Get withdrawal limits
Returns provider-stated withdrawal limits for one payout schema; it does not grant execution authority.
Authorizations
Per-request RFC 9449 DPoP proof signed with ES256. Protected requests use Authorization: DPoP your_access_token_here. Create a new proof for the exact method and normalized target URI, and include the server nonce when challenged.
OAuth 2.0 with RFC 9700 security practices. Discover exact environment endpoints from /.well-known/openid-configuration and /.well-known/oauth-authorization-server, and discover the resource from /.well-known/oauth-protected-resource. Authorization-code clients use PKCE S256, the exact environment resource, nonce with openid, and DPoP binding. Confidential clients also require PAR and private_key_jwt. Access and refresh tokens are sender-constrained with DPoP. purchases:execute is unavailable and omitted from this scope registry.
Headers
Optional caller request identifier. Unsafe values are replaced with a generated UUID.
^[A-Za-z0-9._~-]{8,128}$Query Parameters
Payout schema identifier.
1 - 512Optional withdrawal currency filter.
^[A-Z]{3}$Optional account-type filter.
1 - 128Response
The normalized withdrawal limits.
Current provider-stated withdrawal economics for one payout schema.
Withdrawal currency.
^[A-Z]{3}$Minimum withdrawal amount.
^(?:0|[1-9]\d*)(?:\.\d+)?$Maximum withdrawal amount.
^(?:0|[1-9]\d*)(?:\.\d+)?$Fixed withdrawal fee.
^(?:0|[1-9]\d*)(?:\.\d+)?$Variable fee in basis points.
^(?:0|[1-9]\d*)(?:\.\d+)?$Normalized payout rail.
1 - 128^[a-z0-9]+(?:[._-][a-z0-9]+)*$Memo support and bounds.
Accepted purpose codes.
2561 - 128