Validate Address
curl --request POST \
--url https://secureapi.tender.cash/v1/api/wallet/validate \
--header 'Content-Type: <content-type>' \
--header 'authorization: <api-key>' \
--header 'x-access-id: <x-access-id>' \
--header 'x-request-id: <x-request-id>' \
--header 'x-timestamp: <x-timestamp>' \
--data '
{
"address": "TABCef...",
"networks": "TRON"
}
'const options = {
method: 'POST',
headers: {
authorization: '<api-key>',
'x-timestamp': '<x-timestamp>',
'x-request-id': '<x-request-id>',
'x-access-id': '<x-access-id>',
'Content-Type': '<content-type>'
},
body: JSON.stringify({address: 'TABCef...', networks: 'TRON'})
};
fetch('https://secureapi.tender.cash/v1/api/wallet/validate', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));import requests
url = "https://secureapi.tender.cash/v1/api/wallet/validate"
payload = {
"address": "TABCef...",
"networks": "TRON"
}
headers = {
"authorization": "<api-key>",
"x-timestamp": "<x-timestamp>",
"x-request-id": "<x-request-id>",
"x-access-id": "<x-access-id>",
"Content-Type": "<content-type>"
}
response = requests.post(url, json=payload, headers=headers)
print(response.text)<?php
$curl = curl_init();
curl_setopt_array($curl, [
CURLOPT_URL => "https://secureapi.tender.cash/v1/api/wallet/validate",
CURLOPT_RETURNTRANSFER => true,
CURLOPT_ENCODING => "",
CURLOPT_MAXREDIRS => 10,
CURLOPT_TIMEOUT => 30,
CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
CURLOPT_CUSTOMREQUEST => "POST",
CURLOPT_POSTFIELDS => json_encode([
'address' => 'TABCef...',
'networks' => 'TRON'
]),
CURLOPT_HTTPHEADER => [
"Content-Type: <content-type>",
"authorization: <api-key>",
"x-access-id: <x-access-id>",
"x-request-id: <x-request-id>",
"x-timestamp: <x-timestamp>"
],
]);
$response = curl_exec($curl);
$err = curl_error($curl);
curl_close($curl);
if ($err) {
echo "cURL Error #:" . $err;
} else {
echo $response;
}{
"status": "success",
"message": "success",
"data": {
"valid": true
}
}{
"status": "error",
"message": "networks should not be null or undefined",
"data": null
}{
"status": "error",
"message": "INVALID_REQUEST_SIGNATURE",
"data": null
}{
"status": "error",
"message": "Too many requests. Max 120 per 60s.",
"data": null
}{
"status": "error",
"message": "Wallet service is temporarily unavailable. Please try again.",
"data": null
}Subwallets
Validate Address
Check whether a string is a valid address on a given network
POST
/
v1
/
api
/
wallet
/
validate
Validate Address
curl --request POST \
--url https://secureapi.tender.cash/v1/api/wallet/validate \
--header 'Content-Type: <content-type>' \
--header 'authorization: <api-key>' \
--header 'x-access-id: <x-access-id>' \
--header 'x-request-id: <x-request-id>' \
--header 'x-timestamp: <x-timestamp>' \
--data '
{
"address": "TABCef...",
"networks": "TRON"
}
'const options = {
method: 'POST',
headers: {
authorization: '<api-key>',
'x-timestamp': '<x-timestamp>',
'x-request-id': '<x-request-id>',
'x-access-id': '<x-access-id>',
'Content-Type': '<content-type>'
},
body: JSON.stringify({address: 'TABCef...', networks: 'TRON'})
};
fetch('https://secureapi.tender.cash/v1/api/wallet/validate', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));import requests
url = "https://secureapi.tender.cash/v1/api/wallet/validate"
payload = {
"address": "TABCef...",
"networks": "TRON"
}
headers = {
"authorization": "<api-key>",
"x-timestamp": "<x-timestamp>",
"x-request-id": "<x-request-id>",
"x-access-id": "<x-access-id>",
"Content-Type": "<content-type>"
}
response = requests.post(url, json=payload, headers=headers)
print(response.text)<?php
$curl = curl_init();
curl_setopt_array($curl, [
CURLOPT_URL => "https://secureapi.tender.cash/v1/api/wallet/validate",
CURLOPT_RETURNTRANSFER => true,
CURLOPT_ENCODING => "",
CURLOPT_MAXREDIRS => 10,
