Revoke Agent

The revokeAgent action immediately invalidates a previously authorized agent wallet. Once revoked, the agent can no longer submit orders, cancellations, or any other signed operations on behalf of your master account. The quota slot previously occupied by the agent is freed and can be reused. Only the master account that originally approved the agent can revoke it. To view all currently active agents for your account, query userAgents via POST /info.

Revocation takes effect immediately. Revoking is not limited by account type: an agent bound to any account can be revoked.

Endpoint

POST https://upsidemax.xyz/exchange

Request

All requests must include an ECDSA signature and a millisecond-precision nonce. This request must be signed by the master account.

{
  "action": {
    "type": "revokeAgent",
    "agentAddress": "0xabc0000000000000000000000000000000000001"
  },
  "signature": { "r": "0x...", "s": "0x...", "v": 28 },
  "nonce": 1778859600000
}

Action fields

string

required

type (required) — Fixed value: "revokeAgent".

string

required

agentAddress (required) — The Ethereum address of the agent wallet to revoke. Must match an agent previously approved by your master account.

Response

Success

{
  "status": "ok",
  "response": {
    "type": "revokeAgent",
    "data": { "agentAddress": "0xabc0000000000000000000000000000000000001" }
  }
}

Response fields

string

The address of the agent that was revoked, echoed back for confirmation.

number

Present only when the request is rejected; a non-zero value means nothing was revoked.

string

Present together with errorCode. The rejection reason.

Errors

Rejections

Rejections return HTTP 200 with status: "ok" and an errorCode and errorMessage in data.

Cause	Description
Agent not found	No agent with the given address is registered under your master account.
Not owned by signer	The agent exists but was approved by a different master account; you cannot revoke it.

HTTP errors

HTTP	`code`	Cause
400	`INVALID_PARAM`	A field failed validation; `errors[]` names the field, the `reason`, and the `expected` value. Nothing is executed.
400	`BAD_REQUEST`	Malformed body, or the signer has no registered account.
400	`SYNC_NOT_APPLICABLE`	The envelope carried `sync`. This action always answers synchronously.
400	`DUPLICATE_NONCE`	A request with the same `nonce` from this signer is still in flight.
401	`SIGNATURE_INVALID`	Signature recovery failed or did not match — including a wire JSON that omits `agentAddress`.
429	`RATE_LIMITED`	Too many requests.
503	`DOWNSTREAM_UNAVAILABLE` / `WARMING_UP`	Temporarily unavailable; retry later.
504	`DOWNSTREAM_TIMEOUT`	No result within the waiting window. The agent may already be revoked — check `userAgents` before retrying; see Timeouts and retries.

To authorize a new agent after revoking one, use approveAgent.

Overview

Account

Orders

Margin & Leverage

Conditional Orders

Collateral Transfers

API Wallet

Endpoint

Request

Action fields

Response

Success

Response fields

Errors

Rejections

HTTP errors

​Endpoint

​Request

​Action fields

​Response

​Success

​Response fields

​Errors

​Rejections

​HTTP errors

Endpoint

Request

Action fields

Response

Success

Response fields

Errors

Rejections

HTTP errors