curl --request POST \
--url https://core.api.dev.predictstreet.sde.adifoundation.ai/api/deposits/relay \
--header 'Content-Type: application/json' \
--header 'X-Api-Key: <api-key>' \
--data '
{
"amount": "25000000",
"permitNonce": "7",
"permitDeadline": 1780000000,
"v": 27,
"r": "0x...",
"s": "0x...",
"permitOwner": "0x1234567890abcdef1234567890abcdef12345678"
}
'import requests
url = "https://core.api.dev.predictstreet.sde.adifoundation.ai/api/deposits/relay"
payload = {
"amount": "25000000",
"permitNonce": "7",
"permitDeadline": 1780000000,
"v": 27,
"r": "0x...",
"s": "0x...",
"permitOwner": "0x1234567890abcdef1234567890abcdef12345678"
}
headers = {
"X-Api-Key": "<api-key>",
"Content-Type": "application/json"
}
response = requests.post(url, json=payload, headers=headers)
print(response.text)const options = {
method: 'POST',
headers: {'X-Api-Key': '<api-key>', 'Content-Type': 'application/json'},
body: JSON.stringify({
amount: '25000000',
permitNonce: '7',
permitDeadline: 1780000000,
v: 27,
r: '0x...',
s: '0x...',
permitOwner: '0x1234567890abcdef1234567890abcdef12345678'
})
};
fetch('https://core.api.dev.predictstreet.sde.adifoundation.ai/api/deposits/relay', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));<?php
$curl = curl_init();
curl_setopt_array($curl, [
CURLOPT_URL => "https://core.api.dev.predictstreet.sde.adifoundation.ai/api/deposits/relay",
CURLOPT_RETURNTRANSFER => true,
CURLOPT_ENCODING => "",
CURLOPT_MAXREDIRS => 10,
CURLOPT_TIMEOUT => 30,
CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
CURLOPT_CUSTOMREQUEST => "POST",
CURLOPT_POSTFIELDS => json_encode([
'amount' => '25000000',
'permitNonce' => '7',
'permitDeadline' => 1780000000,
'v' => 27,
'r' => '0x...',
's' => '0x...',
'permitOwner' => '0x1234567890abcdef1234567890abcdef12345678'
]),
CURLOPT_HTTPHEADER => [
"Content-Type: application/json",
"X-Api-Key: <api-key>"
],
]);
$response = curl_exec($curl);
$err = curl_error($curl);
curl_close($curl);
if ($err) {
echo "cURL Error #:" . $err;
} else {
echo $response;
}package main
import (
"fmt"
"strings"
"net/http"
"io"
)
func main() {
url := "https://core.api.dev.predictstreet.sde.adifoundation.ai/api/deposits/relay"
payload := strings.NewReader("{\n \"amount\": \"25000000\",\n \"permitNonce\": \"7\",\n \"permitDeadline\": 1780000000,\n \"v\": 27,\n \"r\": \"0x...\",\n \"s\": \"0x...\",\n \"permitOwner\": \"0x1234567890abcdef1234567890abcdef12345678\"\n}")
req, _ := http.NewRequest("POST", url, payload)
req.Header.Add("X-Api-Key", "<api-key>")
req.Header.Add("Content-Type", "application/json")
res, _ := http.DefaultClient.Do(req)
defer res.Body.Close()
body, _ := io.ReadAll(res.Body)
fmt.Println(string(body))
}HttpResponse<String> response = Unirest.post("https://core.api.dev.predictstreet.sde.adifoundation.ai/api/deposits/relay")
.header("X-Api-Key", "<api-key>")
.header("Content-Type", "application/json")
.body("{\n \"amount\": \"25000000\",\n \"permitNonce\": \"7\",\n \"permitDeadline\": 1780000000,\n \"v\": 27,\n \"r\": \"0x...\",\n \"s\": \"0x...\",\n \"permitOwner\": \"0x1234567890abcdef1234567890abcdef12345678\"\n}")
.asString();require 'uri'
require 'net/http'
url = URI("https://core.api.dev.predictstreet.sde.adifoundation.ai/api/deposits/relay")
http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true
request = Net::HTTP::Post.new(url)
request["X-Api-Key"] = '<api-key>'
request["Content-Type"] = 'application/json'
request.body = "{\n \"amount\": \"25000000\",\n \"permitNonce\": \"7\",\n \"permitDeadline\": 1780000000,\n \"v\": 27,\n \"r\": \"0x...\",\n \"s\": \"0x...\",\n \"permitOwner\": \"0x1234567890abcdef1234567890abcdef12345678\"\n}"
response = http.request(request)
puts response.read_body{
