{
  "link_id": "d52e7b91-4c68-4f89-1b23-5d7e9f0a2c46",
  "account_id": "ae8c1f02-3b45-4c67-9d12-8f0e5a6b7c8d",
  "chain": "eth",
  "address": "0x71C7656EC7ab88b098defB751B7401B5f6d8976F",
  "proof_id": "c41d2a88-7f3e-4b21-9c6d-2e8f1a5b7d90"
}

External wallet linked

An external wallet (custody=client) was linked to the account by solving a nonce challenge (POST /v1/wallet-links/challenges + POST /v1/wallet-links/verify). The wallet stays under the client’s custody; the link only proves ownership of the address.

Every delivery includes X-Webhook-Event, X-Webhook-Event-ID, X-Webhook-Delivery-ID, X-Webhook-Timestamp and X-Webhook-Signature = hex(HMAC-SHA256(secret, timestamp + "." + body)). Respond 2xx; up to 5 attempts with incremental backoff.

WEBHOOK

wallet_linked

{
  "link_id": "d52e7b91-4c68-4f89-1b23-5d7e9f0a2c46",
  "account_id": "ae8c1f02-3b45-4c67-9d12-8f0e5a6b7c8d",
  "chain": "eth",
  "address": "0x71C7656EC7ab88b098defB751B7401B5f6d8976F",
  "proof_id": "c41d2a88-7f3e-4b21-9c6d-2e8f1a5b7d90"
}

Authorizations

Authorization

string

header

required

Session JWT (from register/login) or API key (pk_...). X-API-Key: <token> is accepted as an alternative header.

Body

application/json

link_id

string

account_id

string

chain

enum<string>

Available options:

eth,

tron

address

string

proof_id

string

Signature proof that backs the link.

Response

200

Return any 2xx to acknowledge the delivery.