Skip to main content
GET
Get Address Balance
Auth method: Signed (HMAC) — this endpoint requires the full set of signed headers: x-access-id, x-request-id, x-timestamp, and an HMAC-SHA256 authorization signature. See Authentication.
Returns the on-chain balances of an address. Without currency, you get every balance Tender tracks for the address. With currency, you get a single number. Balances are cached for 180 seconds, so a deposit or transfer can take up to three minutes to show here. Use the deposit and transfer webhooks for real-time updates.

Example

Headers

string
required
Base64-encoded HMAC-SHA256 signature of {"timeStamp":"<x-timestamp>","requestId":"<x-request-id>","accessId":"<x-access-id>"}, signed with your access secret. The request body is not part of the signature.Example: "pV3n0o8kq0lK2mJ8bZ1yq3Yt6hR0cXK9u4mVJ2l9sE0="
string
required
ISO 8601 timestamp; must be within 5 minutes of server timeExample: "2026-10-15T09:45:53.000Z"
string
required
A unique UUID v4 per requestExample: "550e8400-e29b-41d4-a716-446655440000"
string
required
Your API access IDExample: "your-access-id-here"

Path Parameters

string
required
The blockchain address to query.Example: "0x4f2a9b..."

Query Parameters

string
required
Chain the address is on: ethereum, tron or bitcoin.Example: "ethereum"
string
Optional currency symbol, matched case-insensitively (for example USDT, usdc, ETH). It must be supported on chain. Omit it to get all balances.Example: "USDT"

Response

string
required
Example: "success"
string
required
Example: "success"
object
required
The shape depends on whether you sent currency.

Error responses

This endpoint has a tighter limit of 30 requests per minute, in addition to the subwallet limit. See Rate limits.

Authorizations

authorization
string
header
required

Signed (HMAC) authentication. Required headers: x-access-id, x-request-id (UUID v4), x-timestamp (ISO 8601, must be within 5 minutes of server time), and authorization: the Base64 HMAC-SHA256 of the JSON string {"timeStamp":"","requestId":"","accessId":""} (keys in that order, no whitespace) using your access secret. The request body, method and path are not signed. The API key must be linked to an outlet.

Headers

authorization
string
required

Base64-encoded HMAC-SHA256 signature of {"timeStamp":"","requestId":"","accessId":""}, signed with your access secret. The request body is not part of the signature.

x-timestamp
string<date-time>
required

ISO 8601 timestamp; must be within 5 minutes of server time

x-request-id
string<uuid>
required

A unique UUID v4 per request

x-access-id
string
required

Path Parameters

address
string
required

Blockchain address.

Query Parameters

chain
enum<string>
required
Available options:
ethereum,
tron,
bitcoin
currency
string

Currency symbol, case-insensitive. Omit for all balances.

Response

Balance

status
string
required
Example:

"success"

message
string
required
Example:

"success"

data
All balances (no currency) · object
required