Add Withdrawal Address

Requires Privy authentication. Pass the Privy identity token in the identity header as Bearer <token>. HMAC and API-token auth are not accepted for withdrawal-address allowlist management.

Adds a withdrawal destination allowlist entry on the authenticated profile.

Route: POST /portfolio/withdrawal-addresses
Auth: Privy identity token only

Request body

Field	Type	Required	Description
`address`	`string`	Yes	Destination wallet address to allowlist.
`label`	`string`	No	Human-readable label for the destination.

Example

curl -X POST "https://api.limitless.exchange/portfolio/withdrawal-addresses" \
  -H "content-type: application/json" \
  -H "identity: Bearer <privy_identity_token>" \
  -d '{
    "address": "0x0F3262730c909408042F9Da345a916dc0e1F9787",
    "label": "treasury"
  }'

Response

{
  "id": "34a98cd5-e924-427d-be55-50d96dd44f3c",
  "profileId": 294,
  "destinationAddress": "0x0F3262730c909408042F9Da345a916dc0e1F9787",
  "label": "treasury",
  "createdAt": "2026-05-04T12:43:51.721Z",
  "deletedAt": null
}

Notes

The allowlist entry belongs to the authenticated profile.
For partner onBehalfOf withdrawals, allowlist the destination on the authenticated partner profile, not on the child profile.
This endpoint does not accept HMAC/scoped API-token auth.

Withdraw From Server Wallet Delete Withdrawal Address

⌘I

Overview

System

Authentication

Markets

Trading

Portfolio

Market Pages & Navigation

API Tokens

Partner Accounts

Public Portfolio

Request body

Example

Response

Notes

​Request body

​Example

​Response

​Notes

Request body

Example

Response

Notes