Authorizations
Hyperliquid uses a custom signing scheme for authentication.
Required for: All /exchange endpoints
Format: Signature generated using private key + nonce + action data
Headers:
- Authorization: Signature
- Content-Type: application/json
Important Notes:
- Use official SDKs to avoid signing errors
- Nonce must be current timestamp in milliseconds
- Address fields must be lowercase
- Order of fields in msgpack serialization matters
Common Pitfalls:
- Not understanding the two signing schemes
- Trailing zeros on numbers
- Case sensitivity on addresses
- Incorrect field ordering
Body
Any valid Hyperliquid exchange request payload. The entire request body is forwarded to Hyperliquid without modification.
The specific exchange action to perform
Current timestamp in milliseconds
Cryptographic signature for authentication
Optional vault address for subaccount operations