List Wallet Transactions

curl --request GET \
  --url https://secureapi.tender.cash/v1/api/wallet/{walletReference}/transactions \
  --header 'authorization: <api-key>' \
  --header 'x-access-id: <x-access-id>' \
  --header 'x-request-id: <x-request-id>' \
  --header 'x-timestamp: <x-timestamp>'

const options = {
  method: 'GET',
  headers: {
    authorization: '<api-key>',
    'x-timestamp': '<x-timestamp>',
    'x-request-id': '<x-request-id>',
    'x-access-id': '<x-access-id>'
  }
};

fetch('https://secureapi.tender.cash/v1/api/wallet/{walletReference}/transactions', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

import requests

url = "https://secureapi.tender.cash/v1/api/wallet/{walletReference}/transactions"

headers = {
    "authorization": "<api-key>",
    "x-timestamp": "<x-timestamp>",
    "x-request-id": "<x-request-id>",
    "x-access-id": "<x-access-id>"
}

response = requests.get(url, headers=headers)

print(response.text)

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://secureapi.tender.cash/v1/api/wallet/{walletReference}/transactions",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "GET",
  CURLOPT_HTTPHEADER => [
    "authorization: <api-key>",
    "x-access-id: <x-access-id>",
    "x-request-id: <x-request-id>",
    "x-timestamp: <x-timestamp>"
  ],
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

{
  "status": "success",
  "message": "success",
  "data": {
    "data": [
      {
        "transaction_type": "inbound",
        "txHash": "<string>",
        "walletReference": "<string>",
        "addressReference": "<string>",
        "symbol": "USDT",
        "amount": "50000000",
        "address": "<string>",
        "network": "EVM",
        "chainId": "ethereum",
        "confirmed": true,
        "blockNumber": 123,
        "createdAt": "2023-11-07T05:31:56Z"
      }
    ],
    "total": 2,
    "pages": 1,
    "page": 1,
    "limit": 20
  }
}

{
  "status": "error",
  "message": "INVALID_REQUEST_SIGNATURE",
  "data": null
}

{
  "status": "error",
  "message": "Too many requests. Max 120 per 60s.",
  "data": null
}

GET

api

wallet

{walletReference}

transactions

List Wallet Transactions

curl --request GET \
  --url https://secureapi.tender.cash/v1/api/wallet/{walletReference}/transactions \
  --header 'authorization: <api-key>' \
  --header 'x-access-id: <x-access-id>' \
  --header 'x-request-id: <x-request-id>' \
  --header 'x-timestamp: <x-timestamp>'

const options = {
  method: 'GET',
  headers: {
    authorization: '<api-key>',
    'x-timestamp': '<x-timestamp>',
    'x-request-id': '<x-request-id>',
    'x-access-id': '<x-access-id>'
  }
};

fetch('https://secureapi.tender.cash/v1/api/wallet/{walletReference}/transactions', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

import requests

url = "https://secureapi.tender.cash/v1/api/wallet/{walletReference}/transactions"

headers = {
    "authorization": "<api-key>",
    "x-timestamp": "<x-timestamp>",
    "x-request-id": "<x-request-id>",
    "x-access-id": "<x-access-id>"
}

response = requests.get(url, headers=headers)

print(response.text)

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://secureapi.tender.cash/v1/api/wallet/{walletReference}/transactions",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "GET",
  CURLOPT_HTTPHEADER => [
    "authorization: <api-key>",
    "x-access-id: <x-access-id>",
    "x-request-id: <x-request-id>",
    "x-timestamp: <x-timestamp>"
  ],
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

{
  "status": "success",
  "message": "success",
  "data": {
    "data": [
      {
        "transaction_type": "inbound",
        "txHash": "<string>",
        "walletReference": "<string>",
        "addressReference": "<string>",
        "symbol": "USDT",
        "amount": "50000000",
        "address": "<string>",
        "network": "EVM",
        "chainId": "ethereum",
        "confirmed": true,
        "blockNumber": 123,
        "createdAt": "2023-11-07T05:31:56Z"
      }
    ],
    "total": 2,
    "pages": 1,
    "page": 1,
    "limit": 20
  }
}

{
  "status": "error",
  "message": "INVALID_REQUEST_SIGNATURE",
  "data": null
}

{
  "status": "error",
  "message": "Too many requests. Max 120 per 60s.",
  "data": null
}

Auth method: Signed (HMAC) — this endpoint requires the full set of signed headers: x-access-id, x-request-id, x-timestamp, and an HMAC-SHA256 authorization signature. See Authentication.

Returns one wallet’s deposits (inbound) and transfers (outbound) merged into a single list, newest first. Pagination fields are nested inside data, next to the inner data array.

Amounts use different units. Inbound amount is in the token’s smallest unit (for example 50000000 for 50 USDT, which has 6 decimals; the deposit webhook carries decimals). Outbound amount is in human-readable units, as you sent it to Transfer Funds.

