S
docs.syncra.money
Finance
ENRU
POST/api/v1/p2p/merchant/wallet/deposit-addressСтейдж

Generates (first call) or rotates (subsequent calls) the merchant's TRC-20 deposit address for incoming USDT collateral. The scope is resolved from the authenticated merchant context (the canonical path, without merchant_id in the path). Atomically takes the next BIP44 derivation index, derives the address via tron-wallet-api, and stores the address + index in the merchant record. Rotation semantics: the new address immediately replaces the old one in the merchant record, while every previously issued address forever remains in the platform's eternal block-polling set — USDT sent to a replaced address is still detected and credited. Legacy alias with administrative impersonation: POST /api/v1/p2p/merchants/{merchant_id}/deposit-address.

Authorization

MerchantToken MerchantSignature MerchantTimestamp
X-Merchant-Token<token>

The merchant's public token (64 hex characters), issued at onboarding.

In: header

X-Signature<token>

HMAC-SHA256 signature (a single scheme for all endpoints). Format: t=<unix_seconds>,v1=<hex_hmac_sha256> where hex_hmac = HMAC-SHA256(webhook_secret, "<unix_seconds>.<raw_body>"). Replay window: 5 minutes (a 60-second drift into the future is allowed).

In: header

X-Timestamp<token>

Unix time of the request in seconds. Signature window: 5 minutes back / 60 seconds forward.

In: header

Request Body

application/json

TypeScript Definitions

Use the request body type in TypeScript.

Response Body

application/json

application/problem+json

curl -X POST "https://example.com/api/v1/p2p/merchant/wallet/deposit-address" \  -H "X-Merchant-Token: <MERCHANT_TOKEN>" \  -H "X-Timestamp: <UNIX_TIMESTAMP>" \  -H "X-Signature: t=<UNIX_TIMESTAMP>,v1=<HEX_HMAC_SHA256>" \  -H "Content-Type: application/json" \  -d '{}'
{  "trc20_address": "TYHCiW3XN5sP9cWJ5T4Dfs9Y18h46t9w1a",  "wallet_derivation_index": 17}
{  "type": "../dictionary",  "title": "string",  "status": 0,  "detail": "string",  "instance": "../dictionary",  "errors": [    {      "field": "amount",      "message": "must be greater than 0",      "code": "POSITIVE_REQUIRED"    }  ]}

Retrieve the merchant's current TRC-20 deposit address GET GET

Read-only: returns the merchant's current active TRC-20 deposit address used for incoming USDT collateral (topping up the merchant's operating balance — payouts, withdrawals, and fees; in PayIn deals clients pay to the traders' payment details, NOT to this address). `tenant_id` / `merchant_id` in the request are informational — with HMAC authentication the scope is always resolved from the signed token. Returns `404 Not Found` (problem+json) if the address has not been issued yet.

Estimate the withdrawal fee before sending a request GET GET

Read-only estimate of the withdrawal fee that will be applied to the authenticated merchant BEFORE submission: a counterparty-specific override if one is set, otherwise the tenant base — resolved through the SAME policy resolver the payment path uses, so the estimate can never diverge from the fee actually charged. The optional `amount_usdt_cents` (USDT cents; note that the create request takes whole units) also yields the net amount.