curl --request POST \
--url https://core.api.dev.predictstreet.sde.adifoundation.ai/api/withdrawals/request \
--header 'Content-Type: application/json' \
--header 'X-Api-Key: <api-key>' \
--data '
{
"amount": "125.50",
"destination": "<string>",
"salt": "<string>",
"expiry": 1729511712,
"userSig": "<string>",
"totpCode": "123456"
}
'import requests
url = "https://core.api.dev.predictstreet.sde.adifoundation.ai/api/withdrawals/request"
payload = {
"amount": "125.50",
"destination": "<string>",
"salt": "<string>",
"expiry": 1729511712,
"userSig": "<string>",
"totpCode": "123456"
}
headers = {
"X-Api-Key": "<api-key>",
"Content-Type": "application/json"
}
response = requests.post(url, json=payload, headers=headers)
print(response.text)const options = {
method: 'POST',
headers: {'X-Api-Key': '<api-key>', 'Content-Type': 'application/json'},
body: JSON.stringify({
amount: '125.50',
destination: '<string>',
salt: '<string>',
expiry: 1729511712,
userSig: '<string>',
totpCode: '123456'
})
};
fetch('https://core.api.dev.predictstreet.sde.adifoundation.ai/api/withdrawals/request', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));<?php
$curl = curl_init();
curl_setopt_array($curl, [
CURLOPT_URL => "https://core.api.dev.predictstreet.sde.adifoundation.ai/api/withdrawals/request",
CURLOPT_RETURNTRANSFER => true,
CURLOPT_ENCODING => "",
CURLOPT_MAXREDIRS => 10,
CURLOPT_TIMEOUT => 30,
CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
CURLOPT_CUSTOMREQUEST => "POST",
CURLOPT_POSTFIELDS => json_encode([
'amount' => '125.50',
'destination' => '<string>',
'salt' => '<string>',
'expiry' => 1729511712,
'userSig' => '<string>',
'totpCode' => '123456'
]),
CURLOPT_HTTPHEADER => [
"Content-Type: application/json",
"X-Api-Key: <api-key>"
],
]);
$response = curl_exec($curl);
$err = curl_error($curl);
curl_close($curl);
if ($err) {
echo "cURL Error #:" . $err;
} else {
echo $response;
}package main
import (
"fmt"
"strings"
"net/http"
"io"
)
func main() {
url := "https://core.api.dev.predictstreet.sde.adifoundation.ai/api/withdrawals/request"
payload := strings.NewReader("{\n \"amount\": \"125.50\",\n \"destination\": \"<string>\",\n \"salt\": \"<string>\",\n \"expiry\": 1729511712,\n \"userSig\": \"<string>\",\n \"totpCode\": \"123456\"\n}")
req, _ := http.NewRequest("POST", url, payload)
req.Header.Add("X-Api-Key", "<api-key>")
req.Header.Add("Content-Type", "application/json")
res, _ := http.DefaultClient.Do(req)
defer res.Body.Close()
body, _ := io.ReadAll(res.Body)
fmt.Println(string(body))
}HttpResponse<String> response = Unirest.post("https://core.api.dev.predictstreet.sde.adifoundation.ai/api/withdrawals/request")
.header("X-Api-Key", "<api-key>")
.header("Content-Type", "application/json")
.body("{\n \"amount\": \"125.50\",\n \"destination\": \"<string>\",\n \"salt\": \"<string>\",\n \"expiry\": 1729511712,\n \"userSig\": \"<string>\",\n \"totpCode\": \"123456\"\n}")
.asString();require 'uri'
require 'net/http'
url = URI("https://core.api.dev.predictstreet.sde.adifoundation.ai/api/withdrawals/request")
http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true
request = Net::HTTP::Post.new(url)
request["X-Api-Key"] = '<api-key>'
request["Content-Type"] = 'application/json'
request.body = "{\n \"amount\": \"125.50\",\n \"destination\": \"<string>\",\n \"salt\": \"<string>\",\n \"expiry\": 1729511712,\n \"userSig\": \"<string>\",\n \"totpCode\": \"123456\"\n}"
response = http.request(request)
puts response.read_body{
"status": "PENDING",
"id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
"code": "<string>",
"reason": "<string>",
"reason_public": "<string>"
}{
"status": 404,
"error": {
"code": "<string>",
"message": "<string>",
"trace_id": "<string>",
"retryAfterSec": 123,
"retryable": true,
"details": {}
}
}{
"status": 404,
"error": {
"code": "<string>",
"message": "<string>",
"trace_id": "<string>",
"retryAfterSec": 123,
"retryable": true,
"details": {}
}
}Initiate a withdrawal
Submits a USDC withdrawal request signed by the user’s EOA. The backend co-signs after compliance review. Funds movement on-chain requires BOTH the user signature in userSig and the backend co-signature — neither party can move funds alone. Rate-limited to 5 req/min per wallet.
