Developers
Non-custodial execution: why agents must sign locally
Security model, why there is no EVM submit endpoint, and how Solana broadcast differs.
XAUConnect is a routing layer, not a custodian. Aggregators return calldata; funds move only when your wallet signs and broadcasts. This matches industry standard for 1inch, 0x, and Jupiter integrations.
EVM execution
POST /swap/build returns { to, data, value }. Your agent must check ERC-20 allowance (GET /swap/allowance), approve the spender if needed, then sendTransaction via its own RPC. We intentionally do not offer POST /swap/submit-evm — storing user keys on a server would introduce unacceptable custody risk.
Solana execution
Solana builds return base64 unsigned VersionedTransaction bytes. Sign with Phantom, Solflare, or a local keypair, then POST /swap/submit-solana. The server broadcasts already-signed bytes via Helius RPC to avoid browser 403 errors — it still never sees your private key.
Production key management
- Development: environment variable private key (never commit)
- Production: Turnkey, Privy, Fireblocks, or AWS KMS
- High-value treasuries: MPC or hardware-backed signing
Ready to integrate?
Follow the quickstart or explore the OpenAPI reference.