Cessio Docs
ReferenceMakerApi keyRotate

Rotate the API key by proving party-key ownership

Recovery path for a lost API key: prove ownership of the party key by signing the `challenge` from `POST /maker/challenge` (as UTF-8 text), and get a fresh key back. The party key and party id are unchanged; the previous API key stops working immediately.

POST
/maker/api-key/rotate

Recovery path for a lost API key: prove ownership of the party key by signing the challenge from POST /maker/challenge (as UTF-8 text), and get a fresh key back. The party key and party id are unchanged; the previous API key stops working immediately.

Request Body

application/json

TypeScript Definitions

Use the request body type in TypeScript.

Response Body

application/json

application/json

application/json

curl -X POST "https://example.com/maker/api-key/rotate" \  -H "Content-Type: application/json" \  -d '{    "partyId": "string",    "challenge": "string",    "signature": "string"  }'
{  "apiKey": "mk_9f8e7d6c-5b4a-3928-1706-f5e4d3c2b1a0"}

Catalog of tradable instruments GET

Symbols, display names and `decimals` of the catalog instruments — a maker needs this to interpret `base`/`quote` in RFQs and holding amounts. Available with the same X-API-Key as the rest of the Maker API.

One-shot challenge for API-key rotation POST

First step of `POST /maker/api-key/rotate`: request a one-shot challenge string, then sign it — as UTF-8 text, NOT a prepared-tx hash — with the maker's party key.