Withdraw funds
Mirrors GraphQL withdrawFunds. Requires HMAC signing. MFA session verification from JWT is not available via API key; verified is passed as false (withdrawals that require MFA may return an error — use the main app after MFA when required).
Authorizations
Headers
Optional. Replaying the same key for the same user returns the cached result without a second withdrawal.
HMAC-SHA256 signature: HMAC-SHA256(secretKey, timestamp + METHOD + path + body). Required for API-key authenticated requests (JWT/OAuth session auth is exempt).
Request timestamp in epoch milliseconds. Required with x-signature for API-key auth. Rejected if drift exceeds 5 minutes.
Body
OpenAPI: McpWalletOperationBodyDto. toAddress is required for withdrawal.