Mint a one-time signing challenge for a wallet.

Returns a short text the wallet must sign to prove ownership. The signed result is then submitted to POST /v1/auth/keys to mint a long-lived API key.

POST /v1/auth/challenge

Error

A valid request URL is required to generate request examples

200

{
  "challenge": "<string>",
  "expiresAt": "<string>"
}

Authorizations

Authorization · string · header · required

API key obtained from POST /v1/auth/keys.

Body

application/json

address · string · required

Alephium address (base58, optional :N group suffix).

Required string length: 30 - 80

Pattern: ^[123456789ABCDEFGHJKLMNPQRSTUVWXYZabcdefghijkmnopqrstuvwxyz:]+$

Response

200

application/json

Default Response

challenge · string · required

Plaintext message to sign with the wallet (signMessage with hasher="alephium").

expiresAt · string · required

ISO-8601 expiry (5 minutes from issuance).