# Create an API account. The response contains your secret key, once: it goes to olympex.env, never to the terminal.
# Needs curl, jq and OLYMPEX_PASSPHRASE in the environment. To set it without echo:
#   read -rs OLYMPEX_PASSPHRASE && export OLYMPEX_PASSPHRASE
# jq builds the body from the environment, so the passphrase is JSON-escaped and never appears in a command line.
( umask 077
  OLYMPEX_ACCOUNT_NAME="acme-trading-desk" jq -n '{name: env.OLYMPEX_ACCOUNT_NAME, password: env.OLYMPEX_PASSPHRASE}' |
    curl -sS -X POST "https://api-rest.olympex.io/api/v1/accounts" \
      -H "content-type: application/json" \
      --data-binary @- -o olympex-account.json )
# Move the two values to a new olympex.env, readable only by you, and print the API key ID.
if jq -e .success olympex-account.json >/dev/null; then
  ( umask 077; set -C
    jq -r '"OLYMPEX_API_KEY_ID=\(.data.apiKey)\nOLYMPEX_SECRET_KEY=\(.data.secretKey)"' olympex-account.json > olympex.env ) &&
    rm olympex-account.json && grep '^OLYMPEX_API_KEY_ID=' olympex.env
else
  cat olympex-account.json; echo
fi

// Node.js 18+. Run once, from a machine you control: every successful call creates a real account.
import { existsSync, writeFileSync } from "node:fs";

const ENV_FILE = "olympex.env";
const passphrase = process.env.OLYMPEX_PASSPHRASE ?? ""; // from your password manager
if (passphrase.length < 24 || !/^[\x20-\x7E]+$/.test(passphrase) || passphrase.trim() !== passphrase) {
  throw new Error("Set OLYMPEX_PASSPHRASE to 24+ printable ASCII characters with no leading or trailing spaces.");
}
// Check before creating the account: the secret key can't be fetched again if the write fails.
if (existsSync(ENV_FILE)) throw new Error(`${ENV_FILE} already exists. Move it before you create another account.`);

const response = await fetch("https://api-rest.olympex.io/api/v1/accounts", {
  method: "POST",
  headers: { "content-type": "application/json" },
  body: JSON.stringify({ name: "acme-trading-desk", password: passphrase }),
  signal: AbortSignal.timeout(35_000),
});
const payload = await response.json();
if (!response.ok || payload.success !== true) {
  throw new Error(`${response.status} ${payload.error?.code ?? ""} ${payload.error?.message ?? payload.message ?? ""}`.trim());
}

// The secret key is shown once. Keep it out of logs: write it to a file only you can read,
// then move it into your secrets manager.
const { apiKey, secretKey } = payload.data as { apiKey: string; secretKey: string };
writeFileSync(ENV_FILE, `OLYMPEX_API_KEY_ID=${apiKey}\nOLYMPEX_SECRET_KEY=${secretKey}\n`, { mode: 0o600, flag: "wx" });
console.log(`Created API key ID ${apiKey}. Secret key written to ${ENV_FILE}.`);

# Python 3.8+. Run once, from a machine you control: every successful call creates a real account.
import os
import re

import requests

ENV_FILE = "olympex.env"
passphrase = os.environ.get("OLYMPEX_PASSPHRASE", "")  # from your password manager
if len(passphrase) < 24 or not re.fullmatch(r"[\x20-\x7e]+", passphrase) or passphrase.strip() != passphrase:
    raise SystemExit("Set OLYMPEX_PASSPHRASE to 24+ printable ASCII characters with no leading or trailing spaces.")
# Check before creating the account: the secret key can't be fetched again if the write fails.
if os.path.exists(ENV_FILE):
    raise SystemExit(f"{ENV_FILE} already exists. Move it before you create another account.")

response = requests.post(
    "https://api-rest.olympex.io/api/v1/accounts",
    json={"name": "acme-trading-desk", "password": passphrase},
    timeout=35,
)
payload = response.json()
if not response.ok or payload.get("success") is not True:
    error = payload.get("error") or {}
    raise SystemExit(f"{response.status_code} {error.get('code', '')} {error.get('message') or payload.get('message', '')}")

# The secret key is shown once. Keep it out of logs: write it to a file only you can read,
# then move it into your secrets manager.
data = payload["data"]
fd = os.open(ENV_FILE, os.O_WRONLY | os.O_CREAT | os.O_EXCL, 0o600)
with os.fdopen(fd, "w") as env_file:
    env_file.write(f"OLYMPEX_API_KEY_ID={data['apiKey']}\nOLYMPEX_SECRET_KEY={data['secretKey']}\n")
print(f"Created API key ID {data['apiKey']}. Secret key written to {ENV_FILE}.")

{
  "success": true,
  "data": {
    "message": "ACCOUNT_CREATED",
    "apiKey": "00000000-0000-4000-8000-000000000000",
    "secretKey": "aol_DocsTestVector_notARealSecret_000000000"
  },
  "meta": {
    "requestId": "ENMcEjviIAMEMYg=",
    "version": "v1"
  }
}

{
  "success": false,
  "error": {
    "code": "VALIDATION_ERROR",
    "message": "Invalid request body",
    "details": [
      {
        "field": "name",
        "message": "name is required"
      },
      {
        "field": "password",
        "message": "password is required"
      }
    ]
  },
  "meta": {
    "requestId": "ENUm9iggoAMEMhw=",
    "version": "v1"
  }
}