S
docs.syncra.money
Finance
ENRU
POST/api/v1/p2p/merchant/wallet/withdrawСтейдж

Initiates a USDT withdrawal to the provided TRC-20 address. The synchronous status is COMPLETED (auto-approval: the on-chain transaction has been sent to broadcast) or PENDING_MANUAL (admin approval queue — MANUAL_ONLY policy or an amount above the current auto-limit). Insufficient balance — failed precondition → HTTP 400 (not 402). Idempotency is guaranteed server-side (a deterministic key of merchant + address + amount + current fee).

Authorization

MerchantToken MerchantSignature MerchantTimestamp
X-Merchant-Token<token>

The merchant's public token (64 hex characters), issued at onboarding.

In: header

X-Signature<token>

HMAC-SHA256 signature (a single scheme for all endpoints). Format: t=<unix_seconds>,v1=<hex_hmac_sha256> where hex_hmac = HMAC-SHA256(webhook_secret, "<unix_seconds>.<raw_body>"). Replay window: 5 minutes (a 60-second drift into the future is allowed).

In: header

X-Timestamp<token>

Unix time of the request in seconds. Signature window: 5 minutes back / 60 seconds forward.

In: header

Request Body

application/json

TypeScript Definitions

Use the request body type in TypeScript.

Response Body

application/json

application/problem+json

application/problem+json

curl -X POST "https://example.com/api/v1/p2p/merchant/wallet/withdraw" \  -H "X-Merchant-Token: <MERCHANT_TOKEN>" \  -H "X-Timestamp: <UNIX_TIMESTAMP>" \  -H "X-Signature: t=<UNIX_TIMESTAMP>,v1=<HEX_HMAC_SHA256>" \  -H "Content-Type: application/json" \  -d '{    "amount_usdt": 1000,    "tron_address": "TRx7Vn2a3bK8HJdZmFc4eD5q1wP9nLs6t"  }'
{  "status": "COMPLETED",  "transaction_id": "0a1b2c3d4e5f6a7b8c9d0e1f2a3b4c5d6e7f8a9b0c1d2e3f4a5b6c7d8e9f0a1b2",  "amount_usdt": "1000",  "tron_address": "TRx7Vn2a3bK8HJdZmFc4eD5q1wP9nLs6t",  "created_at": "2026-08-10T13:00:00Z",  "fee_usdt_cents": "150",  "net_usdt_cents": "99850"}
{  "type": "../dictionary",  "title": "string",  "status": 0,  "detail": "string",  "instance": "../dictionary",  "errors": [    {      "field": "amount",      "message": "must be greater than 0",      "code": "POSITIVE_REQUIRED"    }  ]}
{  "type": "../dictionary",  "title": "string",  "status": 0,  "detail": "string",  "instance": "../dictionary",  "errors": [    {      "field": "amount",      "message": "must be greater than 0",      "code": "POSITIVE_REQUIRED"    }  ]}

Retrieve merchant balances GET GET

Returns the merchant's real wallets from the money service — one row per actual wallet with its own currency and `wallet_id` (no synthetic rows). `frozen` reflects active holds.

Retrieve the merchant's current TRC-20 deposit address GET GET

Read-only: returns the merchant's current active TRC-20 deposit address used for incoming USDT collateral (topping up the merchant's operating balance — payouts, withdrawals, and fees; in PayIn deals clients pay to the traders' payment details, NOT to this address). `tenant_id` / `merchant_id` in the request are informational — with HMAC authentication the scope is always resolved from the signed token. Returns `404 Not Found` (problem+json) if the address has not been issued yet.