v1

latestOpenAPI 3.1.02026-07-2619047.9 KB

Swap

Build an unsigned swap transaction from a quote.

Visibility modes:

visibility: "public" (default) — pure pass-through to the Jupiter/Metis upstream. The returned transaction is whatever the upstream produces.
visibility: "private" — the server forces Jupiter's output into a program-owned stash ATA (deterministically derived from (userPublicKey, quoteResponse.outputMint)), prepends an idempotent ATA-create, and appends a schedule_private_transfer instruction that registers a one-shot Hydra crank. When the crank fires, it self-CPIs into the on-chain private-transfer flow to deliver the swapped tokens to destination with the requested delay/split policy. The returned transaction is a v0 VersionedTransaction that is still unsigned — the client signs and submits.

When visibility = "private", the fields destination, minDelayMs, maxDelayMs, and split are required. clientRefId and validator are optional. Explicitly setting destinationTokenAccount to anything other than the server-derived stash ATA returns 400.

post/v1/swap/swap

Request body

userPublicKeystring required

Public key of the wallet that will sign the swap transaction.

quoteResponseobject required

Quote response from GET /v1/swap/quote.

payerstring

Optional fee payer for transaction fees and rent.

wrapAndUnwrapSolboolean

Automatically wrap and unwrap native SOL when needed.

useSharedAccountsboolean

Allow shared accounts for intermediate routing state.

feeAccountstring

Optional initialized token account used to collect platform fees.

trackingAccountstring

Optional public key used for downstream transaction tracking.

asLegacyTransactionboolean

Build a legacy transaction instead of a versioned one. Not allowed when visibility = "private".

destinationTokenAccountstring

Optional destination token account for the output mint. When visibility = "private", this is server-controlled and must match the derived stash ATA.

nativeDestinationAccountstring

Optional destination account for native SOL output. Not supported when visibility = "private".

dynamicComputeUnitLimitboolean

Estimate compute usage and set the compute unit limit automatically.

skipUserAccountsRpcCallsboolean

Skip extra RPC checks for required user accounts.

dynamicSlippageboolean

Let the upstream swap builder overwrite slippage on the transaction.

computeUnitPriceMicroLamportsinteger

Optional exact compute unit price in micro-lamports.

blockhashSlotsToExpiryinteger

Optional transaction expiry window in slots.

positiveSlippageobject

Optional positive slippage collection settings.

visibility'public' | 'private'

public (default) proxies Jupiter/Metis as-is. private routes the output through a scheduled private transfer.

destinationstring

Final private-transfer recipient (wallet pubkey). Required when visibility = "private".

minDelayMsstring

Earliest (ms) the queued transfer may settle. Required when visibility = "private".

maxDelayMsstring

Latest (ms) the queued transfer may settle. Required when visibility = "private". Must be >= minDelayMs and <= 600000 (10 minutes).

splitinteger

Number of queue entries to split the transfer across. Required when visibility = "private". Must be between 1 and 14.

clientRefIdstring

Optional u64 client correlation id attached to each queued split.

validatorstring

Optional validator pubkey for the transfer-queue PDA. Defaults to the well-known MagicBlock validator (MAS1Dt9qreoRMQ14YQuhg8UTZMMzDdKhmkZMECCzk57).

Example request

{
  "userPublicKey": "3rXKwQ1kpjBd5tdcco32qsvqUh1BnZjcYnS5kYrP7AYE",
  "payer": "3rXKwQ1kpjBd5tdcco32qsvqUh1BnZjcYnS5kYrP7AYE",
  "wrapAndUnwrapSol": true,
  "useSharedAccounts": true,
  "visibility": "public",
  "minDelayMs": "0",
  "maxDelayMs": "60000"
}

Response

Swap transaction

swapTransactionstring required

Base64-encoded unsigned transaction.

lastValidBlockHeightinteger

prioritizationFeeLamportsinteger