Example

const res = await fetch(`${BASE}/wallet/acme-user-8821/transactions?page=1&limit=20`, {
  headers: makeHeaders(),
});

const { data } = await res.json();
const { data: txs, total, pages, page, limit } = data;
for (const tx of txs) {
  if (tx.transaction_type === 'inbound') {
    // deposit: tx.amount is in base units
  } else {
    // transfer: tx.status is pending | confirmed | failed
  }
}

res = requests.get(
    f"{BASE}/wallet/acme-user-8821/transactions",
    headers=make_headers(),
    params={"page": 1, "limit": 20},
)
page = res.json()["data"]
txs, total = page["data"], page["total"]

Headers

string

required

Base64-encoded HMAC-SHA256 signature of {"timeStamp":"<x-timestamp>","requestId":"<x-request-id>","accessId":"<x-access-id>"}, signed with your access secret. The request body is not part of the signature.Example: "pV3n0o8kq0lK2mJ8bZ1yq3Yt6hR0cXK9u4mVJ2l9sE0="

string

required

ISO 8601 timestamp; must be within 5 minutes of server timeExample: "2026-10-15T09:45:53.000Z"

string

required

A unique UUID v4 per requestExample: "550e8400-e29b-41d4-a716-446655440000"

string

required

Your API access IDExample: "your-access-id-here"

Path Parameters

string

required

The wallet’s reference.Example: "acme-user-8821"

Query Parameters

integer

Page number, starting at 1. Defaults to 1.Example: 1

integer

Transactions per page, from 1 to 100. Defaults to 20.Example: 20

Response

string

required

Example: "success"

string

required

Example: "success"

object

required

Show data properties

array

Transactions on this page, newest first. An unknown wallet reference, or one that belongs to another merchant, returns an empty array.

Show inbound transaction

string

"inbound"

string

Example: "0x5e8d..."

string

Example: "acme-user-8821"

string | null

Example: "acme-user-8821-slot-2"

string

Example: "USDT"

string

Amount in the token’s smallest unit.Example: "50000000"

string

The receiving address.Example: "0x1a2b3c..."

string

Network of the receiving address, as stored on the address (for example EVM).Example: "EVM"

string

The chain the deposit arrived on.Example: "ethereum"

boolean

Whether the deposit had reached its required confirmations when last reported.Example: true

integer

Example: 21034567

string

Example: "2026-10-15T09:00:00.000Z"

Show outbound transaction

string

"outbound"

string

On-chain hash. Empty string for a gasless transfer whose hash isn’t known yet.Example: "7c1e9a..."

string

Example: "acme-user-8821"

string | null

Example: "acme-user-8821-slot-2"

string | null

Example: "USDT"

string | null

Amount in human-readable units.Example: "50"

string | null

Example: "TLq9..."

string | null

Example: "TABCef..."

string

Network type of the transfer, returned as-is (for example tron). Compare case-insensitively.Example: "tron"

string

pending, confirmed or failed.Example: "confirmed"

string

The payment_reference you sent with the transfer.Example: "payout-9922"

integer | null

Example: 66123456

string

Example: "2026-10-15T09:05:00.000Z"

integer

Total number of transactions across all pages.Example: 2

integer

Example: 1

integer

Example: 1

integer

Example: 20

Example response

{
  "status": "success",
  "message": "success",
  "data": {
    "data": [
      {
        "transaction_type": "outbound",
        "txHash": "7c1e9a...",
        "walletReference": "acme-user-8821",
        "addressReference": "acme-user-8821-slot-2",
        "symbol": "USDT",
        "amount": "50",
        "sender": "TLq9...",
        "receiver": "TABCef...",
        "network": "tron",
        "status": "confirmed",
        "paymentReference": "payout-9922",
        "blockNumber": 66123456,
        "createdAt": "2026-10-15T09:05:00.000Z"
      },
      {
        "transaction_type": "inbound",
        "txHash": "5e8d...",
        "walletReference": "acme-user-8821",
        "addressReference": "acme-user-8821-slot-2",
        "symbol": "USDT",
        "amount": "50000000",
        "address": "TLq9...",
        "network": "TRON",
        "chainId": "tron",
        "confirmed": true,
        "blockNumber": 66120001,
        "createdAt": "2026-10-15T09:00:00.000Z"
      }
    ],
    "total": 2,
    "pages": 1,
    "page": 1,
    "limit": 20
  }
}

Authorizations

authorization

string

header

required

Signed (HMAC) authentication. Required headers: x-access-id, x-request-id (UUID v4), x-timestamp (ISO 8601, must be within 5 minutes of server time), and authorization: the Base64 HMAC-SHA256 of the JSON string {"timeStamp":"","requestId":"","accessId":""} (keys in that order, no whitespace) using your access secret. The request body, method and path are not signed. The API key must be linked to an outlet.

Headers

authorization

string

required

Base64-encoded HMAC-SHA256 signature of {"timeStamp":"","requestId":"","accessId":""}, signed with your access secret. The request body is not part of the signature.

x-timestamp

string<date-time>

required

ISO 8601 timestamp; must be within 5 minutes of server time

x-request-id

string<uuid>

required

A unique UUID v4 per request

x-access-id

string

required

Path Parameters

walletReference

string

required

The wallet's reference.

Query Parameters

page

integer

default:1

Page number, starting at 1. Defaults to 1.

Required range: x >= 1

limit

integer

default:20

Items per page, 1-100. Defaults to 20.

Required range: 1 <= x <= 100

Response

Transactions

status

string

required

Example:

"success"

message

string

required

Example:

"success"

data

object

required

Show child attributes

Payment

System

Agents

Conversions

Payouts

Subwallets

Webhooks

On-ramp

List Wallet Transactions

Example

Headers

Path Parameters

Query Parameters

Response

Example response

Authorizations

Headers

Path Parameters

Query Parameters

Response

​Example

​Headers

​Path Parameters

​Query Parameters

​Response

​Example response

Authorizations

Headers

Path Parameters

Query Parameters

Response

Example

Headers

Path Parameters

Query Parameters

Response

Example response