CURLOPT_TIMEOUT => 30,
CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
CURLOPT_CUSTOMREQUEST => "POST",
CURLOPT_POSTFIELDS => json_encode([
'address' => 'TABCef...',
'networks' => 'TRON'
]),
CURLOPT_HTTPHEADER => [
"Content-Type: <content-type>",
"authorization: <api-key>",
"x-access-id: <x-access-id>",
"x-request-id: <x-request-id>",
"x-timestamp: <x-timestamp>"
],
]);
$response = curl_exec($curl);
$err = curl_error($curl);
curl_close($curl);
if ($err) {
echo "cURL Error #:" . $err;
} else {
echo $response;
}{
"status": "success",
"message": "success",
"data": {
"valid": true
}
}{
"status": "error",
"message": "networks should not be null or undefined",
"data": null
}{
"status": "error",
"message": "INVALID_REQUEST_SIGNATURE",
"data": null
}{
"status": "error",
"message": "Too many requests. Max 120 per 60s.",
"data": null
}{
"status": "error",
"message": "Wallet service is temporarily unavailable. Please try again.",
"data": null
}Auth method: Signed (HMAC) — this endpoint requires the full set of signed
headers:
x-access-id, x-request-id, x-timestamp, and an HMAC-SHA256
authorization signature. See Authentication.receiver before you call
Transfer Funds.
Example
const res = await fetch(`${BASE}/wallet/validate`, {
method: 'POST',
headers: makeHeaders(),
body: JSON.stringify({
address: 'TABCef...',
networks: 'TRON',
}),
});
const { data } = await res.json();
// data.valid → true
res = requests.post(
f"{BASE}/wallet/validate",
headers=make_headers(),
json={"address": "TABCef...", "networks": "TRON"},
)
valid = res.json()["data"]["valid"]
Headers
string
required
Base64-encoded HMAC-SHA256 signature of
{"timeStamp":"<x-timestamp>","requestId":"<x-request-id>","accessId":"<x-access-id>"}, signed with your access secret. The request body is not part of the signature.Example: "pV3n0o8kq0lK2mJ8bZ1yq3Yt6hR0cXK9u4mVJ2l9sE0="string
required
ISO 8601 timestamp; must be within 5 minutes of server timeExample:
"2026-10-15T09:45:53.000Z"string
required
A unique UUID v4 per requestExample:
"550e8400-e29b-41d4-a716-446655440000"string
required
Your API access IDExample:
"your-access-id-here"string
required
Example:
"application/json"Body
string
required
The address to validate.Example:
"TABCef..."string | string[]
required
The network to validate against:
EVM, TRON or BTC (the aliases ethereum, eth, trx
and bitcoin are also accepted). Send a single value. An array is accepted for compatibility,
but only a one-element array is validated reliably. Send an empty string to let Tender infer
the network from the address format.Example: "TRON"Response
string
required
Example:
"success"string
required
Example:
"success"object
required
Show data properties
Show data properties
boolean
true if the address is valid on the network.Example: trueError responses
| Condition | Status | Message |
|---|---|---|
address or networks missing | 400 | Validation message, e.g. networks should not be null or undefined |
| Wallet service unavailable | 503 | Wallet service is temporarily unavailable. Please try again. |
Authorizations
Signed (HMAC) authentication. Required headers: x-access-id, x-request-id (UUID v4), x-timestamp (ISO 8601, must be within 5 minutes of server time), and authorization: the Base64 HMAC-SHA256 of the JSON string {"timeStamp":"","requestId":"","accessId":""} (keys in that order, no whitespace) using your access secret. The request body, method and path are not signed. The API key must be linked to an outlet.
Headers
Base64-encoded HMAC-SHA256 signature of {"timeStamp":"","requestId":"","accessId":""}, signed with your access secret. The request body is not part of the signature.
ISO 8601 timestamp; must be within 5 minutes of server time
A unique UUID v4 per request
Body
application/json