curl --request POST \
--url https://core.api.dev.predictstreet.sde.adifoundation.ai/api/withdrawals/request \
--header 'Content-Type: application/json' \
--header 'X-Api-Key: <api-key>' \
--data '
{
"amount": "125.50",
"destination": "<string>",
"salt": "<string>",
"expiry": 1729511712,
"userSig": "<string>",
"totpCode": "123456"
}
'import requests
url = "https://core.api.dev.predictstreet.sde.adifoundation.ai/api/withdrawals/request"
payload = {
"amount": "125.50",
"destination": "<string>",
"salt": "<string>",
"expiry": 1729511712,
"userSig": "<string>",
"totpCode": "123456"
}
headers = {
"X-Api-Key": "<api-key>",
"Content-Type": "application/json"
}
response = requests.post(url, json=payload, headers=headers)
print(response.text)const options = {
method: 'POST',
headers: {'X-Api-Key': '<api-key>', 'Content-Type': 'application/json'},
body: JSON.stringify({
amount: '125.50',
destination: '<string>',
salt: '<string>',
expiry: 1729511712,
userSig: '<string>',
totpCode: '123456'
})
};
fetch('https://core.api.dev.predictstreet.sde.adifoundation.ai/api/withdrawals/request', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));<?php
$curl = curl_init();
curl_setopt_array($curl, [
CURLOPT_URL => "https://core.api.dev.predictstreet.sde.adifoundation.ai/api/withdrawals/request",
CURLOPT_RETURNTRANSFER => true,
CURLOPT_ENCODING => "",
CURLOPT_MAXREDIRS => 10,
CURLOPT_TIMEOUT => 30,
CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
CURLOPT_CUSTOMREQUEST => "POST",
CURLOPT_POSTFIELDS => json_encode([
'amount' => '125.50',
'destination' => '<string>',
'salt' => '<string>',
'expiry' => 1729511712,
'userSig' => '<string>',
'totpCode' => '123456'
]),
CURLOPT_HTTPHEADER => [
"Content-Type: application/json",
"X-Api-Key: <api-key>"
],
]);
$response = curl_exec($curl);
$err = curl_error($curl);
curl_close($curl);
if ($err) {
echo "cURL Error #:" . $err;
} else {
echo $response;
}package main
import (
"fmt"
"strings"
"net/http"
"io"
)
func main() {
url := "https://core.api.dev.predictstreet.sde.adifoundation.ai/api/withdrawals/request"
payload := strings.NewReader("{\n \"amount\": \"125.50\",\n \"destination\": \"<string>\",\n \"salt\": \"<string>\",\n \"expiry\": 1729511712,\n \"userSig\": \"<string>\",\n \"totpCode\": \"123456\"\n}")
req, _ := http.NewRequest("POST", url, payload)
req.Header.Add("X-Api-Key", "<api-key>")
req.Header.Add("Content-Type", "application/json")
res, _ := http.DefaultClient.Do(req)
defer res.Body.Close()
body, _ := io.ReadAll(res.Body)
fmt.Println(string(body))
}HttpResponse<String> response = Unirest.post("https://core.api.dev.predictstreet.sde.adifoundation.ai/api/withdrawals/request")
.header("X-Api-Key", "<api-key>")
.header("Content-Type", "application/json")
.body("{\n \"amount\": \"125.50\",\n \"destination\": \"<string>\",\n \"salt\": \"<string>\",\n \"expiry\": 1729511712,\n \"userSig\": \"<string>\",\n \"totpCode\": \"123456\"\n}")
.asString();require 'uri'
require 'net/http'
url = URI("https://core.api.dev.predictstreet.sde.adifoundation.ai/api/withdrawals/request")
http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true
request = Net::HTTP::Post.new(url)
request["X-Api-Key"] = '<api-key>'
request["Content-Type"] = 'application/json'
request.body = "{\n \"amount\": \"125.50\",\n \"destination\": \"<string>\",\n \"salt\": \"<string>\",\n \"expiry\": 1729511712,\n \"userSig\": \"<string>\",\n \"totpCode\": \"123456\"\n}"
response = http.request(request)
puts response.read_body{
