Appearance
Exchange One-Time Token (OTT)
POST
/v1/partner/exchange
Exchange a One-Time Token (OTT) for API credentials. A partner application sends a VALROT-prefixed token issued when a user authorises the integration on VALR, and receives back an API key and secret. The token is single-use and expires if not redeemed. The returned credentials inherit the OTT permissions and IP restrictions the user selected during authorisation, and can be used to sign authenticated requests to the VALR API on their behalf. The exchange request itself must be made using an existing API key with View permissions.
Authorizations
apiKey
Your API key
Type
API Key (header: X-VALR-API-KEY)
apiSignature
HMAC SHA512 signature of the request (see Authentication section)
Type
API Key (header: X-VALR-SIGNATURE)
apiTimestamp
Request timestamp in milliseconds
Type
API Key (header: X-VALR-TIMESTAMP)
Request Body
application/json
JSON
{
"ottToken": "VALROT_4uNneaFRRiqoposStCrDcgy_ZcroOLZ-bkWBpYSyGD"
}
Responses
OTT exchanged successfully
application/json
JSON
{
"apiKey": "073079dc459ab871aa6e2abf3b63b9bd2a1da09412f902184d662470c3056bb9",
"apiSecret": "edd3077747e43889edeb0467ba81b0a65301aae32d93bed9f667252eb368be37",
"permissions": [
"View access",
"Trade",
"Internal Transfer",
"Link bank account"
],
"allowedIpAddressCidr": "105.244.154.87",
"whitelistedWithdrawalAddresses": [
]
}