Add Deposit Filter

curl --request POST \
  --url https://secureapi.tender.cash/v1/api/wallet/filter \
  --header 'Content-Type: <content-type>' \
  --header 'authorization: <api-key>' \
  --header 'x-access-id: <x-access-id>' \
  --header 'x-request-id: <x-request-id>' \
  --header 'x-timestamp: <x-timestamp>' \
  --data '
{
  "address": "0x1a2b3c...",
  "chains": [
    "EVM"
  ]
}
'

const options = {
  method: 'POST',
  headers: {
    authorization: '<api-key>',
    'x-timestamp': '<x-timestamp>',
    'x-request-id': '<x-request-id>',
    'x-access-id': '<x-access-id>',
    'Content-Type': '<content-type>'
  },
  body: JSON.stringify({address: '0x1a2b3c...', chains: ['EVM']})
};

fetch('https://secureapi.tender.cash/v1/api/wallet/filter', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

import requests

url = "https://secureapi.tender.cash/v1/api/wallet/filter"

payload = {
    "address": "0x1a2b3c...",
    "chains": ["EVM"]
}
headers = {
    "authorization": "<api-key>",
    "x-timestamp": "<x-timestamp>",
    "x-request-id": "<x-request-id>",
    "x-access-id": "<x-access-id>",
    "Content-Type": "<content-type>"
}

response = requests.post(url, json=payload, headers=headers)

print(response.text)

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://secureapi.tender.cash/v1/api/wallet/filter",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "POST",
  CURLOPT_POSTFIELDS => json_encode([
    'address' => '0x1a2b3c...',
    'chains' => [
        'EVM'
    ]
  ]),
  CURLOPT_HTTPHEADER => [
    "Content-Type: <content-type>",
    "authorization: <api-key>",
    "x-access-id: <x-access-id>",
    "x-request-id: <x-request-id>",
    "x-timestamp: <x-timestamp>"
  ],
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

{
  "status": "success",
  "message": "success",
  "data": {
    "address": "<string>",
    "watched": true,
    "chains": [
      "BTC",
      "EVM",
      "TRON"
    ]
  }
}

{
  "status": "error",
  "message": "address 0x1a2b3c... is invalid for the provided chains",
  "data": null
}

{
  "status": "error",
  "message": "INVALID_REQUEST_SIGNATURE",
  "data": null
}

{
  "status": "error",
  "message": "Too many requests. Max 120 per 60s.",
  "data": null
}

{
  "status": "error",
  "message": "Wallet service is temporarily unavailable. Please try again.",
  "data": null
}

POST

api

wallet

filter

Add Deposit Filter

curl --request POST \
  --url https://secureapi.tender.cash/v1/api/wallet/filter \
  --header 'Content-Type: <content-type>' \
  --header 'authorization: <api-key>' \
  --header 'x-access-id: <x-access-id>' \
  --header 'x-request-id: <x-request-id>' \
  --header 'x-timestamp: <x-timestamp>' \
  --data '
{
  "address": "0x1a2b3c...",
  "chains": [
    "EVM"
  ]
}
'

const options = {
  method: 'POST',
  headers: {
    authorization: '<api-key>',
    'x-timestamp': '<x-timestamp>',
    'x-request-id': '<x-request-id>',
    'x-access-id': '<x-access-id>',
    'Content-Type': '<content-type>'
  },
  body: JSON.stringify({address: '0x1a2b3c...', chains: ['EVM']})
};

fetch('https://secureapi.tender.cash/v1/api/wallet/filter', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

import requests

url = "https://secureapi.tender.cash/v1/api/wallet/filter"

payload = {
    "address": "0x1a2b3c...",
    "chains": ["EVM"]
}
headers = {
    "authorization": "<api-key>",
    "x-timestamp": "<x-timestamp>",
    "x-request-id": "<x-request-id>",
    "x-access-id": "<x-access-id>",
    "Content-Type": "<content-type>"
}

response = requests.post(url, json=payload, headers=headers)

print(response.text)

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://secureapi.tender.cash/v1/api/wallet/filter",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "POST",
  CURLOPT_POSTFIELDS => json_encode([
    'address' => '0x1a2b3c...',
    'chains' => [
        'EVM'
    ]
  ]),
  CURLOPT_HTTPHEADER => [
    "Content-Type: <content-type>",
    "authorization: <api-key>",
    "x-access-id: <x-access-id>",
    "x-request-id: <x-request-id>",
    "x-timestamp: <x-timestamp>"
  ],
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

{
  "status": "success",
  "message": "success",
  "data": {
    "address": "<string>",
    "watched": true,
    "chains": [
      "BTC",
      "EVM",
      "TRON"
    ]
  }
}

{
  "status": "error",
  "message": "address 0x1a2b3c... is invalid for the provided chains",
  "data": null
}

{
  "status": "error",
  "message": "INVALID_REQUEST_SIGNATURE",
  "data": null
}

{
  "status": "error",
  "message": "Too many requests. Max 120 per 60s.",
  "data": null
}

{
  "status": "error",
  "message": "Wallet service is temporarily unavailable. Please try again.",
  "data": null
}

Auth method: Signed (HMAC) — this endpoint requires the full set of signed headers: x-access-id, x-request-id, x-timestamp, and an HMAC-SHA256 authorization signature. See Authentication.

