name: Makers description: >- The rest of a maker's setup after Making: admission, quote history, capital and collateral. - name: Partners & wallet sign-in description: >- A partner admits its users' own wallets, which sign in from the partner's pages. - name: API keys description: >- Issue, rotate and revoke scoped keys from a wallet session. An API key cannot manage keys. - name: Deployment description: The contract deployment every signature is made against. - name: WebSocket description: The authenticated WebSocket for account and maker updates. paths: /v1/me/operations: get: tags: - Account summary: List operations description: >- List your account's on-chain operations. Requires one of: - a key for your account with `account:read` - a key for a maker with `vault:read` A wallet session for the account also works, with no scope limit, sent from its `Origin`. operationId: listOperations parameters: - $ref: '#/components/parameters/Cursor' - $ref: '#/components/parameters/Limit' responses: '200': description: >- One page of operations. An operation is one on-chain action Totalis relays for you, such as a trade or a withdrawal payout. A key reads its own account's: yours, or its maker's. The stream pushes each change as `OPERATION_UPDATED`; page this when a snapshot truncated them. content: application/json: schema: $ref: '#/components/schemas/OperationList' example: operations: - operation_id: >- 0x2d9e4a7b1c6f3e8d5a2b9c4f7e1d6a3b8c5f2e9d4a7b1c6e3f8d5a2b9c4e7f10 kind: CLAIM amount: null status: IN_FLIGHT transaction_hash: null created_at: '2026-09-26T14:12:05.418Z' updated_at: '2026-09-26T14:12:06.902Z' - operation_id: >- 0x5b1f8e2a9c4d7036e1b5a8f2c9d4e7031b6a5f8e2c9d4a7b3e6f1c8d5a2b9e40 kind: ACCEPT amount: '20000000' status: COMMITTED transaction_hash: >- 0x4f7a1c8e5b2d9f6a3c1e8b5d2f9a6c3e1b8d5f2a9c6e3b1d8f5a2c9e6b3d1f8a created_at: '2026-09-25T18:41:33.127Z' updated_at: '2026-09-25T18:41:37.560Z' - operation_id: >- 0x7e3c9a41d2b85f06e1a7c4d93b28f5e60a1c7d4b92e3f8a05c6d1b7e42a9f3c0 kind: DEPOSIT_USER_AUTHORIZED amount: '25000000' status: COMMITTED transaction_hash: >- 0x9a4c2e7f1b8d5a3c6e9f2b4d7a1c8e5f3b6d9a2c4e7f1b8d5a3c6e9f2b4d7a1c created_at: '2026-09-25T18:39:02.315Z' updated_at: '2026-09-25T18:39:06.844Z' next_cursor: MjAyNi0wOS0yNVQxODozOTowMi4zMTVafDB4N2UzYzlhNDFkMmI4NWYwNmUx has_more: true checkpoint: block_number: '31552210' projection_state: CURRENT '400': description: >- - `INVALID_QUERY` (retry `NEVER`): A query parameter is malformed, out of range or not accepted by this operation. `field_violations` names it. - `INVALID_CURSOR` (retry `NEVER`): The cursor is malformed or was issued for a different query. content: application/json: schema: allOf: - $ref: '#/components/schemas/Error' - properties: error: description: The error this operation returns with this status. properties: code: description: >- One of the registered codes listed in this response's description. enum: - INVALID_QUERY - INVALID_CURSOR retry: description: >- The retry rule the registry fixes for the returned code. enum: - NEVER '401': description: >- - `UNAUTHENTICATED` (retry `NEVER`): The credential is missing, invalid, expired or revoked. content: application/json: schema: allOf: - $ref: '#/components/schemas/Error' - properties: error: description: The error this operation returns with this status. properties: code: description: >- One of the registered codes listed in this response's description. enum: - UNAUTHENTICATED retry: description: >- The retry rule the registry fixes for the