"status": "PENDING",
"id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
"code": "<string>",
"reason": "<string>",
"reason_public": "<string>"
}{
"status": 404,
"error": {
"code": "<string>",
"message": "<string>",
"trace_id": "<string>",
"retryAfterSec": 123,
"retryable": true,
"details": {}
}
}{
"status": 404,
"error": {
"code": "<string>",
"message": "<string>",
"trace_id": "<string>",
"retryAfterSec": 123,
"retryable": true,
"details": {}
}
}Authorizations
Partner / integrator key — format ps_live_<keyId>_<secret>. Partner keys are issued by PredictStreet; a user can also create keys bound to their own wallet from their account settings in the web app. Never ship to a browser. multi_wallet partners must additionally send X-User-Wallet: 0x<40-hex> on every authenticated request to declare the acting wallet. See the API keys guide for scope taxonomy, partner kinds, rate limits, and rotation procedure.
Headers
Required for multi_wallet partners on every authenticated request; ignored for single_wallet. Declares the acting end-user wallet for this request — drives KYC checks, balances/positions/orders attribution, rate-limit buckets, and audit. Lower-cased server-side. Missing on a multi_wallet key → 401 api_key_user_wallet_required; malformed → 401 api_key_user_wallet_invalid. The on-chain CTFExchange/Vault contracts still verify EIP-712 signer ↔ vault binding, so loosening API-layer attribution is safe by construction.
^0x[a-fA-F0-9]{40}$"0x742d35Cc6634C0532925a3b844Bc9e7595f0bEb3"
Body
USDC amount in human-readable decimal (NOT wei).
"125.50"
Destination EOA (0x + 40 hex). When the platform enforces withdrawal security and the wallet has a withdrawal whitelist (/api/me/withdrawal-security/whitelist), the destination must be on it, otherwise 403 withdrawal_address_not_whitelisted. Destinations are screened for sanctions and AML.
Per-user unique uint256 salt (decimal string).
EIP-712 expiry, Unix seconds.
x >= 01729511712
EIP-712 signature over { token, amount, destination, salt, deadline } against the user's vault EIP-712 domain. See Withdrawals EIP-712.
Withdrawal 2FA code. Required when the wallet has 2FA active and the platform enforces withdrawal security — else 403 totp_required. A 6-digit TOTP or a 16-hex backup code; single-use. Omit when 2FA is not configured. See Withdrawal 2FA.
"123456"
Response
Accepted into a routing state, or rejected in-body. Read status: an uppercase value is the created withdrawal's status, except REJECTED with an empty id (refused before a record was created, reason in reason); rejected comes with code.
Routing outcome. Lowercase values (rejected, mlro_review) come from the API's pre-checks, before any withdrawal record is created. Uppercase values are the created withdrawal record's status, except REJECTED with an empty id: the request was refused before a record was created (for example insufficient balance), with the reason in reason.
PENDING, MLRO_REVIEW, CO_SIGNED, SUBMITTED, CONFIRMED, REJECTED, rejected, mlro_review Created withdrawal id when status is uppercase (record exists); an empty string on REJECTED, which creates no record.
Present when status is rejected: wallet_banned (destination is not eligible; comes with reason_public), aml_blocked (destination failed AML screening), restriction_active (an account restriction blocks withdrawals).
Human-readable rejection reason.
Neutral public reason sent instead of reason on a wallet_banned rejection.