Skip to main content
The caller's open orders.
The authoritative server-side view of what is resting. After a stream gap or a restart, reconcile against this rather than trusting local state.

Authorizations

Authorization
string
header
required

Short-lived (≤ 1h) bearer token from POST /auth/token.

Expiry is EXACT — there is no grace period past expires_in, on REST or on the streaming transport. Refresh on a margin.

A structurally valid, unexpired token is still refused when it has been revoked (401), when the operator has invalidated the tokens the account was holding (401), or when the account is suspended (403). Suspension also blocks issuing a new one, so re-authenticating does not clear it.

Response

Open-orders snapshot.

GET /account response. Returns ONLY the caller's open orders — the slice of account state the TEE legitimately holds (it tracks the order_id→account map at intake). Balances and notes are intentionally absent: linking an account to its notes needs the spending key, which the TEE never sees. Clients derive balances + spendable notes themselves from /tree/* + their own keys.

account_id
string
required
open_orders
object[]
required

The caller's orders still resting across all market books.