YieldSeeker API
The documented external subset of the YieldSeeker v1 API.
Authentication
Authorization is required for user-scoped endpoints. Send the complete header value Signature <signature-token>, where the token is the base64-encoded authentication token produced by the wallet authentication flow.
User signatures are Sign-In with Ethereum (SIWE, EIP-4361) messages. Generate a SIWE message for the caller's wallet (domain must be one of YieldSeeker's allowed auth domains, and issued_at must be no more than 30 days old), have the wallet sign it, then base64-encode a JSON object of the form {"message": "<siwe-message>", "signature": "<hex-signature>"} to produce the signature token. A message with an expirationTime in the past, or one issued more than 30 days ago, is rejected. For complete signing and header instructions, see the developer authentication guide. For Vault Agent lifecycle, vault discovery, and user-controlled funding and withdrawal behavior, see the Vault Agent API integration guide.
X-Api-Key is optional. When provided, it identifies the integrator and is validated against the request origin. Omit it for normal first-party v1 requests.
Rate limits
Most operations are rate limited per caller (by user for signed requests, by IP for public ones), across one or more rolling windows. Each operation's description states its current limit; a request over that limit receives a 429 response with a Retry-After header giving the number of seconds to wait before retrying. Limits can change; treat the 429 response and Retry-After header as authoritative, not the documented number alone. See the rate limits guide for the current tiers.