> ## Documentation Index > Fetch the complete documentation index at: https://docs.0xmonaco.com/llms.txt > Use this file to discover all available pages before exploring further. # Cancel all orders after a timeout > Cancel all orders after a timeout. Arm, refresh or disarm a dead man's switch. If the timer is not refreshed before it runs out, the exchange cancels your resting orders with terminalReason CANCEL_ALL_AFTER: GTC and other resting limit orders, triggered TP/SL legs resting on the book, and TWAP parents that are not reduce-only. Untriggered TP/SL and other conditional orders on a position, reduce-only TWAPs and RFQ quotes stay; legs still pending on a cancelled entry order end with it, as on any cancel. Call it again before the deadline to push the deadline out; send timeoutMs 0 to disarm. One timer covers the whole account, or one trading pair when tradingPairId is set; the two scopes are separate timers. A timer that fires is spent, so arm it again to keep the switch on. Works during a maintenance pause, like cancels. ## OpenAPI ````yaml /proto-openapi/api/openapi.yaml post /api/v1/orders/cancel-all-after openapi: 3.0.3 info: title: Monaco Protocol API description: REST API for the Monaco Protocol hybrid CLOB exchange. version: 1.0.0 servers: - url: https://apimonaco.xyz description: Production (Sei mainnet) security: [] tags: - name: AccountsService - name: AnalyticsService - name: ApplicationsService - name: AuthService - name: BuildercodeRewardsService - name: ComplianceService - name: CopyTradingService - name: DelegatedAgentsService - name: FaucetService - name: FeesService - name: HealthService - name: ManagedMarketsService description: |- Wallet-authenticated maker assignments. The signed session must match both configured maker user and application. Owner IDs are process fences, never auth. Only wallet sessions are supported; delegated-agent sessions receive 403. - name: MarginAccountsService description: |- Current public isolated-margin semantics: - a user has one parent margin account per application scope - opening orders create or reuse isolated position buckets under that parent - parent account creation is handled internally by margin workflows - name: MarketService - name: OrderbookService - name: OrdersService - name: PositionsService description: |- Current public isolated-margin semantics: - positions link to a parent margin account and, when applicable, a bucket id - opening orders create or reuse isolated position buckets under the parent - users can open another isolated position by reusing the parent account with a different market bucket - name: PulseService - name: RfqService - name: SweeperService - name: TraderCodeService - name: TradesService - name: WithdrawalsService paths: /api/v1/orders/cancel-all-after: post: tags: - OrdersService - Orders summary: Cancel all orders after a timeout description: |- Cancel all orders after a timeout. Arm, refresh or disarm a dead man's switch. If the timer is not refreshed before it runs out, the exchange cancels your resting orders with terminalReason CANCEL_ALL_AFTER: GTC and other resting limit orders, triggered TP/SL legs resting on the book, and TWAP parents that are not reduce-only. Untriggered TP/SL and other conditional orders on a position, reduce-only TWAPs and RFQ quotes stay; legs still pending on a cancelled entry order end with it, as on any cancel. Call it again before the deadline to push the deadline out; send timeoutMs 0 to disarm. One timer covers the whole account, or one trading pair when tradingPairId is set; the two scopes are separate timers. A timer that fires is spent, so arm it again to keep the switch on. Works during a maintenance pause, like cancels. operationId: cancel_all_after requestBody: content: application/json: schema: $ref: '#/components/schemas/CancelAllAfterRequest' required: true responses: '200': description: OK content: application/json: schema: $ref: '#/components/schemas/CancelAllAfterResponse' '400': description: >- timeoutMs is neither 0 nor between 5000 and 900000, or tradingPairId is not a valid UUID or not a listed trading pair '401': description: Authentication required '403': description: >- A delegated session must set tradingPairId and hold cancel permission on that pair '429': description: >- Risk-reduction rate limit exceeded — each call costs one risk-reduction item (per account and account family); retry after the interval in details.retryAfter '500': description: Internal server error or matching engine failure '503': description: >- With error code OVERLOADED the matching engine refused the call before applying it, so nothing changed; retry. Any other 503 is a transport failure whose outcome is unknown: retry, and read the deadline from the response that succeeds security: - monacoSignature: [] - monacoHttpSignature: [] components: schemas: CancelAllAfterRequest: required: - timeoutMs type: object properties: timeoutMs: example: 30000 maximum: 900000 type: integer description: >- Milliseconds from now until your resting orders are cancelled: 0 disarms, otherwise 5000 to 900000 (5 seconds to 15 minutes). Each call replaces the previous deadline. format: uint32 tradingPairId: example: 456e7890-e12b-12d3-a456-426614174000 type: string description: >- Scope the timer to one trading pair. Omitted, the timer covers every market. Required for a delegated session. format: uuid nullable: true additionalProperties: false CancelAllAfterResponse: required: - timeoutMs type: object properties: cancelAt: example: '2026-06-01T00:00:30Z' type: string description: >- When the exchange cancels your resting orders unless you call again first (ISO 8601). Absent when the timer was disarmed. nullable: true timeoutMs: example: 30000 type: integer description: The timeout that was set, echoed back; 0 when disarmed format: uint32 tradingPairId: example: 456e7890-e12b-12d3-a456-426614174000 type: string description: The trading pair the timer covers; absent for the account-wide timer format: uuid nullable: true securitySchemes: monacoSignature: type: apiKey description: >- Ed25519 session-key request signing. Every authenticated request carries three headers: `X-Monaco-PublicKey` (64-char lowercase-hex session public key), `X-Monaco-Timestamp` (Unix milliseconds, within 30s of server time), and `X-Monaco-Signature` (hex ed25519 signature). The signature is over `METHOD\npath?query\ntimestamp_ms\nSHA256_hex(body)`, where the body hash is the SHA-256 of the empty byte string when there is no body. Obtain the session keypair from `POST /api/v1/auth/challenge` followed by `POST /api/v1/auth/verify`. name: X-Monaco-Signature in: header monacoHttpSignature: type: apiKey description: >- RFC 9421 Ed25519 session-key request signatures. Send Signature-Input, Signature, and Content-Digest together; never combine them with X-Monaco-* credentials. The monaco signature covers @method, @path, @query, and content-digest in that order, with created (Unix seconds within 30s of server time), keyid (registered lowercase-hex session public key), and alg=ed25519 parameters. Content-Digest uses RFC 9530 sha-256 over the exact body bytes, including the empty body. Query coverage retains ordering and percent encoding. Timestamp freshness does not reject repeated identical requests; use endpoint idempotency where supported. Existing legacy signing remains supported during server-first migration; SDK RFC 9421 signing is opt-in. See https://docs.0xmonaco.com/reference/http-message-signatures for the complete profile and trust model. name: Signature in: header ```` This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.