Skip to main content
POST
Create a wallet-authorized account session

Headers

Origin
enum<string>
required

Must match the approved origin in the signed consent.

Available options:
https://vibechain.com,
https://www.vibechain.com,
https://vibe.market,
https://www.vibe.market

Body

application/json

Sign the exact endpoint-specific message. A syntactically valid signature alone is not authorization.

address
string
required
Pattern: ^0x[0-9a-fA-F]{40}$
nonce
string<uuid>
required

Fresh UUID v4, never reused.

expires
integer<int64>
required

Unix milliseconds; future and no more than five minutes from the server clock.

signature
string
required
Pattern: ^0x[0-9a-fA-F]{130}$
origin
enum<string>
required
Available options:
https://vibechain.com,
https://www.vibechain.com,
https://vibe.market,
https://www.vibe.market

Response

Successful response.

address
string
required
Pattern: ^0x[0-9a-fA-F]{40}$
expiresAt
integer<int64>
required
token
string

Direct backend only. Never log or expose this credential; the website proxy stores it in an HttpOnly cookie and strips it from JSON.

Pattern: ^[a-f0-9]{64}$