Create Whitelist

curl -X POST "https://api.trusset.org/lending-external-securities-v2/api/access-lists" \
  -H "X-API-Key: trusset_your_key_here" \
  -H "Content-Type: application/json" \
  -d '{
    "name": "Depositors Q4",
    "purpose": "DEPOSITOR",
    "managers": ["0x4e91a7c05d3b62f18a0c94e7db2358f1c60a4e93"],
    "members": ["0x6a6cba16dad34f7ea7ecbcdbf050f8146b942d6b"]
  }'

const base = 'https://api.trusset.org/lending-external-securities-v2/api/access-lists';
const headers = { 'X-API-Key': 'trusset_your_key_here', 'Content-Type': 'application/json' };

const build = await fetch(base, {
  method: 'POST',
  headers,
  body: JSON.stringify({ name: 'Depositors Q4', purpose: 'DEPOSITOR', members: [investorWallet] })
});
const { data } = await build.json();

const tx = await ownerWallet.sendTransaction(data.transaction);
await tx.wait();

const confirmed = await fetch(`${base}/confirm-create`, {
  method: 'POST',
  headers,
  body: JSON.stringify({ ...data.confirmWith.body, txHash: tx.hash })
});
const { data: created } = await confirmed.json();
const listId = created.list.id;

{
  "success": true,
  "data": {
    "action": "SIGN_TRANSACTION",
    "transaction": {
      "to": "0x2C9E47a1B05d83F6e4A17C3B92d0F68E5a4C1b37",
      "data": "0x...",
      "chainId": 11155111,
      "value": "0"
    },
    "functionName": "createAccessList",
    "description": "Create the whitelist Depositors Q4, owned by 0x1234F9a07C6b53D81e2A4f70C9B385D6014a7E52",
    "ownerWallet": "0x1234f9a07c6b53d81e2a4f70c9b385d6014a7e52",
    "list": {
      "name": "Depositors Q4",
      "purpose": "DEPOSITOR",
      "owner": "0x1234f9a07c6b53d81e2a4f70c9b385d6014a7e52",
      "managers": ["0x4e91a7c05d3b62f18a0c94e7db2358f1c60a4e93"],
      "members": ["0x6a6cba16dad34f7ea7ecbcdbf050f8146b942d6b"]
    },
    "notes": [
      "Only the owner adds or removes managers; the owner and every manager list and remove wallets.",
      "A whitelist installed as a gate admits exactly the wallets it lists, and a removal takes effect on chain only once it is signed.",
      "A whitelist never satisfies the professional-borrower floor of a Market-priced market and cannot gate a market that reads the older single register."
    ],
    "warnings": [],
    "confirmWith": {
      "endpoint": "confirm-create",
      "txHash": true,
      "body": { "name": "Depositors Q4", "purpose": "DEPOSITOR" },
      "field": "txHash",
      "path": "POST /lending-external-securities-v2/api/access-lists/confirm-create"
    }
  }
}

{
  "success": false,
  "error": {
    "code": "UNAUTHORIZED_SIGNER",
    "message": "A whitelist is owned by the wallet that creates it, and that wallet must be a verified wallet of this instance."
  }
}