Fetch On-ramp Coins
curl --request GET \
--url https://secureapi.tender.cash/v1/api/onramp/coins \
--header 'authorization: <api-key>' \
--header 'x-access-id: <x-access-id>' \
--header 'x-request-id: <x-request-id>' \
--header 'x-timestamp: <x-timestamp>'const options = {
method: 'GET',
headers: {
authorization: '<api-key>',
'x-timestamp': '<x-timestamp>',
'x-request-id': '<x-request-id>',
'x-access-id': '<x-access-id>'
}
};
fetch('https://secureapi.tender.cash/v1/api/onramp/coins', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));import requests
url = "https://secureapi.tender.cash/v1/api/onramp/coins"
headers = {
"authorization": "<api-key>",
"x-timestamp": "<x-timestamp>",
"x-request-id": "<x-request-id>",
"x-access-id": "<x-access-id>"
}
response = requests.get(url, headers=headers)
print(response.text)<?php
$curl = curl_init();
curl_setopt_array($curl, [
CURLOPT_URL => "https://secureapi.tender.cash/v1/api/onramp/coins",
CURLOPT_RETURNTRANSFER => true,
CURLOPT_ENCODING => "",
CURLOPT_MAXREDIRS => 10,
CURLOPT_TIMEOUT => 30,
CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
CURLOPT_CUSTOMREQUEST => "GET",
CURLOPT_HTTPHEADER => [
"authorization: <api-key>",
"x-access-id: <x-access-id>",
"x-request-id: <x-request-id>",
"x-timestamp: <x-timestamp>"
],
]);
$response = curl_exec($curl);
$err = curl_error($curl);
curl_close($curl);
if ($err) {
echo "cURL Error #:" . $err;
} else {
echo $response;
}{
"status": "success",
"message": "success",
"data": [
{
"_id": "64f1b2c3d4e5f60718293a4b",
"id": "usdt",
"name": "Tether USD",
"symbol": "USDT",
"icon": "https://cdn.tender.cash/coins/usdt.png",
"chains": ["tron", "ethereum"],
"isContract": true
}
]
}
On-ramp
Fetch On-ramp Coins
List cryptocurrencies available for on-ramp delivery, optionally filtered by chain
GET
/
v1
/
api
/
onramp
/
coins
Fetch On-ramp Coins
curl --request GET \
--url https://secureapi.tender.cash/v1/api/onramp/coins \
--header 'authorization: <api-key>' \
--header 'x-access-id: <x-access-id>' \
--header 'x-request-id: <x-request-id>' \
--header 'x-timestamp: <x-timestamp>'const options = {
method: 'GET',
headers: {
authorization: '<api-key>',
'x-timestamp': '<x-timestamp>',
'x-request-id': '<x-request-id>',
'x-access-id': '<x-access-id>'
}
};
fetch('https://secureapi.tender.cash/v1/api/onramp/coins', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));import requests
url = "https://secureapi.tender.cash/v1/api/onramp/coins"
headers = {
"authorization": "<api-key>",
"x-timestamp": "<x-timestamp>",
"x-request-id": "<x-request-id>",
"x-access-id": "<x-access-id>"
}
response = requests.get(url, headers=headers)
print(response.text)<?php
$curl = curl_init();
curl_setopt_array($curl, [
CURLOPT_URL => "https://secureapi.tender.cash/v1/api/onramp/coins",
CURLOPT_RETURNTRANSFER => true,
CURLOPT_ENCODING => "",
CURLOPT_MAXREDIRS => 10,
CURLOPT_TIMEOUT => 30,
CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
CURLOPT_CUSTOMREQUEST => "GET",
CURLOPT_HTTPHEADER => [
"authorization: <api-key>",
"x-access-id: <x-access-id>",
"x-request-id: <x-request-id>",
"x-timestamp: <x-timestamp>"
],
]);
$response = curl_exec($curl);
$err = curl_error($curl);
curl_close($curl);
if ($err) {
echo "cURL Error #:" . $err;
} else {
echo $response;
}{
"status": "success",
"message": "success",
"data": [
{
"_id": "64f1b2c3d4e5f60718293a4b",
"id": "usdt",
"name": "Tether USD",
"symbol": "USDT",
"icon": "https://cdn.tender.cash/coins/usdt.png",
"chains": ["tron", "ethereum"],
"isContract": true
}
]
}
Auth method: Signed (HMAC) — this endpoint requires the full set of signed
headers:
x-access-id, x-request-id, x-timestamp, and an HMAC-SHA256
authorization signature. See Authentication.symbol (for example USDT) as targetCurrency in
Get On-ramp Quote, and one of its chains as
targetChain.
This request counts against the on-ramp limit of 10 requests per minute. Cache the result. See
Rate limits.
Headers
string
required
Base64-encoded HMAC-SHA256 signature of
{"timeStamp":"<x-timestamp>","requestId":"<x-request-id>","accessId":"<x-access-id>"}, signed with your access secret. The request body is not part of the signature.Example: "pV3n0o8kq0lK2mJ8bZ1yq3Yt6hR0cXK9u4mVJ2l9sE0="string
required
ISO 8601 timestamp; must be within 5 minutes of server timeExample:
"2026-10-15T09:45:53.000Z"string
required
A unique UUID v4 per requestExample:
"550e8400-e29b-41d4-a716-446655440000"string
required
Your API access IDExample:
"your-access-id-here"Query Parameters
string
Return only coins available on this chain. Use a chain
id from
Fetch On-ramp Chains.Example: "tron"Response
string
required
Example:
"success"string
required
Example:
"success"array
required
Array of supported coins
Show coin object
Show coin object
string
Tender’s internal ID for the coin.Example:
"64f1b2c3d4e5f60718293a4b"string
Coin identifier.Example:
"usdt"string
Example:
"Tether USD"string
Coin symbol. Use as
targetCurrency in the quote request.Example: "USDT"string
Example:
"https://cdn.tender.cash/coins/usdt.png"string[]
Chain IDs this coin is available on.Example:
["tron", "ethereum"]boolean
Whether this is a token (for example ERC-20 or TRC-20) rather than a native coin.Example:
true{
"status": "success",
"message": "success",
"data": [
{
"_id": "64f1b2c3d4e5f60718293a4b",
"id": "usdt",
"name": "Tether USD",
"symbol": "USDT",
"icon": "https://cdn.tender.cash/coins/usdt.png",
"chains": ["tron", "ethereum"],
"isContract": true
}
]
}
Authorizations
Signed (HMAC) authentication. Required headers: x-access-id, x-request-id (UUID v4), x-timestamp (ISO 8601, must be within 5 minutes of server time), and authorization: the Base64 HMAC-SHA256 of the JSON string {"timeStamp":"","requestId":"","accessId":""} (keys in that order, no whitespace) using your access secret. The request body, method and path are not signed. The API key must be linked to an outlet.
Headers
Base64-encoded HMAC-SHA256 signature of {"timeStamp":"","requestId":"","accessId":""}, signed with your access secret. The request body is not part of the signature.
ISO 8601 timestamp; must be within 5 minutes of server time
A unique UUID v4 per request
Query Parameters
Filter by chain id.