Skip to content
UDX
Esc
↑↓navigate↵open⌘Jpreview

Place an Order

Submits a new order. It matches against the resting book immediately; any unfilled remainder rests per the requested time in force.

POST/orders
Authorization
UDX-Access-KeyAPI key · headerrequired
Opaque API key ID.
UDX-Access-TimestampAPI key · headerrequired
Unix time in milliseconds, within 30 seconds of server time.
UDX-Access-SignatureAPI key · headerrequired
Standard-base64 RSA-PSS/SHA-256 signature with a 32-byte salt. Sign `timestamp + METHOD + path`; for requests with a body, append `hex(SHA256(body))`; append `UDX-Idempotency-Key` when it is present.
or
AuthorizationBearer token (JWT) · headerrequired
Bearer token for an active signed-in UDX user.
Header parameters
UDX-Versionstring
Dated API version (YYYY-MM-DD). Omit to use the oldest supported version. An unknown version returns `400`.
max length 10
UDX-Idempotency-Keystring
Optional client-generated key that makes a mutation safe to retry. Reuse it only for a byte-identical retry. When present, it is included in the request signature; omitting it disables UDX idempotency for that request.
min length 1 · max length 255
Request body
requiredapplication/json
tickerTickerrequired
A market identifier (ticker) — a human-meaningful natural-key symbol, not a UUID. Unique per market.
min length 1 · max length 128
client_order_idClientIdrequired
A client-supplied correlation identifier: 1–40 URL-safe ASCII characters (letters, digits, hyphen, period, underscore, tilde), unique per resource within the caller's account — reusing one is rejected even after the original resource closes. Distinct from the exchange-assigned public id and from the idempotency key.
min length 1 · max length 40 · matches ^[A-Za-z0-9._~-]+$
sideOrderSiderequired
Order side. `buy` buys YES, `sell` sells YES — everything is priced from the YES side. (Selling YES is economically equivalent to buying NO at 1 − price.)
Allowed:buysell
quantityobjectrequired
Order quantity, in contracts.
Show properties
object
priceobjectrequired
Limit price in YES price space, in dollars, regardless of side.
Show properties
object
time_in_forceTimeInForcerequired
How long the order stays active when placing it: gtc (good till canceled), ioc (immediate or cancel), fok (fill or kill), or day (good until the end of the trading day).
Allowed:gtciocfokday
post_onlyboolean
If true, the order only ever rests (adds liquidity); an order that would cross the book on placement is rejected. Incompatible with ioc/fok.
default: false
account_idobject
Account to place the order under, by its UDX-assigned public entity identifier. Required for an unrestricted API key; an account-restricted key uses its bound account, and an account_id that names a different account is rejected.
Show properties
object
self_trade_prevention_typeobject
Self-trade-prevention policy. Defaults to `placed`.
Show properties
object
Responses
201The placed order.
orderOrderrequired
An order on the exchange, priced from the YES side.
Show properties
order_idobjectrequired
Exchange-assigned order identifier.
Show properties
object
client_order_idobject
The caller's correlation id for this order.
Show properties
object
tickerTickerrequired
A market identifier (ticker) — a human-meaningful natural-key symbol, not a UUID. Unique per market.
min length 1 · max length 128
sideOrderSiderequired
Order side. `buy` buys YES, `sell` sells YES — everything is priced from the YES side. (Selling YES is economically equivalent to buying NO at 1 − price.)
Allowed:buysell
quantityobjectrequired
Order quantity, in contracts.
Show properties
object
priceobjectrequired
Limit price in YES price space, in dollars, regardless of side.
Show properties
object
time_in_forceOrderTimeInForcerequired
The time-in-force reported on an order. Adds `unknown` to the placement values (`TimeInForce`): the exchange may report it for an order that reached the account through another channel with a time-in-force UDX does not model, so the order stays readable. `unknown` is read-only and is never accepted when placing an order.
