Skip to main content
GET
List maker API key scopes

Authorizations

Authorization
string
header
required

Wallet session: the access_token from POST /v1/auth/wallet-sessions, for a user who brings their own wallet to a partner's web page. It acts for that wallet's account with no scope limit, and is bound to the Origin it signed in from: send exactly one Origin header with that value, or the request is ORIGIN_REQUIRED or UNAUTHENTICATED. It lasts at most 30 days and ends after 7 idle days or at DELETE /v1/auth/wallet-sessions/current.

Path Parameters

maker_id
string<uint64-decimal>
required

On-chain maker ID, as a decimal string. The credential must be authorized for this maker. Never 0.

Maximum string length: 20
Pattern: ^(0|[1-9][0-9]{0,18}|1[0-7][0-9]{18}|18[0-3][0-9]{17}|184[0-3][0-9]{16}|1844[0-5][0-9]{15}|18446[0-6][0-9]{14}|184467[0-3][0-9]{13}|1844674[0-3][0-9]{12}|184467440[0-6][0-9]{10}|1844674407[0-2][0-9]{9}|18446744073[0-6][0-9]{8}|1844674407370[0-8][0-9]{6}|18446744073709[0-4][0-9]{5}|184467440737095[0-4][0-9]{4}|18446744073709550[0-9]{3}|18446744073709551[0-5][0-9]{2}|1844674407370955160[0-9]|1844674407370955161[0-5])$

Response

Current key capability snapshot

Advisory, no-store snapshot of the scopes a new key for this account may hold and the owner whose signature issues it. Scope dependencies still apply. Issuance revalidates current authority and consumes the owner's proof; discovery is never an authorization lease.

account
Participant · object
required

The account a new key would act for.

environment
enum<string>
required

The deployment a new key would work in.

Available options:
development,
staging,
production
owner
string
required

The address that signs issuance: the account wallet for a personal account, the controller for a maker.

Pattern: ^0x[0-9a-f]{40}$
scopes
enum<string>[]
required

Scopes a new key for this account may hold now.

One permission a key can hold. Each operation lists the scopes it requires, and a key holds only scopes that apply to its account, as the capabilities routes list. operations:read is reserved and never issued; maker:access:read is no longer issued and has no effect on a key that still carries it.

Available options:
identity:read,
account:read,
account:stream,
rfq:read,
rfq:write,
quote:write,
quote:read,
replay:read,
vault:read,
vault:write,
quote:accept,
position:cashout,
funding:deposit,
funding:withdraw,
sponsorship:use,
maker:access:read,
operations:read,
operations:submit
as_of
string<date-time>
required

When this snapshot was taken.

Maximum string length: 30
Pattern: ^[0-9]{4}-[0-9]{2}-[0-9]{2}T[0-9]{2}:[0-9]{2}:[0-9]{2}([.][0-9]{1,9})?Z$