---
title: "Execute transfer (custody)"
method: POST
path: "/v1/payments/transfers"
tags: ["Payments"]
---

# Execute transfer (custody)

`POST /v1/payments/transfers`

Executes a transfer using server-side custody signing. The source walletId must reference a wallet from /v1/wallets. Private-transfer requests are provider-built, signed by SDP-controlled wallets when required, and submitted on the configured Solana cluster. Supply an Idempotency-Key to retry safely: an identical resolved request returns the original transfer, while reusing the key for a different request returns 409.

## Headers

- `x-project-id` string — Selects the active project for this request. Required for session/dashboard callers. Ignored when authenticating with an API key, whose scope is fixed to the key's project.
- `Idempotency-Key` string — Idempotency key for safely retrying mutating requests. 1-255 printable ASCII characters; echoed back on the response.

## Request body

- object — Create transfer request payload for a custody-managed source wallet. This endpoint does not provision wallets.
  - `projectId` string — Project identifier for the transfer context.
  - `source` string, required — Source wallet — the `walletId` field returned by GET /v1/wallets. The wallet record `id` and the public key are not accepted.
  - `destination` string, required — Destination wallet address.
  - `token` string, required — Token to transfer. Pass `SOL` for the native token, a well-known token symbol (e.g. `USDC`) resolved to the configured cluster's mint, or a base58 SPL mint address. Custom tokens must be specified by their on-chain mint.
  - `amount` string, required — Token amount in UI units (decimal string).
  - `memo` string — Optional memo for the transfer.
  - `privateTransfer` object — Private-transfer routing. SDP asks the provider to build a base-balance private transfer, signs it with the custody wallet when required, and submits it on the configured Solana cluster.
    - `provider` 'magicblock', required — Private-transfer provider identifier.
    - `magicBlock` object, required — MagicBlock-specific options for private SPL transfer preparation. SDP currently supports base-balance private transfers only: funds are spent from the sender's normal Solana token balance and settle to the recipient's normal Solana token balance through MagicBlock's private routing.
      - `validator` string — Optional MagicBlock validator pubkey. MagicBlock can resolve this when omitted.
      - `initIfMissing` boolean — Initialize the MagicBlock transfer queue when missing.
      - `initAtasIfMissing` boolean — Initialize required associated token accounts when missing.
      - `initVaultIfMissing` boolean — Initialize the MagicBlock vault when missing.
      - `minDelayMs` string — Earliest settlement delay in milliseconds, preserved as MagicBlock's integer-string field.
      - `maxDelayMs` string — Latest settlement delay in milliseconds, preserved as MagicBlock's integer-string field.
      - `clientRefId` string — Client reference encrypted by MagicBlock for payment correlation, preserved as an integer string.
      - `split` integer — Number of queue entries to split the transfer across.
      - `gasless` boolean — Request MagicBlock fee sponsorship when supported.
      - `legacy` boolean — Request MagicBlock legacy transaction mode instead of v0.