returned code. enum: - NEVER '403': description: >- - `FORBIDDEN` (retry `NEVER`): The credential is valid but lacks the scope, permission or role this operation needs. content: application/json: schema: allOf: - $ref: '#/components/schemas/Error' - properties: error: description: The error this operation returns with this status. properties: code: description: >- One of the registered codes listed in this response's description. enum: - FORBIDDEN retry: description: >- The retry rule the registry fixes for the returned code. enum: - NEVER '429': description: >- - `RATE_LIMITED` (retry `BACKOFF`): The request quota for this credential or route is exhausted. headers: Retry-After: $ref: '#/components/headers/RetryAfter' content: application/json: schema: allOf: - $ref: '#/components/schemas/Error' - properties: error: description: The error this operation returns with this status. properties: code: description: >- One of the registered codes listed in this response's description. enum: - RATE_LIMITED retry: description: >- The retry rule the registry fixes for the returned code. enum: - BACKOFF '503': description: >- - `AUTHORIZATION_UNAVAILABLE` (retry `BACKOFF`): Identity or credential authority storage is unavailable. - `DEPENDENCY_STALE` (retry `BACKOFF`): A projection or upstream the request depends on (chain projection, HyperCore state, database) is behind its freshness bound or unavailable. headers: Retry-After: $ref: '#/components/headers/RetryAfter' content: application/json: schema: allOf: - $ref: '#/components/schemas/Error' - properties: error: description: The error this operation returns with this status. properties: code: description: >- One of the registered codes listed in this response's description. enum: - AUTHORIZATION_UNAVAILABLE - DEPENDENCY_STALE retry: description: >- The retry rule the registry fixes for the returned code. enum: - BACKOFF security: - apiKey: - account:read - apiKey: - vault:read - walletSession: [] components: parameters: Cursor: name: cursor in: query description: >- Omit for the first page; then send the previous response's next_cursor unchanged. schema: $ref: '#/components/schemas/PageCursor' example: eyJ2IjoxLCJzIjoiMTIzNDUifQ Limit: name: limit in: query schema: $ref: '#/components/schemas/PageLimit' description: >- Maximum items per page, 1 to 200, default 50. A page may hold fewer, even none, while has_more is true. example: 50 schemas: OperationList: type: object required: - operations - next_cursor - has_more - checkpoint properties: operations: description: Operations newest first by creation time. type: array maxItems: 200 items: $ref: '#/components/schemas/Operation' next_cursor: $ref: '#/components/schemas/NextCursor' description: Send as cursor to fetch the next page; null when has_more is false. has_more: description: True when older operations follow; fetch them with next_cursor. type: boolean checkpoint: $ref: '#/components/schemas/Checkpoint' description: Chain projection the listed states reflect. Error: properties: error: $ref: '#/components/schemas/ErrorDetail' description: The one error this request failed with. required: - error type: object PageCursor: type: string minLength: 1 maxLength: 2048 description: >- Opaque list cursor. Send a previous response's next_cursor back unchanged; never build or parse one. PageLimit: type: integer minimum: 1 maximum: 200 default: 50 description: >- Maximum items in one page. A page may hold fewer, even none, while has_more is true. Operation: type: object required: - operation_id - kind - amount - status - transaction_hash - created_at - updated_at properties: operation_id: $ref: '#/components/schemas/Bytes32' description: Deterministic 32-byte ID of the operation. kind: description: >- Operation type, named after the contract call: DEPOSIT_USER_AUTHORIZED, WITHDRAW_USER, ACCEPT, SETTLE, CLAIM, SELL_BACK, POSITION_TRANSFER, CASHOUT_TRANSFER, TOTALIS_PAYOUT, CORE_EXIT or ATTEST. Treat unlisted values as opaque. type: string amount: description: >- Atomic USDC (6 decimals): the gross stake for ACCEPT, the moved amount for deposits, withdrawals and Core exits; null for kinds without a known amount. oneOf: - $ref: '#/components/schemas/CommonAmount' - type: 'null' status: $ref: '#/components/schemas/OperationState' description: >- Execution status. QUEUED, IN_FLIGHT, RETRYABLE and UNKNOWN are nonterminal; COMMITTED (on chain), REVERTED and EXPIRED_UNEXECUTED are terminal. transaction_hash: description: >- HyperEVM hash of the transaction carrying the operation; null before it is broadcast. oneOf: - $ref: '#/components/schemas/Bytes32' - type: 'null' created_at: $ref: '#/components/schemas/CommonTimestamp' description: RFC 3339 UTC time the operation was admitted. updated_at: $ref: '#/components/schemas/CommonTimestamp' description: RFC 3339 UTC time the operation last changed. NextCursor: type: - string - 'null' minLength: 1 maxLength: 2048 description: Opaque cursor for the next page, or null when has_more is false. Checkpoint: type: object required: - block_number - projection_state properties: block_number: $ref: '#/components/schemas/UInt64String' description: >- Last HyperEVM block the vault projection has indexed; the read reflects chain state up to and including this block. projection_state: description: >- CURRENT when the projection is within 32 blocks of a chain head observed in the last two minutes; STALE when it lags, so figures may be behind. enum: - CURRENT - STALE ErrorDetail: properties: code: $ref: '#/components/schemas/ErrorCode' description: Stable registered code; branch on this, not on message or status. field_violations: description: >- Each invalid input by JSON pointer; empty when the error is not about a specific input. items: $ref: '#/components/schemas/FieldViolation' type: array message: description: Human-readable; may change without notice. minLength: 1 type: string request_id: description: >- UUIDv7 of this request, also returned in the X-Request-ID header. Quote it when reporting a problem. format: uuid pattern: >- ^[0-9a-f]{8}-[0-9a-f]{4}-7[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$ type: string retry: $ref: '#/components/schemas/Retry' description: What the caller should do next; fixed by the registry for each code. required: - code - message - retry - request_id - field_violations type: object Bytes32: type: string pattern: ^0x[0-9a-f]{64}$ CommonAmount: type: string pattern: ^(0|[1-9][0-9]*)$ maxLength: 39 format: uint128-decimal OperationState: enum: - QUEUED - IN_FLIGHT - RETRYABLE - UNKNOWN - COMMITTED - REVERTED - EXPIRED_UNEXECUTED CommonTimestamp: type: string format: date-time pattern: ^[0-9]{4}-[0-9]{2}-[0-9]{2}T[0-9]{2}:[0-9]{2}:[0-9]{2}([.][0-9]{1,9})?Z$ maxLength: 30 UInt64String: type: string pattern: >- ^(0|[1-9][0-9]{0,18}|1[0-7][0-9]{18}|18[0-3][0-9]{17}|184[0-3][0-9]{16}|1844[0-5][0-9]{15}|18446[0-6][0-9]{14}|184467[0-3][0-9]{13}|1844674[0-3][0-9]{12}|184467440[0-6][0-9]{10}|1844674407[0-2][0-9]{9}|18446744073[0-6][0-9]{8}|1844674407370[0-8][0-9]{6}|18446744073709[0-4][0-9]{5}|184467440737095[0-4][0-9]{4}|18446744073709550[0-9]{3}|18446744073709551[0-5][0-9]{2}|1844674407370955160[0-9]|1844674407370955161[0-5])$ maxLength: 20 format: uint64-decimal ErrorCode: description: >- Stable HTTP error code. Each code has one HTTP status and one retry value. enum: - INVALID_REQUEST - INVALID_QUERY - INVALID_CURSOR - INVALID_IDEMPOTENCY_KEY - ORIGIN_REQUIRED - SUBPROTOCOL_REQUIRED - UNSUPPORTED_BROWSE_CONTRACT - UNAUTHENTICATED - FORBIDDEN - ORIGIN_NOT_ALLOWED - ACCESS_REQUIRED - NOT_FOUND - IDENTITY_NOT_FOUND - QUOTE_NOT_FOUND - INVITE_CODE_NOT_FOUND - IDEMPOTENCY_KEY_REUSED - STATE_CONFLICT - INVITE_CODE_EXHAUSTED - STALE_CURSOR - CURSOR_EXPIRED - CURSOR_RESET - RECURRING_DEFINITION_CONFLICT - EMBEDDED_WALLET_CONFLICT - SECRET_UNAVAILABLE - ROTATION_IN_PROGRESS - TELEMETRY_CONFLICT - RFQ_NOT_CANCELLABLE - RFQ_NOT_OPEN - RFQ_GENERATION_STALE - RFQ_GENERATION_IN_FLIGHT - QUOTE_EXPIRED - QUOTE_CANCELLED - QUOTE_REPLACED - QUOTE_SIGNER_CHANGED - QUOTE_CAPACITY_EXCEEDED - CORE_ACCOUNT_NOT_READY - CORE_ACCOUNT_ACTIVATION_REQUIRED - CORE_EXIT_ABANDONED - CORE_MOVE_IN_FLIGHT - USERNAME_TAKEN - USERNAME_ALREADY_SET - INVALID_SIGNATURE - WALLET_CONTRACT_UNSUPPORTED - WRONG_AUTHORITY - KEY_LIMIT_REACHED - USERNAME_NOT_ALLOWED - RATE_LIMITED - CONNECTION_LIMIT - RFQ_INTENT_LIMIT - QUOTE_EXPOSURE_LIMIT - DEPENDENCY_STALE - AUTHORIZATION_UNAVAILABLE - SOURCE_UNAVAILABLE - CONTRACT_UNAVAILABLE - MARKET_DATA_UNAVAILABLE - BROWSE_UNAVAILABLE - FINANCIAL_ACTIONS_DISABLED - CORE_EXIT_UNAVAILABLE - COLLATERAL_REDUCTION_UNAVAILABLE - SPONSORSHIP_UNAVAILABLE - CONTRACT_SIGNATURE_OVERLOADED - QUOTE_EXPOSURE_STALE - COMBO_AUTOMATIC_DISABLED - EMBEDDED_WALLET_UNAVAILABLE - CONNECTION_DRAIN type: string FieldViolation: properties: code: description: >- REQUIRED: the input is missing. INVALID: it is present but malformed or out of range. UNEXPECTED: the input is not accepted here. enum: - REQUIRED - INVALID - UNEXPECTED type: string field: description: >- JSON pointer into the body, or into the query parameters as one flat object for requests without a body, for example /legs/0/stake or /limit. pattern: ^(/([^~/]|~[01])*)+$ type: string required: - field - code type: object Retry: description: >- NEVER: stop. BACKOFF: resend the same request with the same Idempotency-Key after Retry-After. REFRESH: re-read state, then send a new request with a new Idempotency-Key. enum: - NEVER - BACKOFF - REFRESH type: string headers: RetryAfter: description: Seconds to wait before resending the same request schema: type: integer minimum: 1 securitySchemes: apiKey: type: http scheme: bearer bearerFormat: ttk_ description: >- Scoped API key (`ttk_...`), created in the Totalis app or by a wallet-session user through the API keys routes with a fresh wallet signature; those routes never accept a key. Each key acts for one account, yours or a maker's, and holds only scopes that account can use. Each operation lists the scopes it requires. Send no `Origin`. walletSession: type: http scheme: bearer description: >- Wallet session: the `access_token` from `POST /v1/auth/wallet-sessions`, for a user who brings their own wallet to a partner's web page. It acts for that wallet's account with no scope limit, and is bound to the `Origin` it signed in from: send exactly one `Origin` header with that value, or the request is `ORIGIN_REQUIRED` or `UNAUTHENTICATED`. It lasts at most 30 days and ends after 7 idle days or at `DELETE /v1/auth/wallet-sessions/current`. ```` This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.