API Tokens

import { Client } from '@limitless-exchange/sdk';

const client = new Client({
  baseURL: 'https://api.limitless.exchange',
});

// Use client.apiTokens.*

const capabilities = await client.apiTokens.getCapabilities(identityToken);

console.log(capabilities.tokenManagementEnabled); // boolean
console.log(capabilities.allowedScopes);          // e.g. ['trading', 'account_creation', 'delegated_signing']

import { ScopeTrading, ScopeAccountCreation, ScopeDelegatedSigning } from '@limitless-exchange/sdk';

const derived = await client.apiTokens.deriveToken(identityToken, {
  label: 'production-bot',
  scopes: [ScopeTrading, ScopeAccountCreation, ScopeDelegatedSigning],
});

// derived.tokenId  — used as lmts-api-key header
// derived.secret   — base64-encoded HMAC secret (one-time)
// derived.scopes   — granted scopes
// derived.profile  — { id, account }

const scopedClient = new Client({
  baseURL: 'https://api.limitless.exchange',
  hmacCredentials: {
    tokenId: derived.tokenId,
    secret: derived.secret,
  },
});

const tokens = await scopedClient.apiTokens.listTokens();

for (const token of tokens) {
  console.log(token.tokenId, token.label, token.scopes, token.lastUsedAt);
}

const message = await scopedClient.apiTokens.revokeToken(derived.tokenId);