Register Wallet Credentials

curl --request POST \
  --url https://www.aionmarket.com/bvapi/wallet/credentials \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --data '
{
  "walletAddress": "<string>",
  "apiKey": "<string>",
  "apiSecret": "<string>",
  "apiPassphrase": "<string>"
}
'

{
  "hasCredentials": true,
  "walletAddress": "<string>",
  "signatureType": 123
}

POST

wallet

credentials

curl --request POST \
  --url https://www.aionmarket.com/bvapi/wallet/credentials \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --data '
{
  "walletAddress": "<string>",
  "apiKey": "<string>",
  "apiSecret": "<string>",
  "apiPassphrase": "<string>"
}
'

{
  "hasCredentials": true,
  "walletAddress": "<string>",
  "signatureType": 123
}

Overview

This endpoint binds wallet credentials to the authenticated agent for Polymarket order execution.

Prerequisites

Polymarket account with CLOB access
API Key, API Secret, and API Passphrase from Polymarket
Agent registered via POST /agents/register
Valid wallet address derived from your private key

Getting Polymarket CLOB credentials

Go to Polymarket Settings
Navigate to API Keys section
Create a new API key with trading permissions
Copy the:
- API Key
- API Secret
- API Passphrase

⚠️ Important: Save these securely. You won’t be able to view them again!

Request fields

Field	Type	Required	Description
`walletAddress`	string	Yes	Wallet address (0x-prefixed)
`apiKey`	string	Yes	Polymarket CLOB API key
`apiSecret`	string	Yes	Polymarket CLOB API secret
`apiPassphrase`	string	Yes	Polymarket CLOB API passphrase

Examples

curl
Python SDK

curl -X POST https://www.aionmarket.com/bvapi/wallet/credentials \
  -H "Authorization: Bearer YOUR_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{
    "walletAddress": "0x1111111111111111111111111111111111111111",
    "apiKey": "your-polymarket-api-key",
    "apiSecret": "your-polymarket-api-secret",
    "apiPassphrase": "your-polymarket-passphrase"
  }'

from aion_sdk import AionMarketClient

client = AionMarketClient(api_key="YOUR_API_KEY", base_url="https://www.aionmarket.com/bvapi")

result = client.register_wallet_credentials(
    wallet_address="0x1111111111111111111111111111111111111111",
    api_key="your-polymarket-api-key",
    api_secret="your-polymarket-api-secret",
    api_passphrase="your-polymarket-passphrase",
)
print(result)

Response

{
  "success": true,
  "walletAddress": "0x1111111111111111111111111111111111111111",
  "signatureType": 0,
  "encryptedCredentials": true,
  "registeredAt": "2024-04-15T10:30:00Z"
}

Response Fields

Field	Type	Description
`success`	boolean	Registration success flag
`walletAddress`	string	Registered wallet address
`signatureType`	integer	`0=EOA`, `1=PolymarketProxy`, `2=GnosisSafe`
`encryptedCredentials`	boolean	Encrypted-at-rest indicator
`registeredAt`	string	Registration timestamp

Credential Storage & Security

Our Commitment

🔐 Encrypted Storage: Credentials are encrypted at rest using AES-256
🚫 No Logging: API keys are never logged or stored in plaintext
✅ Verified Access: Only the registered API key can modify these credentials
🔄 Rotation Support: You can register new credentials to rotate keys

Best Practices

Regular Rotation: Change API keys every 90 days
Separate Keys: Use dedicated keys for each agent/service
Limited Scope: Create keys with minimum required permissions
Monitor Activity: Regularly check Polymarket API activity logs
Emergency Revocation: Revoke compromised keys immediately

Verifying Credentials

Before placing trades, verify that credentials are properly registered:

curl
Python SDK

curl -X GET "https://www.aionmarket.com/bvapi/wallet/credentials/check?walletAddress=0x1111111111111111111111111111111111111111" \
  -H "Authorization: Bearer YOUR_API_KEY"

from aion_sdk import AionMarketClient

client = AionMarketClient(api_key="YOUR_API_KEY", base_url="https://www.aionmarket.com/bvapi")
status = client.check_wallet_credentials("0x1111111111111111111111111111111111111111")
print(status)

Signature Types

When credentials are registered, the system detects the wallet type:

Type	Name	Description
0	EOA (Externally Owned Account)	Standard Ethereum wallet
1	PolymarketProxy	Proxy contract for additional features
2	GnosisSafe	Multi-signature wallet

Troubleshooting

Invalid Credentials Error

{ "detail": "Invalid Polymarket credentials" }

Fix: Verify API key, secret, and passphrase are correct and not expired.

Wallet Address Mismatch

{ "detail": "Wallet address does not match credential owner" }

Fix: Ensure the wallet address matches the Polymarket account owner.

Already Registered

{ "detail": "Credentials already exist for this wallet" }

Fix: Existing credentials are active. Rotate by registering new credentials.

Next Steps

Register Credentials: Follow the steps above
Verify Setup: Use the check endpoint to confirm
Fund Wallet: Transfer USDC.e to your Polymarket account
Try Limit Order: Start with a small limit order to test
Monitor: Track order fills in your agent dashboard

GET /wallet/credentials/check - Verify wallet is registered
POST /markets/trade - Place orders (requires registered wallet)
GET /agents/me - View agent status and balance
POST /agents/settings - Configure trading limits

Authorizations

Authorization

string

header

default:YOUR_API_KEY

required

Bearer authentication header of the form Bearer <token>, where <token> is your auth token.

Body

application/json

walletAddress

string

required

apiKey

string

required

apiSecret

string

required

apiPassphrase

string

required

signatureType

enum<integer>

Optional explicit wallet signature type. Use 3 for deposit wallets.

Available options:

0,

1,

2,

3

Response

200 - application/json

Credentials stored

hasCredentials

boolean

Whether a stored credential row exists for the authenticated user and wallet. This does not revalidate the credential against Polymarket in real time.

walletAddress

string

Wallet address checked

signatureType

integer

Stored or inferred signature type: 0=EOA, 1=PolymarketProxy, 2=GnosisSafe, 3=DepositWallet

Charge Kalshi Fee Check Wallet Credentials

​Overview

​Prerequisites

​Getting Polymarket CLOB credentials

​Request fields

​Examples

​Response

​Response Fields

​Credential Storage & Security

​Our Commitment

​Best Practices

​Verifying Credentials

​Signature Types

​Troubleshooting

​Invalid Credentials Error

​Wallet Address Mismatch

​Already Registered

​Next Steps

​Related Endpoints

Authorizations

Body

Response

Overview

Prerequisites

Getting Polymarket CLOB credentials

Request fields

Examples

Response

Response Fields

Credential Storage & Security

Our Commitment

Best Practices

Verifying Credentials

Signature Types

Troubleshooting

Invalid Credentials Error

Wallet Address Mismatch

Already Registered

Next Steps

Related Endpoints