Authentication

All REST endpoints require a Bearer token. The same token also authenticates the WebSocket feed.

Tokens are issued per partner during onboarding. To rotate or revoke a token, contact your integration manager.

Sending the token

Include the token in the Authorization header on every request:

curl -H "Authorization: Bearer $VERTEX_TOKEN" \
  https://trading.vertex-api.com/api/v2/sports

Unauthorized responses

Requests without a valid token return 401 Unauthorized with an ErrorResponse body. The most common cases:

Condition	message
Authorization header missing, or not prefixed with Bearer	Missing or invalid Authorization header
Token is empty	Token is required
Token is not recognised by any verifier	No verifier could authenticate the token
Token is recognised but rejected (expired, revoked, signature invalid)	Verifier-specific message

Example response:

{
  "status": 401,
  "message": "Missing or invalid Authorization header",
  "data": null
}