"auditId": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
"jobId": "<string>",
"status": "PENDING_SCREENING"
}{
"status": 404,
"error": {
"code": "<string>",
"message": "<string>",
"trace_id": "<string>",
"retryAfterSec": 123,
"retryable": true,
"details": {}
}
}{
"status": 404,
"error": {
"code": "<string>",
"message": "<string>",
"trace_id": "<string>",
"retryAfterSec": 123,
"retryable": true,
"details": {}
}
}{
"status": 404,
"error": {
"code": "<string>",
"message": "<string>",
"trace_id": "<string>",
"retryAfterSec": 123,
"retryable": true,
"details": {}
}
}Submit a signed permit for gasless deposit relay
Gasless USDC deposit. The user signs an EIP-2612 USDC.permit TypedData with their embedded wallet (spender = multicallExecutor from GET /api/platform/contracts, value = amount, nonce = USDC.nonces(owner)) and posts the split signature (v, r, s) here. The backend ecrecovers the signature (must equal the authenticated wallet), validates deadline / chain / token / nonce + runs compliance + a tier-cap pre-check, records the deposit, and queues it for the relayer. The relayer then broadcasts an atomic MulticallExecutor batch (permit -> transferFrom -> approve -> Vault.depositERC20 -> cleanup) so the user pays no gas. Poll GET /api/deposits/relay/{auditId} for progress. The auditId is returned even on failure so it can be referenced in support. Rate-limited 60/min/IP and 10/min/wallet.
curl --request POST \
--url https://core.api.dev.predictstreet.sde.adifoundation.ai/api/deposits/relay \
--header 'Content-Type: application/json' \
--header 'X-Api-Key: <api-key>' \
--data '
{
"amount": "25000000",
"permitNonce": "7",
"permitDeadline": 1780000000,
"v": 27,
"r": "0x...",
"s": "0x...",
"permitOwner": "0x1234567890abcdef1234567890abcdef12345678"
}
'import requests
url = "https://core.api.dev.predictstreet.sde.adifoundation.ai/api/deposits/relay"
payload = {
"amount": "25000000",
"permitNonce": "7",
"permitDeadline": 1780000000,
"v": 27,
"r": "0x...",
"s": "0x...",
"permitOwner": "0x1234567890abcdef1234567890abcdef12345678"
}
headers = {
"X-Api-Key": "<api-key>",
"Content-Type": "application/json"
}
response = requests.post(url, json=payload, headers=headers)
print(response.text)const options = {
method: 'POST',
headers: {'X-Api-Key': '<api-key>', 'Content-Type': 'application/json'},
body: JSON.stringify({
amount: '25000000',
permitNonce: '7',
permitDeadline: 1780000000,
v: 27,
r: '0x...',
s: '0x...',
permitOwner: '0x1234567890abcdef1234567890abcdef12345678'
})
};
fetch('https://core.api.dev.predictstreet.sde.adifoundation.ai/api/deposits/relay', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));<?php
$curl = curl_init();
curl_setopt_array($curl, [
CURLOPT_URL => "https://core.api.dev.predictstreet.sde.adifoundation.ai/api/deposits/relay",
CURLOPT_RETURNTRANSFER => true,
CURLOPT_ENCODING => "",
CURLOPT_MAXREDIRS => 10,
CURLOPT_TIMEOUT => 30,
CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
CURLOPT_CUSTOMREQUEST => "POST",
CURLOPT_POSTFIELDS => json_encode([
'amount' => '25000000',
'permitNonce' => '7',
'permitDeadline' => 1780000000,
'v' => 27,
'r' => '0x...',
's' => '0x...',
'permitOwner' => '0x1234567890abcdef1234567890abcdef12345678'
]),
CURLOPT_HTTPHEADER => [
"Content-Type: application/json",
"X-Api-Key: <api-key>"
],
]);
$response = curl_exec($curl);
$err = curl_error($curl);
curl_close($curl);
if ($err) {
echo "cURL Error #:" . $err;
} else {
echo $response;
}package main
import (
"fmt"
"strings"
"net/http"
"io"
)
func main() {
url := "https://core.api.dev.predictstreet.sde.adifoundation.ai/api/deposits/relay"
payload := strings.NewReader("{\n \"amount\": \"25000000\",\n \"permitNonce\": \"7\",\n \"permitDeadline\": 1780000000,\n \"v\": 27,\n \"r\": \"0x...\",\n \"s\": \"0x...\",\n \"permitOwner\": \"0x1234567890abcdef1234567890abcdef12345678\"\n}")
