Cancel a batch of orders by id (max 100)
Cancel up to 100 orders by id in one request. Each id is resolved against the authenticated wallet; ids that are unknown, belong to another wallet, or are already terminal come back under notCancelled (no existence leak). Duplicate ids are de-duplicated. The whole batch runs as one PG transaction — a single advisory-lock acquire and one COMMIT — with the matcher fan-out fired off the response path, so latency is bounded by a single round-trip rather than N. Idempotent: re-cancelling a terminal order reports already_terminal. Rate limited at 5 req/sec per wallet. No KYC / deposit-tier gating — cancellation is always permitted.
Authorizations
Partner / integrator key — format ps_live_<keyId>_<secret>. Issued by PredictStreet ops on request; never self-service. Never ship to a browser. multi_wallet partners must additionally send X-User-Wallet: 0x<40-hex> on every authenticated request to declare the acting wallet. See the API keys guide for scope taxonomy, partner kinds, rate limits, and rotation procedure.
Headers
Required for multi_wallet partners on every authenticated request; ignored for single_wallet. Declares the acting end-user wallet for this request — drives KYC checks, balances/positions/orders attribution, rate-limit buckets, and audit. Lower-cased server-side. Missing on a multi_wallet key → 401 api_key_user_wallet_required; malformed → 401 api_key_user_wallet_invalid. The on-chain CTFExchange/Vault contracts still verify EIP-712 signer ↔ vault binding, so loosening API-layer attribution is safe by construction.
^0x[a-fA-F0-9]{40}$"0x742d35Cc6634C0532925a3b844Bc9e7595f0bEb3"
Body
1–100 server-side order ids (UUIDs). Duplicates are de-duplicated server-side.
1 - 100 elementsResponse
Per-id outcome split into cancelled and notCancelled.
Ids of the orders that transitioned to CANCELLED.
Map of orderId → reason for every id that was not cancelled. Reasons: not_found (unknown id, or an order owned by another wallet — no existence leak), already_terminal (already CANCELLED / FILLED / REJECTED / EXPIRED — idempotent), lock_invariant (a per-order balance-lock invariant tripped; the rest of the batch is unaffected), unknown (transient failure — safe to retry).