Skip to main content
POST
Initiate a withdrawal

Authorizations

X-Api-Key
string
header
required

Partner / integrator key — format ps_live_<keyId>_<secret>. Issued by PredictStreet ops via the admin panel; never self-service. Never ship to a browser. multi_wallet partners must additionally send X-User-Wallet: 0x<40-hex> on every authenticated request to declare the acting wallet. See the API keys guide for scope taxonomy, partner kinds, rate limits, and rotation procedure.

Headers

X-User-Wallet
string

Required for multi_wallet partners on every authenticated request; ignored for single_wallet. Declares the acting end-user wallet for this request — drives KYC checks, balances/positions/orders attribution, rate-limit buckets, and audit. Lower-cased server-side. Missing on a multi_wallet key → 401 api_key_user_wallet_required; malformed → 401 api_key_user_wallet_invalid. The on-chain CTFExchange/Vault contracts still verify EIP-712 signer ↔ vault binding, so loosening API-layer attribution is safe by construction.

Pattern: ^0x[a-fA-F0-9]{40}$
Example:

"0x742d35Cc6634C0532925a3b844Bc9e7595f0bEb3"

Body

application/json
amount
string
required

USDC amount in human-readable decimal (NOT wei).

Example:

"125.50"

destination
string
required

Destination EOA. must match a prior cleared deposit source OR be ≥ high-value review threshold (default 5000 USDC) to route through compliance review. Use GET /api/me/withdrawals/deposit-sources to surface the allowlist before signing.

salt
string
required

Per-user unique uint256 salt (decimal string).

expiry
integer
required

EIP-712 expiry, Unix seconds.

Required range: x >= 0
Example:

1729511712

userSig
string
required

EIP-712 signature over { token, amount, destination, salt, deadline } against the user's vault EIP-712 domain. See Withdrawals EIP-712.

totpCode
string

Withdrawal 2FA code. Required when the wallet has 2FA active and the platform enforces withdrawal security — else 403 totp_required. A 6-digit TOTP or a 16-hex backup code; single-use. Omit when 2FA is not configured. See Withdrawal 2FA.

Example:

"123456"

Response

OK — accepted into a routing state. Inspect status to know which.

Routing outcome. Lowercase values (rejected, mlro_review) come from the gateway when it short-circuits before reaching the exchange-service hop. Uppercase values mirror the underlying record's status (the row landed in DB).

status
enum<string>
required
Available options:
PENDING,
MLRO_REVIEW,
CO_SIGNED,
SUBMITTED,
CONFIRMED,
rejected,
mlro_review
id
string<uuid>

Created withdrawal id when status is uppercase (record exists).

code
string

Machine-readable rejection code (e.g. aml_block, destination_banned).

reason
string

Human-readable rejection reason.