---
title: "Request Challenge"
method: POST
path: "/v1/auth/challenge"
tags: ["auth"]
---

# Request Challenge

`POST /v1/auth/challenge`

Request a challenge for wallet authentication.

The challenge must be signed by the wallet and submitted to /session
within 60 seconds.

Rate limited to 10 requests per minute per IP to prevent abuse.

## Request body

- ChallengeRequest
  - `hotkey` string, required — SS58 hotkey address

## Response `200`

Successful Response

- ChallengeResponse
  - `challenge` string, required — Challenge string to sign
  - `expires_at` integer, required — Unix timestamp when challenge expires

## Other responses

- `422` — Validation Error

---

[API](https://skmtc.dev/oroagents/apis/oro-api.md) · [All operations](https://skmtc.dev/oroagents/apis/oro-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/oroagents/oro-api/revisions/38ef86138115/schema)