Version: 1.0.0

Senticore Exchange API

This file is the canonical contract for Senticore's /api/v1 exchange API and /api/v2/public oracle views.

The canonical product families and versioned oracle endpoints below are active API contracts. Removed aliases are not mounted and are intentionally excluded from this specification.

Wire conventions: public JSON DTOs use documented camelCase; native signed engine payloads retain their canonical snake_case bytes and are a distinct schema. Price fields ending Micro/Micros use integer micro units (1 = 0.000001); quantities and balances are atomic units, frequently decimal strings to preserve full integer precision. Fields ending Ms and bare signed ts use Unix milliseconds unless the field explicitly describes a duration. Chart point time units follow their field documentation. Engine/wallet accounts are 20-byte 0x hex; trading account IDs and order IDs are distinct 32-byte 0x hex identities. New clients should use midYesMicro/midNoMicro; legacy aliases and routes remain available until a reviewed release no earlier than 2027-03-07.

Authentication

API Key: adminApiKey

Admin API credential. The admin API must also be enabled and the client source address authorized.

Security Scheme Type:	apiKey
Header parameter name:	X-Admin-Key

HTTP: Bearer Auth

Alternative transport for the admin API key. This is distinct from a private-read spws1 bearer token.

Security Scheme Type:	http
HTTP Authorization Scheme:	bearer
Bearer format:	Admin API key

HTTP: Bearer Auth

Account-scoped bearer token for private reads. Guarded production does not accept a raw API-key-id plus secret as a bearer credential; machine agents use HMAC v2.

Security Scheme Type:	http
HTTP Authorization Scheme:	bearer
Bearer format:	spws1 private read-session token

API Key: hmacV2

HMAC machine authentication using SC-Auth-Version: 2, SC-Key, SC-Nonce, SC-Timestamp, SC-Passphrase, and SC-Signature. Intended for institutional_agent credentials on BSL/FIX/FIXP and protected reads.

Security Scheme Type:	apiKey
Header parameter name:	SC-Signature

API Key: orderEntryLaneKey

Provisioned dedicated low-latency order-entry lane key.

Security Scheme Type:	apiKey
Header parameter name:	X-Senticore-Order-Entry-Key

API Key: withdrawProofKey

Restricted settlement-operator credential for proof export and recovery.

Security Scheme Type:	apiKey
Header parameter name:	X-Withdraw-Proof-Key

API Key: ed25519Machine

Ed25519 machine request authentication: SC-Auth-Version: 3, SC-Key, SC-Nonce, SC-Timestamp and SC-Signature over the canonical method/URI/body. No HMAC passphrase in this branch.

Security Scheme Type:	apiKey
Header parameter name:	SC-Signature

API Key: legacyAgentKeyId

Legacy paired API key identifier; only valid together with X-Senti-Api-Secret and the required signed delegated action body.

Security Scheme Type:	apiKey
Header parameter name:	X-Senti-Api-Key-Id

API Key: legacyAgentSecret

Legacy paired agent secret; only valid together with X-Senti-Api-Key-Id.

Security Scheme Type:	apiKey
Header parameter name:	X-Senti-Api-Secret