Skip to Content
SubscriptionsRequest signature

Request signature

The Now and Signature fields are sent in the body of every request, not in HTTP headers — the key difference from Callisto.

Formula, rev. 2026.05.01
Signature = LOWERCASE(HMACSHA256(SecretKey, SubscriptionProjectID + Now))
  • The HMAC key is SecretKey; the message is the concatenation of SubscriptionProjectID and Now with no separator.
  • The result is 64 lowercase hex characters.
  • Now is UTC time in yyyyMMddHHmmss format; the allowed drift is ±20 minutes.

The formula above is signature version 2. The platform assigns the version to each project; version 1 — MD5(SubscriptionProjectID + Now + PartnerPassword) — is legacy. The sandbox implements version 2 only.

Signature calculation

PROJECT_ID=2001 SECRET=subs_secret_key NOW=$(date -u +%Y%m%d%H%M%S) SIG=$(printf '%s%s' "$PROJECT_ID" "$NOW" \ | openssl dgst -sha256 -hmac "$SECRET" | awk '{print $NF}')