Get payout

GET https://api.cobrex.com/payout/o-2b72159c-8495-472f-a7f9-7d49721864bb

Signing

For GET without a body the canonical string has two lines only:

full_URL
timestamp_in_seconds

So x-signature = hex HMAC-SHA256(URL + "\n" + timestamp, api_secret) — no body segment.

vs POST /payout

Creating a payout (POST) signs the JSON body. Fetching (GET) signs URL + timestamp only.

Headers (either variant)

Merchant

Header	Value
x-mid	Merchant ID
x-timestamp	Seconds
x-signature	HMAC of two lines (above)

User

Header	Value
x-uid	User ID
x-timestamp	Seconds
x-signature	HMAC of two lines

Response

Payout object — see model.