Submit a Hyperliquid order through an active agent session
Requires an agent JWT for the calling agent. Orders are rate-limited, idempotency-protected, scoped to an active Hyperliquid session, rechecked against adapter asset support, evaluated against leverage/per-order/daily-spend policy before signing, and audited on both success and policy rejection.
Headers
Unix seconds, Unix milliseconds, or HTTP/ISO timestamp. Sensitive mutating routes require this or X-Steward-Request-Expires-At when request-expiry or request signatures are enforced.
Unix seconds, Unix milliseconds, or HTTP/ISO expiry time. Sensitive mutating routes require this or X-Steward-Request-Timestamp when request-expiry or request signatures are enforced.
Authorization signature for sensitive mutating routes when STEWARD_REQUIRE_AUTH_SIGNATURE=true or production enforcement is enabled. Use v1=<hmac-sha256> or p256=<signature>.
Tenant request-signing key id used to select a managed HMAC signing key. Required when signing with a managed tenant key; omit only for static or app-client signing secrets.
Required for signed sensitive requests and recommended for all sensitive mutating requests. Replays are scoped to authenticated or explicitly signed contexts.
Request body
Example request
{
"coin": "xyz:SPCX",
"asset": "xyz:SPCX"
}Response
JSON response
Changes
Changed in 1 of the 9 revisions of this API.1
- ○
endpoint added
endpoint-added
This revision also has 6 changes that name no endpoint, such as unreferenced schemas being removed. See the revision's changelog
- ○