Create a policy-bounded Hyperliquid trading session
Creates a venue-scoped session after tenant authentication, agent-tenant ownership checks, optional agent-token scoping, wallet resolution, policy cap intersection, venue allowlist checks, and asset allowlist checks.
Headers
Unix seconds, Unix milliseconds, or HTTP/ISO timestamp. Sensitive mutating routes require this or X-Steward-Request-Expires-At when request-expiry or request signatures are enforced.
Unix seconds, Unix milliseconds, or HTTP/ISO expiry time. Sensitive mutating routes require this or X-Steward-Request-Timestamp when request-expiry or request signatures are enforced.
Authorization signature for sensitive mutating routes when STEWARD_REQUIRE_AUTH_SIGNATURE=true or production enforcement is enabled. Use v1=<hmac-sha256> or p256=<signature>.
Tenant request-signing key id used to select a managed HMAC signing key. Required when signing with a managed tenant key; omit only for static or app-client signing secrets.
Required for signed sensitive requests and recommended for all sensitive mutating requests. Replays are scoped to authenticated or explicitly signed contexts.
Request body
Example request
{
"allowedAssets": [
"xyz:SPCX"
]
}Response
JSON response
Changes
Changed in 1 of the 9 revisions of this API.1
- ○
endpoint added
endpoint-added
This revision also has 6 changes that name no endpoint, such as unreferenced schemas being removed. See the revision's changelog
- ○