curl --request GET \
--url https://api-uat.dimetrades.com/api/partner/wallet-instructions \
--header 'X-API-Key: <api-key>' \
--header 'X-API-Secret: <api-key>'import requests
url = "https://api-uat.dimetrades.com/api/partner/wallet-instructions"
headers = {
"X-API-Key": "<api-key>",
"X-API-Secret": "<api-key>"
}
response = requests.get(url, headers=headers)
print(response.text)const options = {
method: 'GET',
headers: {'X-API-Key': '<api-key>', 'X-API-Secret': '<api-key>'}
};
fetch('https://api-uat.dimetrades.com/api/partner/wallet-instructions', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));<?php
$curl = curl_init();
curl_setopt_array($curl, [
CURLOPT_URL => "https://api-uat.dimetrades.com/api/partner/wallet-instructions",
CURLOPT_RETURNTRANSFER => true,
CURLOPT_ENCODING => "",
CURLOPT_MAXREDIRS => 10,
CURLOPT_TIMEOUT => 30,
CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
CURLOPT_CUSTOMREQUEST => "GET",
CURLOPT_HTTPHEADER => [
"X-API-Key: <api-key>",
"X-API-Secret: <api-key>"
],
]);
$response = curl_exec($curl);
$err = curl_error($curl);
curl_close($curl);
if ($err) {
echo "cURL Error #:" . $err;
} else {
echo $response;
}package main
import (
"fmt"
"net/http"
"io"
)
func main() {
url := "https://api-uat.dimetrades.com/api/partner/wallet-instructions"
req, _ := http.NewRequest("GET", url, nil)
req.Header.Add("X-API-Key", "<api-key>")
req.Header.Add("X-API-Secret", "<api-key>")
res, _ := http.DefaultClient.Do(req)
defer res.Body.Close()
body, _ := io.ReadAll(res.Body)
fmt.Println(string(body))
}HttpResponse<String> response = Unirest.get("https://api-uat.dimetrades.com/api/partner/wallet-instructions")
.header("X-API-Key", "<api-key>")
.header("X-API-Secret", "<api-key>")
.asString();require 'uri'
require 'net/http'
url = URI("https://api-uat.dimetrades.com/api/partner/wallet-instructions")
http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true
request = Net::HTTP::Get.new(url)
request["X-API-Key"] = '<api-key>'
request["X-API-Secret"] = '<api-key>'
response = http.request(request)
puts response.read_body{
"data": {
"instructions": [
{
"webhookEventId": "54b1fca5-697c-4b22-937f-e78abb9bb42f",
"eventType": "wallet.debit",
"status": "delivered",
"deliveredAt": "2026-08-10T17:51:35.000Z",
"createdAt": "2026-08-10T17:51:34.103Z",
"externalCustomerId": "crown-test-0192",
"orderId": "019f2d10-aaaa-733c-b8af-42a3620ee999",
"clientOrderId": "partner-order-8f3e2a1b",
"tradeId": "019f2cfb-a1b2-733c-9d4e-42a3620ee901",
"amountCents": 600,
"reason": "trade_fill"
}
],
"nextCursor": "2026-08-10T17:51:34.103Z",
"hasMore": false
},
"errors": []
}{
"data": {},
"errors": {
"statusCode": 400,
"error": "RequestValidationError",
"message": "email must match format \"email\"",
"code": 1002,
"explanation": "The request input did not pass validation checks."
}
}{
"data": {},
"errors": {
"statusCode": 401,
"error": "BrandUnauthorized",
"message": "Invalid brand credentials",
"code": 17001,
"explanation": "The X-API-Key / X-API-Secret pair is missing or does not match an active credential."
}
}{
"data": {},
"errors": {
"statusCode": 403,
"error": "BrandInactive",
"message": "Brand is suspended",
"code": 17002,
"explanation": "This brand has been suspended and can no longer make partner API calls."
}
}{
"data": {},
"errors": {
"statusCode": 500,
"error": "InternalError",
"message": "Internal Server Error",
"code": 1003,
"explanation": "An unexpected error occurred on the server, Please try again later."
}
}List wallet instructions issued to your brand
Returns every wallet.debit / wallet.credit webhook instruction issued to your brand, across all your customers, newest customer activity included as it happens — the brand-wide view of exactly what DimeTrades has told you to debit or credit, for reconciling your own ledger and recovering any instruction whose webhook delivery failed.
Each row is a webhook event: webhookEventId is the same id delivered in X-DimeTrades-Event-Id for that event (and in the webhook envelope’s own id), so a row here and a webhook you received (or missed) are the same instruction — use this to confirm delivery or recover one that never arrived. status and deliveredAt reflect that delivery’s own state, not a re-derivation.
Server-to-server only. All /partner/* endpoints are authenticated with your brand credentials — X-API-Key + X-API-Secret headers — not with an end-user bearer token.