## Response `200`

Transfer executed

- object — Standard success response envelope.
  - `data` object, required — Transfer response payload.
    - `transfer` object, required — Transfer details.
      - `id` string, required — Transfer identifier (SDP record ID, not the on-chain signature).
      - `organizationId` string, required — Organization identifier.
      - `walletId` string, required — Source or receiving SDP wallet associated with the transfer.
      - `projectId` string — Project identifier for the transfer.
      - `type` 'transfer' | 'transfer_confidential' | 'transfer_batch' | 'onramp' | 'offramp', required — Transfer type.
      - `direction` 'inbound' | 'outbound', required — Transfer direction.
      - `status` 'pending' | 'processing' | 'confirmed' | 'finalized' | 'failed' | 'awaiting_payment' | 'settling' | 'completed' | 'canceled' | 'expired', required — Transfer status.
      - `signature` string, nullable, required — Solana transaction signature (tx id/hash).
      - `serializedTx` string, nullable, required — Base64-encoded transaction payload, if available.
      - `slot` integer, nullable, required — Slot number, if confirmed.
      - `blockTime` string, date-time, nullable, required — Block time, if confirmed.
      - `fee` integer, nullable, required — Transaction fee in lamports.
      - `error` string, nullable, required — Error message if the transaction failed.
      - `initiatedBy` object — Initiator that triggered the transfer.
        - `type` 'api_key' | 'user' | 'system', required — Initiator type.
        - `id` string — Initiator identifier if applicable.
        - `display` string — Human-friendly label for the initiator.
      - `source` string — Source wallet address.
      - `destination` string — Destination wallet address.
      - `memo` string — Optional memo for the transfer.
      - `rampsMemo` object, required — Free-form key-value memo for offchain reconciliation of ramp transfers. At most 20 entries.
      - `token` string — Token symbol or mint address.
      - `amount` string — Token amount in UI units (decimal string).
      - `provider` 'moonpay' | 'lightspark' | 'bvnk' | 'moneygram' | 'coinbase' | 'mural' | 'stripe' — Ramp provider for on-ramp and off-ramp transfer records.
      - `counterpartyId` string — Counterparty tied to the transfer record, when available.
      - `counterpartyDisplayName` string — Current display name of the counterparty tied to the transfer.
      - `providerReference` string — Provider quote or transaction reference used for ramp correlation.
      - `deliveryMode` 'hosted' | 'manual_instructions' | 'session_widget' — Ramp delivery mode. Hosted flows require the customer to complete a provider-hosted UI; manual instructions require the customer to fund displayed instructions; session widgets use a provider SDK session.
      - `fiatCurrency` string — Fiat currency for the ramp leg.
      - `fiatAmount` string — Fiat amount for the ramp leg when known.
      - `risk` object — Optional risk evaluation for the transfer.
        - `provider` string, required — Risk scoring provider.
        - `score` string, required — Provider-specific risk score.
        - `level` 'low' | 'medium' | 'high' | 'unknown', required — Risk level classification.
        - `evaluatedAt` string, date-time, required — Timestamp when risk was evaluated.
      - `moneygram` object — MoneyGram-specific details for MoneyGram ramp transfers.
        - `transactionId` string — MoneyGram xRamps transaction identifier.
        - `referenceNumber` string — Cash pickup reference number issued by MoneyGram.
        - `payoutAmount` number — Fiat payout amount reported by MoneyGram.
        - `payoutStatus` string — MoneyGram payout status.
        - `cryptoTransferId` string — SDP transfer id for the on-chain USDC leg.
        - `solanaTxSignature` string — Solana transaction signature for the USDC transfer.
        - `lastWidgetError` string — Last MoneyGram widget error recorded for this transfer.
      - `createdAt` string, date-time, required — Creation timestamp.
      - `updatedAt` string, date-time, required — Last update timestamp.
    - `privateTransfer` object — Provider metadata returned for private-transfer execution.
      - `provider` 'magicblock', required — Private-transfer provider that built the transaction.
      - `magicBlock` object, required — MagicBlock prepared-transfer metadata.
        - `kind` string, required — MagicBlock transaction kind.
        - `version` string, required — MagicBlock transaction version.
        - `instructionCount` integer, required — Instruction count in the prepared transaction.
        - `requiredSigners` string[], required — Signers required by the MagicBlock-prepared transaction.
        - `validator` string — MagicBlock validator pubkey returned by the provider, when present.
  - `meta` object, required — Response metadata.
    - `requestId` string, required — Request identifier for tracing.
    - `timestamp` string, date-time, required — ISO 8601 timestamp.

## Other responses

- `400` — Error
- `401` — Error
- `403` — Error
- `409` — Error
- `500` — Error

---

[API](https://skmtc.net/solana/apis/solana-developer-platform-api.md) · [All operations](https://skmtc.net/solana/apis/solana-developer-platform-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/solana/solana-developer-platform-api/revisions/672b1916ba61/schema)