Skip to main content
GET
List API key scopes

Authorizations

Authorization
string
header
required

Wallet session: the access_token from POST /v1/auth/wallet-sessions, for a user who brings their own wallet to a partner's web page. It acts for that wallet's account with no scope limit, and is bound to the Origin it signed in from: send exactly one Origin header with that value, or the request is ORIGIN_REQUIRED or UNAUTHENTICATED. It lasts at most 30 days and ends after 7 idle days or at DELETE /v1/auth/wallet-sessions/current.

Response

Current key capability snapshot

Advisory, no-store snapshot of the scopes a new key for this account may hold and the owner whose signature issues it. Scope dependencies still apply. Issuance revalidates current authority and consumes the owner's proof; discovery is never an authorization lease.

account
Participant · object
required

The account a new key would act for.

environment
enum<string>
required

The deployment a new key would work in.

Available options:
development,
staging,
production
owner
string
required

The address that signs issuance: the account wallet for a personal account, the controller for a maker.

Pattern: ^0x[0-9a-f]{40}$
scopes
enum<string>[]
required

Scopes a new key for this account may hold now.

One permission a key can hold. Each operation lists the scopes it requires, and a key holds only scopes that apply to its account, as the capabilities routes list. operations:read is reserved and never issued; maker:access:read is no longer issued and has no effect on a key that still carries it.

Available options:
identity:read,
account:read,
account:stream,
rfq:read,
rfq:write,
quote:write,
quote:read,
replay:read,
vault:read,
vault:write,
quote:accept,
position:cashout,
funding:deposit,
funding:withdraw,
sponsorship:use,
maker:access:read,
operations:read,
operations:submit
as_of
string<date-time>
required

When this snapshot was taken.

Maximum string length: 30
Pattern: ^[0-9]{4}-[0-9]{2}-[0-9]{2}T[0-9]{2}:[0-9]{2}:[0-9]{2}([.][0-9]{1,9})?Z$