Cancel Order
Cancel a resting order with a signed cancel request from the owning trading key.
DELETE /orders/{order_id} removes a resting order. The body carries a fresh
trading-key signature over the order id, cancel nonce, and current boot
session, proving the caller owns the order. Only the trading key that placed the
order can cancel it.Authorization: Bearer <token> and a trading-key cancel signature in
the body.
Path parameters
Request body
/info.boot_session_id. If you sign cancels yourself rather than through the
SDK, read it once per session and include it; a body missing it will not verify.
A CVM restart changes it, so refresh it before signing anything further.
Example
Success response
cancelled event is also emitted on the
Orders Channel so a streaming client sees the
order leave without polling.
Errors
404.
Treat a 404 on cancel as “the order is no longer resting” and reconcile via
GET /orders/{order_id} or the orders stream.Authorizations
Short-lived (≤ 1h) bearer token from POST /auth/token.
Expiry is EXACT — there is no grace period past expires_in, on REST
or on the streaming transport. Refresh on a margin.
A structurally valid, unexpired token is still refused when it has been revoked (401), when the operator has invalidated the tokens the account was holding (401), or when the account is suspended (403). Suspension also blocks issuing a new one, so re-authenticating does not clear it.
Path Parameters
Body
32-byte Ed25519 pubkey, hex.
Canonical decimal u64 string; strings preserve the full range in JavaScript clients.
^(0|[1-9][0-9]*)$32-byte hex boot session from /info; bound into the cancel signature so a captured body cannot be replayed in a later boot. Programmatic clients verify the same value in the transport-attestation manifest.
64-byte canonical cancel signature, hex.