Allowed:gtciocfokdayunknown
statusOrderStatusrequired
An order's status. `rejected` means the exchange rejected it; `canceled` covers user cancels and expiries.
Allowed:restingpartially_filledfilledcanceledrejected
filled_quantityobjectrequired
The quantity of the order that has been filled.
Show properties
object
remaining_quantityobjectrequired
The quantity of the order that is currently resting.
Show properties
object
average_fill_priceobject
Volume-weighted average fill price. Present when filled_quantity > 0.
Show properties
object
fees_paidobjectrequired
Total fees (commission) collected on the order so far, in dollars.
Show properties
object
created_atstring<date-time>required
When the order was created. UDX timestamps use RFC 3339; requests require an explicit UTC offset and zero to six fractional digits; responses use UTC with exactly six fractional digits.
max length 40
400The request doesn't conform to this spec.
typestring<uri-reference>
A stable URI identifying the error's general category. Usually absent (equivalent to "about:blank" per the RFC); documented rate controls use closed URN values so callers can distinguish same-status retry causes without parsing localized prose.
max length 2048
titlestringrequired
A localized, human-readable summary of the error category. Stable for a given status code and resolved language — clients must not use it as a machine-readable discriminator.
max length 40
statusintegerrequired
The HTTP status code, repeated from the response itself.
detailstring
A localized, human-readable explanation specific to this occurrence. Clients must not parse it for machine-readable information.
max length 500
instancestring<uri-reference>
An identifier for this specific occurrence, so it can be correlated with server-side logs if you need to report it.
max length 100
401No valid credential was provided.
typestring<uri-reference>
A stable URI identifying the error's general category. Usually absent (equivalent to "about:blank" per the RFC); documented rate controls use closed URN values so callers can distinguish same-status retry causes without parsing localized prose.
max length 2048
titlestringrequired
A localized, human-readable summary of the error category. Stable for a given status code and resolved language — clients must not use it as a machine-readable discriminator.
max length 40
statusintegerrequired
The HTTP status code, repeated from the response itself.
detailstring
A localized, human-readable explanation specific to this occurrence. Clients must not parse it for machine-readable information.
max length 500
instancestring<uri-reference>
An identifier for this specific occurrence, so it can be correlated with server-side logs if you need to report it.
max length 100
403The credential lacks the `trade` scope.
typestring<uri-reference>
A stable URI identifying the error's general category. Usually absent (equivalent to "about:blank" per the RFC); documented rate controls use closed URN values so callers can distinguish same-status retry causes without parsing localized prose.
max length 2048
titlestringrequired
A localized, human-readable summary of the error category. Stable for a given status code and resolved language — clients must not use it as a machine-readable discriminator.
max length 40
statusintegerrequired
The HTTP status code, repeated from the response itself.
detailstring
A localized, human-readable explanation specific to this occurrence. Clients must not parse it for machine-readable information.
max length 500
instancestring<uri-reference>
An identifier for this specific occurrence, so it can be correlated with server-side logs if you need to report it.
max length 100
409This key is still in use or its response cannot be replayed. The mutation may have run; check `detail` before retrying.
typestring<uri-reference>
A stable URI identifying the error's general category. Usually absent (equivalent to "about:blank" per the RFC); documented rate controls use closed URN values so callers can distinguish same-status retry causes without parsing localized prose.
max length 2048
titlestringrequired
A localized, human-readable summary of the error category. Stable for a given status code and resolved language — clients must not use it as a machine-readable discriminator.
max length 40
statusintegerrequired
The HTTP status code, repeated from the response itself.
detailstring
A localized, human-readable explanation specific to this occurrence. Clients must not parse it for machine-readable information.
max length 500
instancestring<uri-reference>
An identifier for this specific occurrence, so it can be correlated with server-side logs if you need to report it.
max length 100
422This key belongs to a different request.