Paging with since
Results are ordered oldest-first. Pass the createdAt of the last row you’ve already processed as since to resume from there; the response’s nextCursor is exactly that value for your next call. hasMore: true means another page is waiting — keep paging with nextCursor until it’s false. Omit since to start from the beginning of your brand’s history.
curl --request GET \
--url https://api-uat.dimetrades.com/api/partner/wallet-instructions \
--header 'X-API-Key: <api-key>' \
--header 'X-API-Secret: <api-key>'import requests
url = "https://api-uat.dimetrades.com/api/partner/wallet-instructions"
headers = {
"X-API-Key": "<api-key>",
"X-API-Secret": "<api-key>"
}
response = requests.get(url, headers=headers)
print(response.text)const options = {
method: 'GET',
headers: {'X-API-Key': '<api-key>', 'X-API-Secret': '<api-key>'}
};
fetch('https://api-uat.dimetrades.com/api/partner/wallet-instructions', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));<?php
$curl = curl_init();
curl_setopt_array($curl, [
CURLOPT_URL => "https://api-uat.dimetrades.com/api/partner/wallet-instructions",
CURLOPT_RETURNTRANSFER => true,
CURLOPT_ENCODING => "",
CURLOPT_MAXREDIRS => 10,
CURLOPT_TIMEOUT => 30,
CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
CURLOPT_CUSTOMREQUEST => "GET",
CURLOPT_HTTPHEADER => [
"X-API-Key: <api-key>",
"X-API-Secret: <api-key>"
],
]);
$response = curl_exec($curl);
$err = curl_error($curl);
curl_close($curl);
if ($err) {
echo "cURL Error #:" . $err;
} else {
echo $response;
}package main
import (
"fmt"
"net/http"
"io"
)
func main() {
url := "https://api-uat.dimetrades.com/api/partner/wallet-instructions"
req, _ := http.NewRequest("GET", url, nil)
req.Header.Add("X-API-Key", "<api-key>")
req.Header.Add("X-API-Secret", "<api-key>")
res, _ := http.DefaultClient.Do(req)
defer res.Body.Close()
body, _ := io.ReadAll(res.Body)
fmt.Println(string(body))
}HttpResponse<String> response = Unirest.get("https://api-uat.dimetrades.com/api/partner/wallet-instructions")
.header("X-API-Key", "<api-key>")
.header("X-API-Secret", "<api-key>")
.asString();require 'uri'
require 'net/http'
url = URI("https://api-uat.dimetrades.com/api/partner/wallet-instructions")
http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true
request = Net::HTTP::Get.new(url)
request["X-API-Key"] = '<api-key>'
request["X-API-Secret"] = '<api-key>'
response = http.request(request)
puts response.read_body{
"data": {
"instructions": [
{
"webhookEventId": "54b1fca5-697c-4b22-937f-e78abb9bb42f",
"eventType": "wallet.debit",
"status": "delivered",
"deliveredAt": "2026-08-10T17:51:35.000Z",
"createdAt": "2026-08-10T17:51:34.103Z",
"externalCustomerId": "crown-test-0192",
"orderId": "019f2d10-aaaa-733c-b8af-42a3620ee999",
"clientOrderId": "partner-order-8f3e2a1b",
"tradeId": "019f2cfb-a1b2-733c-9d4e-42a3620ee901",
"amountCents": 600,
"reason": "trade_fill"
}
],
"nextCursor": "2026-08-10T17:51:34.103Z",
"hasMore": false
},
"errors": []
}{
"data": {},
"errors": {
"statusCode": 400,
"error": "RequestValidationError",
"message": "email must match format \"email\"",
"code": 1002,
"explanation": "The request input did not pass validation checks."
}
}{
"data": {},
"errors": {
"statusCode": 401,
"error": "BrandUnauthorized",
"message": "Invalid brand credentials",
"code": 17001,
"explanation": "The X-API-Key / X-API-Secret pair is missing or does not match an active credential."
}
}{
"data": {},
"errors": {
"statusCode": 403,
"error": "BrandInactive",
"message": "Brand is suspended",
"code": 17002,
"explanation": "This brand has been suspended and can no longer make partner API calls."
}
}{
"data": {},
"errors": {
"statusCode": 500,
"error": "InternalError",
"message": "Internal Server Error",
"code": 1003,
"explanation": "An unexpected error occurred on the server, Please try again later."
}
}Authorizations
ISV / partner credential — public half. Required on every request.
Identifies the integration partner (ISV) making the call. Issued by Dime
Trades when the ISV is onboarded and sent on every /partner/* endpoint:
X-API-Key: dt_pk_live_7f3c9a2e5b18
- On the two partner endpoints that create accounts or issue tokens (
POST /partner/customers,POST /partner/customers/login), it is accompanied byX-API-Secretand is the only authentication — there is no user token yet. - On every other partner endpoint it is sent alongside the user's
Authorization: Bearer <token>: the API key says which platform is calling, the bearer token says which user it is calling for.
Credentials are scoped to one or more brands; using a key with a brandId outside that scope returns 403. Staging and production keys are separate.
The key identifies your platform — treat it as a backend credential.
ISV / partner credential — secret half. Sent on every /partner/* endpoint.
The confidential counterpart to X-API-Key. It is required, together with the key, on every /partner/* endpoint: register, login, refresh-token, logout, kyc, wallet-instructions and the replay endpoints. Outside /partner/* — the ordinary user API, called with a user's bearer token — the key is sent without the secret.
X-API-Key: dt_pk_live_7f3c9a2e5b18
X-API-Secret: dt_sk_live_9d41ba07c6e2f85a3b7c1049de26f8b1
A request to a /partner/* endpoint that has a key without its matching secret is rejected with 401. The secret is shown once at issue time and stored only as a hash on our side — if it is lost or exposed, rotate the pair from the partner console rather than asking for a copy. Never ship it in a browser or mobile client: anyone holding it can mint a token for any of your users.
Query Parameters
Resume cursor — the createdAt of the last row you've already processed (or the previous response's nextCursor). Omit to start from the beginning.
1 <= x <= 500