Home/Deposit

Create Deposit Order

Last Updated: 2026-05-29

HTTP Request

POST/v1/deposit/order

Auth: Signed API key required

Permissions: Deposit

Signed Location: JSON body

Content-Type: application/json

Create a pending fiat deposit and attach previously uploaded files.

Headers

Parameter Name	Required	Type	Notes
X-MBX-APIKEY	true	string	Provisioned ACCESS_ID. `x-access-id` is also accepted by the backend, but `X-MBX-APIKEY` is recommended.

Request Body

Parameter Name	Required	Type	Notes
currency	true	string	CreditCurrency enum value.
amount	true	string	Decimal string. Single-currency order — no price/rate.
reference_id	false	string	Reference provided by the user.
remark	false	string	Additional remark.
file_ids	true	string	JSON array string, for example `"[123,124]"`.
timestamp	true	int64	Request timestamp in milliseconds. Microseconds are also accepted and normalized by the server.
recvWindow	false	integer	Optional receive window. Default `5000`, maximum `60000`.
signature	true	string	HMAC-SHA256 signature of the signed payload. `signature` itself is not part of the payload string being signed.

Notes

file_ids must reference existing files.
The maximum number of files is limited by MAX_CREDIT_FILE (10).

Request Example

curl -X POST 'https://<host>/v1/deposit/order' \
  -H 'X-MBX-APIKEY: <ACCESS_ID>' \
  -H 'Content-Type: application/json' \
  -d '{
    "currency":"NGN",
    "amount":"1000",
    "reference_id":"ref-001",
    "remark":"manual deposit",
    "file_ids":"[123,124]",
    "timestamp":1717200000000,
    "recvWindow":5000,
    "signature":"<SIGNATURE>"
  }'

Parameter Name

Required

Type

Notes

X-MBX-APIKEY

true

string

Provisioned ACCESS_ID. x-access-id is also accepted by the backend, but X-MBX-APIKEY is recommended.

Request Body

Parameter Name	Required	Type	Notes
currency	true	string	CreditCurrency enum value.
amount	true	string	Decimal string. Single-currency order — no price/rate.
reference_id	false	string	Reference provided by the user.
remark	false	string	Additional remark.
file_ids	true	string	JSON array string, for example `"[123,124]"`.
timestamp	true	int64	Request timestamp in milliseconds. Microseconds are also accepted and normalized by the server.
recvWindow	false	integer	Optional receive window. Default `5000`, maximum `60000`.
signature	true	string	HMAC-SHA256 signature of the signed payload. `signature` itself is not part of the payload string being signed.

Request Example

curl -X POST 'https://<host>/v1/deposit/order' \
  -H 'X-MBX-APIKEY: <ACCESS_ID>' \
  -H 'Content-Type: application/json' \
  -d '{
    "currency":"NGN",
    "amount":"1000",
    "reference_id":"ref-001",
    "remark":"manual deposit",
    "file_ids":"[123,124]",
    "timestamp":1717200000000,
    "recvWindow":5000,
    "signature":"<SIGNATURE>"
  }'