Accept Quote

post

https://dma-api.zerocap.com/v2/orders/accept_quote

Accept a fixed-price DMA trading quote and create a FOK order. The quote must be accepted before its expires_at time and can only be accepted once. Errors are returned with error.code 500 and one of the following descriptions: "quote not found"; "quote expired" (status is expired); "quote does not belong to current account"; "quote status is " (the quote was already accepted, rejected, expired or failed); "quote is being accepted" (another request is accepting the same quote).

Recent Requests

Time	Status	User Agent
Retrieving recent requests…

Loading…

Body Params

quote_id

string

required

length ≤ 128

^[A-Za-z0-9_.:-]*$

Quote ID returned by request_for_firm_quote. At most 128 characters; only letters, numbers, '_', '.', ':' and '-' are allowed (HTTP 422 otherwise).

client_order_id

string

Optional. At most 50 characters; only letters, numbers, '-' and '_' are allowed (error 10607 if too long, 10608 if it contains other characters). If omitted, the client_order_id sent with request_for_firm_quote is used.

Headers

api-key

string

required

Your API key, sent in the api-key request header.

signature

string

required

Lowercase hex-encoded HMAC-SHA256 of the timestamp header value, using your API secret as the key: hex(HMAC_SHA256(api_secret, timestamp)). Only the timestamp is signed; the request path and body are not part of the signature. An invalid signature returns HTTP 401.

timestamp

string

required

A Unix timestamp in seconds, sent with every request and used as the signed message. Your timestamp must be within 30 seconds of the API server time, otherwise the request is considered expired and rejected with HTTP 408. We recommend using the Get Time endpoint to query the API server time if you believe there is a time difference between your server and the API servers.

Responses

200Successful Response

400Business error, the body carries the reason in error.description.

401Unauthorized: missing or unknown api-key, bad signature, or the request IP is not in the key's IP allow-list.

408The timestamp header differs from server time by more than 30 seconds.

422Validation Error

429Rate limit exceeded: 50 requests per second per endpoint per client IP.