Skip to main content
GET
Get application configuration

Authorizations

X-Monaco-Signature
string
header
required

Ed25519 session-key request signing. Every authenticated request carries three headers: X-Monaco-PublicKey (64-char lowercase-hex session public key), X-Monaco-Timestamp (Unix milliseconds, within 30s of server time), and X-Monaco-Signature (hex ed25519 signature). The signature is over METHOD\npath?query\ntimestamp_ms\nSHA256_hex(body), where the body hash is the SHA-256 of the empty byte string when there is no body. Obtain the session keypair from POST /api/v1/auth/challenge followed by POST /api/v1/auth/verify.

Response

OK

id
string | null

Application UUID

Example:

"123e4567-e89b-12d3-a456-426614174000"

name
string | null

Application display name

Example:

"Monaco"

allowedOrigins
string[] | null

List of allowed origins for CORS

Minimum string length: 1
webhookUrl
string | null

Webhook URL for notifications

vaultContractAddress
string | null

Vault contract address for this application

Example:

"0xA393B04EA77354570Ace35869F5EbB1e380DC232"

clientId
string | null

Application client ID, embedded in on-chain deposit calls

Example:

"6fe0da813f1a4adcbe675d52ca530a43"