typestring<uri-reference>
A stable URI identifying the error's general category. Usually absent (equivalent to "about:blank" per the RFC); documented rate controls use closed URN values so callers can distinguish same-status retry causes without parsing localized prose.
max length 2048
titlestringrequired
A localized, human-readable summary of the error category. Stable for a given status code and resolved language — clients must not use it as a machine-readable discriminator.
max length 40
statusintegerrequired
The HTTP status code, repeated from the response itself.
detailstring
A localized, human-readable explanation specific to this occurrence. Clients must not parse it for machine-readable information.
max length 500
instancestring<uri-reference>
An identifier for this specific occurrence, so it can be correlated with server-side logs if you need to report it.
max length 100
429The Member's request rate is exhausted. Wait for `Retry-After`.
typestring<uri-reference>
A stable URI identifying the error's general category. Usually absent (equivalent to "about:blank" per the RFC); documented rate controls use closed URN values so callers can distinguish same-status retry causes without parsing localized prose.
max length 2048
titlestringrequired
A localized, human-readable summary of the error category. Stable for a given status code and resolved language — clients must not use it as a machine-readable discriminator.
max length 40
statusintegerrequired
The HTTP status code, repeated from the response itself.
detailstring
A localized, human-readable explanation specific to this occurrence. Clients must not parse it for machine-readable information.
max length 500
instancestring<uri-reference>
An identifier for this specific occurrence, so it can be correlated with server-side logs if you need to report it.
max length 100
500Something went wrong on UDX's side.
typestring<uri-reference>
A stable URI identifying the error's general category. Usually absent (equivalent to "about:blank" per the RFC); documented rate controls use closed URN values so callers can distinguish same-status retry causes without parsing localized prose.
max length 2048
titlestringrequired
A localized, human-readable summary of the error category. Stable for a given status code and resolved language — clients must not use it as a machine-readable discriminator.
max length 40
statusintegerrequired
The HTTP status code, repeated from the response itself.
detailstring
A localized, human-readable explanation specific to this occurrence. Clients must not parse it for machine-readable information.
max length 500
instancestring<uri-reference>
An identifier for this specific occurrence, so it can be correlated with server-side logs if you need to report it.
max length 100
503Request admission is unavailable. Retry later.
typestring<uri-reference>
A stable URI identifying the error's general category. Usually absent (equivalent to "about:blank" per the RFC); documented rate controls use closed URN values so callers can distinguish same-status retry causes without parsing localized prose.
max length 2048
titlestringrequired
A localized, human-readable summary of the error category. Stable for a given status code and resolved language — clients must not use it as a machine-readable discriminator.
max length 40
statusintegerrequired
The HTTP status code, repeated from the response itself.
detailstring
A localized, human-readable explanation specific to this occurrence. Clients must not parse it for machine-readable information.
max length 500
instancestring<uri-reference>
An identifier for this specific occurrence, so it can be correlated with server-side logs if you need to report it.
max length 100
Request
curl -X POST "https://{hostname}/orders" \
  -H "UDX-Access-Key: API_KEY_ID" \
  -H "UDX-Access-Timestamp: UNIX_MILLISECONDS" \
  -H "UDX-Access-Signature: BASE64_SIGNATURE" \
  -H "Content-Type: application/json" \
  -d '{
  "ticker": "UDX-EXAMPLE-MARKET",
  "client_order_id": "order-20260804-001",
  "side": "buy",
  "quantity": "100",
  "price": "0.55",
  "time_in_force": "gtc"
}'
Response
{
  "order": {
    "order_id": "BK9BZNTK8022",
    "client_order_id": "order-20260804-001",
    "ticker": "UDX-EXAMPLE-MARKET",
    "side": "buy",
    "quantity": "100",
    "price": "0.55",
    "time_in_force": "gtc",
    "status": "resting",
    "filled_quantity": "0",
    "remaining_quantity": "100",
    "fees_paid": "0",
    "created_at": "2026-01-01T00:00:00.000000Z"
  }
}