DELETE /api/v1/orders

Cancel all orders

Cancel all orders.

operationId: cancelAllOrdersV1 · CCXT method: cancelAllOrders · Rate-limit class: trading

Declared server differs from the callable one. This path declares its own servers base of https://exchange.nexus.xyz, without the /api/exchange mount the document default carries. Measured 2026-09-02, the override is not routed — https://exchange.nexus.xyz/api/v1/orders returns 404 while the gateway form in the sample below is routed. A client generated from this contract will aim at the override; pin the gateway base until the per-network hosts are live. See Networks.

Authentication: hmacAuth.

Charged to the cancel budget, which is separate from the order budget that submission and amend draw on (x-nexus-rate-limit-class: trading names the class both belong to, not the bucket). A key that has spent its entire submission allowance can still cancel: exhausting one never refuses the other. It is a separate bucket rather than an exemption, so cancelling in a tight loop can still 429 — with bucket: cancel, the only refusal that means your cancel channel itself is saturated. See "Rate limits" for the full model.

Parameters

Name	In	Type	Required	Default	Description
market_id	query	string	No	—	Cancel only orders on this market

Responses

Status	Body	Meaning
200	— (no schema declared)	Cancelled orders returned
401	— (no schema declared)	—
429	— (no schema declared)	—

Example

cURL

curl -X DELETE 'https://exchange.nexus.xyz/api/exchange/api/v1/orders' \
  -H 'X-API-Key: nx_7f3a1b...' \
  -H 'X-Timestamp: 1776033911836' \
  -H 'X-Signature: <hmac-sha256>'

Python

import requests

headers = {
    "X-API-Key": "nx_7f3a1b...",
    "X-Timestamp": "1776033911836",
    "X-Signature": "<hmac-sha256>"
}

response = requests.delete("https://exchange.nexus.xyz/api/exchange/api/v1/orders", headers=headers)
response.raise_for_status()
print(response.json())

TypeScript

const response = await fetch("https://exchange.nexus.xyz/api/exchange/api/v1/orders", {
  method: "DELETE",
  headers: {
    "X-API-Key": "nx_7f3a1b...",
    "X-Timestamp": "1776033911836",
    "X-Signature": "<hmac-sha256>"
  },
});
if (!response.ok) throw new Error(`${response.status} ${await response.text()}`);
console.log(await response.json());

X-Signature is a placeholder: it is derived from this specific request. See Authentication for the canonical string and the HMAC rule.

---

_{Generated from eng/apps/exchange/api/openapi.json (spec 0.9.36). Do not edit by hand — regenerate with python3 product/docs/tools/api-reference/generate.py. Hand-authored context lives in the Guides pages.}