req, _ := http.NewRequest("POST", url, payload)
req.Header.Add("X-Api-Key", "<api-key>")
req.Header.Add("Content-Type", "application/json")
res, _ := http.DefaultClient.Do(req)
defer res.Body.Close()
body, _ := io.ReadAll(res.Body)
fmt.Println(string(body))
}HttpResponse<String> response = Unirest.post("https://core.api.dev.predictstreet.sde.adifoundation.ai/api/deposits/relay")
.header("X-Api-Key", "<api-key>")
.header("Content-Type", "application/json")
.body("{\n \"amount\": \"25000000\",\n \"permitNonce\": \"7\",\n \"permitDeadline\": 1780000000,\n \"v\": 27,\n \"r\": \"0x...\",\n \"s\": \"0x...\",\n \"permitOwner\": \"0x1234567890abcdef1234567890abcdef12345678\"\n}")
.asString();require 'uri'
require 'net/http'
url = URI("https://core.api.dev.predictstreet.sde.adifoundation.ai/api/deposits/relay")
http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true
request = Net::HTTP::Post.new(url)
request["X-Api-Key"] = '<api-key>'
request["Content-Type"] = 'application/json'
request.body = "{\n \"amount\": \"25000000\",\n \"permitNonce\": \"7\",\n \"permitDeadline\": 1780000000,\n \"v\": 27,\n \"r\": \"0x...\",\n \"s\": \"0x...\",\n \"permitOwner\": \"0x1234567890abcdef1234567890abcdef12345678\"\n}"
response = http.request(request)
puts response.read_body{
"auditId": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
"jobId": "<string>",
"status": "PENDING_SCREENING"
}{
"status": 404,
"error": {
"code": "<string>",
"message": "<string>",
"trace_id": "<string>",
"retryAfterSec": 123,
"retryable": true,
"details": {}
}
}{
"status": 404,
"error": {
"code": "<string>",
"message": "<string>",
"trace_id": "<string>",
"retryAfterSec": 123,
"retryable": true,
"details": {}
}
}{
"status": 404,
"error": {
"code": "<string>",
"message": "<string>",
"trace_id": "<string>",
"retryAfterSec": 123,
"retryable": true,
"details": {}
}
}Authorizations
Partner / integrator key — format ps_live_<keyId>_<secret>. Partner keys are issued by PredictStreet; a user can also create keys bound to their own wallet from their account settings in the web app. Never ship to a browser. multi_wallet partners must additionally send X-User-Wallet: 0x<40-hex> on every authenticated request to declare the acting wallet. See the API keys guide for scope taxonomy, partner kinds, rate limits, and rotation procedure.
Headers
Required for multi_wallet partners on every authenticated request; ignored for single_wallet. Declares the acting end-user wallet for this request — drives KYC checks, balances/positions/orders attribution, rate-limit buckets, and audit. Lower-cased server-side. Missing on a multi_wallet key → 401 api_key_user_wallet_required; malformed → 401 api_key_user_wallet_invalid. The on-chain CTFExchange/Vault contracts still verify EIP-712 signer ↔ vault binding, so loosening API-layer attribution is safe by construction.
^0x[a-fA-F0-9]{40}$"0x742d35Cc6634C0532925a3b844Bc9e7595f0bEb3"
Body
USDC amount in raw units (6 decimals — 1 USDC = "1000000"). Must equal the value signed into the permit.
"25000000"
Current USDC.nonces(owner), read on-chain immediately before signing.
"7"
EIP-2612 permit deadline, unix seconds. Must leave the submitter enough buffer or the request is rejected with permit_deadline_too_soon.
1780000000
Recovery id of the permit signature.
27
32-byte r component of the permit signature (0x-hex).
"0x..."
32-byte s component of the permit signature (0x-hex).
"0x..."
Optional. The wallet the permit was built for; if present it must equal the authenticated wallet, else permit_signer_mismatch. Defence-in-depth only — the canonical signer is recovered server-side.
"0x1234567890abcdef1234567890abcdef12345678"