GET /orders/history
Order history
Order history.
operationId: fetchOrders · CCXT method: fetchOrders · Rate-limit cost: 5
Declared server:
https://api.testnet.nexus.xyz/v1. See Networks.
Authentication: agentAuth, hmacAuth.
Terminal-status order history (filled / cancelled / rejected / expired) for the authenticated account, newest first.
HMAC API key authentication. Send three headers:
X-API-Key: your key ID (e.g.nx_a1b2c3...)X-Timestamp: current time in unix millisecondsX-Signature:hex(hmac_sha256(secret, timestamp + "\n" + METHOD + "\n" + path + "\n" + query + "\n" + sha256_hex(body)))
Timestamp must be within 30 seconds of server time.
The key is network-scoped; the signature is not. The canonical string above has no network component, so the same signed request is byte-identical on every host. What stops a testnet key from authenticating against mainnet is that the key does not exist in that host's key store — sign only for the host that minted the key, and never replay a signed payload against another network. Presented to the wrong host, a key is refused with the same opaque 401 as an unknown key and must not be retried there. See “API keys are bound to one network” in the API description.
Records per page (default 100, capped at the 500-record retained window). Bounds one page, not a cursor walk — see “Cursor pagination”.
100Opaque pagination cursor returned in the previous response's X-Next-Cursor header. Omit to fetch the first page. Treat the token as opaque: its format is not part of the contract and may change. Cursors do not expire. A malformed (unparseable) cursor is not an error — the server serves the first page. A well-formed cursor whose exact position has since been evicted from the retained window is not reset to the first page: pagination resumes at the nearest surviving boundary, so a resumed response is a continuation, not a fresh first page. A cursor is not bound to an operation or an account, so use it only with the operation that issued it. See “Cursor pagination” in the API description for how a walk terminates and what it does and does not guarantee.
Order history, newest first.
Authentication failed. All 401 responses return the same opaque body to prevent information leakage. A credential minted on a different network is one of the causes it hides — by design, so that a key id cannot be probed for existence on another network. Do not retry it against another host.
GET /v1/orders/history HTTP/1.1
Host: api.testnet.nexus.xyz
X-API-Key: YOUR_API_KEY
Accept: */*
[
{
"id": "123e4567-e89b-12d3-a456-426614174000",
"symbol": "text",
"side": "Buy",
"type": "text",
"price": "text",
"amount": "text",
"filled": "text",
"remaining": "text",
"status": "Filled",
"cancellation_reason": null,
"timestamp": 1,
"datetime": "2026-01-01T00:00:00.000Z",
"lastUpdateTimestamp": 1,
"clientOrderId": null,
"timeInForce": null,
"postOnly": null,
"reduceOnly": null,
"stopPrice": "text",
"triggerPrice": "text",
"stopLossPrice": "text",
"takeProfitPrice": "text",
"average": "text",
"cost": "text",
"fee": "text",
"lastTradeTimestamp": 1,
"fill_totals_error": null
}
]Test it cannot sign this request. X-Signature is an HMAC computed per call: see Authentication, or use an SDK.
API version 0.9.122
Last updated

