> ## Documentation Index
> Fetch the complete documentation index at: https://docs.limitless.exchange/llms.txt
> Use this file to discover all available pages before exploring further.

# Add Withdrawal Address

<Info>
  Requires **Privy authentication**. Pass the Privy identity token in the `identity` header as `Bearer <token>`. HMAC and API-token auth are not accepted for withdrawal-address allowlist management.
</Info>

Adds a withdrawal destination allowlist entry on the authenticated profile.

* Route: `POST /portfolio/withdrawal-addresses`
* Auth: Privy identity token only

### Request body

| Field     | Type     | Required | Description                               |
| --------- | -------- | -------- | ----------------------------------------- |
| `address` | `string` | Yes      | Destination wallet address to allowlist.  |
| `label`   | `string` | No       | Human-readable label for the destination. |

### Example

```bash theme={null}
curl -X POST "https://api.limitless.exchange/portfolio/withdrawal-addresses" \
  -H "content-type: application/json" \
  -H "identity: Bearer <privy_identity_token>" \
  -d '{
    "address": "0x0F3262730c909408042F9Da345a916dc0e1F9787",
    "label": "treasury"
  }'
```

### Response

```json theme={null}
{
  "id": "34a98cd5-e924-427d-be55-50d96dd44f3c",
  "profileId": 294,
  "destinationAddress": "0x0F3262730c909408042F9Da345a916dc0e1F9787",
  "label": "treasury",
  "createdAt": "2026-05-04T12:43:51.721Z",
  "deletedAt": null
}
```

### Notes

* The allowlist entry belongs to the authenticated profile.
* For partner `onBehalfOf` withdrawals, allowlist the destination on the authenticated partner profile, not on the child profile.
* This endpoint does not accept HMAC/scoped API-token auth.