Registers an address with Tender’s deposit monitor. Once registered, each deposit detected on the address triggers a sub_user_wallet_transaction_detected webhook to your server. See Subwallets for the payload.

Example

const res = await fetch(`${BASE}/wallet/filter`, {
  method: 'POST',
  headers: makeHeaders(),
  body: JSON.stringify({
    address: '0x1a2b3c...',
    chains:  ['EVM'],
  }),
});

const { data } = await res.json();
// data.watched → true
// data.chains  → ['BTC', 'EVM', 'TRON']

res = requests.post(
    f"{BASE}/wallet/filter",
    headers=make_headers(),
    json={"address": "0x1a2b3c...", "chains": ["EVM"]},
)
data = res.json()["data"]

Headers

string

required

Base64-encoded HMAC-SHA256 signature of {"timeStamp":"<x-timestamp>","requestId":"<x-request-id>","accessId":"<x-access-id>"}, signed with your access secret. The request body is not part of the signature.Example: "pV3n0o8kq0lK2mJ8bZ1yq3Yt6hR0cXK9u4mVJ2l9sE0="

string

required

ISO 8601 timestamp; must be within 5 minutes of server timeExample: "2026-10-15T09:45:53.000Z"

string

required

A unique UUID v4 per requestExample: "550e8400-e29b-41d4-a716-446655440000"

string

required

Your API access IDExample: "your-access-id-here"

string

required

Example: "application/json"

Body

string

required

The address to watch. It must be a valid address on at least one of chains. Keep the original casing for TRON and BTC addresses.Example: "0x1a2b3c..."

string[]

required

Network types to watch the address on (at least one): EVM, TRON or BTC, case-insensitive. EVM covers every EVM chain that subwallets support.Example: ["EVM"]

Response

string

required

Example: "success"

string

required

Example: "success"

object

required

Show data properties

string

The address that was registered.Example: "0x1a2b3c..."

boolean

true once the address is registered.Example: true

string[]

Every network type the deposit monitor is currently watching, sorted. This can include types you didn’t send in this request.Example: ["BTC", "EVM", "TRON"]

Error responses

Condition	Status	Message
`address` or `chains` missing or invalid	400	Validation message, e.g. `chains must contain at least 1 elements`
Address not valid on any of `chains`	400	`address <address> is invalid for the provided chains`
Wallet service unavailable	503	`Wallet service is temporarily unavailable. Please try again.`

Authorizations

authorization

string

header

required

Signed (HMAC) authentication. Required headers: x-access-id, x-request-id (UUID v4), x-timestamp (ISO 8601, must be within 5 minutes of server time), and authorization: the Base64 HMAC-SHA256 of the JSON string {"timeStamp":"","requestId":"","accessId":""} (keys in that order, no whitespace) using your access secret. The request body, method and path are not signed. The API key must be linked to an outlet.

Headers

authorization

string

required

Base64-encoded HMAC-SHA256 signature of {"timeStamp":"","requestId":"","accessId":""}, signed with your access secret. The request body is not part of the signature.

x-timestamp

string<date-time>

required

ISO 8601 timestamp; must be within 5 minutes of server time

x-request-id

string<uuid>

required

A unique UUID v4 per request

x-access-id

string

required

Content-Type

string

required

Body

application/json

address

string

required

Example:

"0x1a2b3c..."

chains

enum<string>[]

required

Network types, case-insensitive.

Minimum array length: 1

Available options:

EVM,

TRON,

BTC

Example:

["EVM"]

Response

Address registered

status

string

required

Example:

"success"

message

string

required

Example:

"success"

data

object

required

Show child attributes

Payment

System

Agents

Conversions

Payouts

Subwallets

Webhooks

On-ramp

Add Deposit Filter

Example

Headers

Body

Response

Error responses

Authorizations

Headers

Body

Response

​Example

​Headers

​Body

​Response

​Error responses

Authorizations

Headers

Body

Response

Example

Headers

Body

Response

Error responses