Skip to main content

HTTP Reference

The complete public contract is 36 operations under one origin:
Paths in the tables below are relative to that origin. Every operation ID matches the OpenAPI reference, where you can also see full request and response schemas. Anything outside /api/v2 is an internal Blank plane with no stability contract. There is no v1 contract and no unversioned alias.

Reading the tables

  • Auth — Anonymous needs no credential. Any key needs a valid key but no scope. Anything else is the exact scope set required; a key must carry all of them.
  • Rate policy — the value reported in X-RateLimit-Policy. Limits are environment configuration; read the rate-limit headers rather than hardcoding numbers.
  • Idempotent — Yes means the operation is a mutation and requires an Idempotency-Key header.
  • Operations marked with If-Match additionally require the resource’s current version as a strong ETag.
See Conventions for pagination, headers, retries, and concurrency, and Errors for the Problem Details envelope.

System

Identity

Tokens

Query for listTokens: cursor, limit (1–100, default 50), status, launchType, creator (a creator wallet address). listWalletHoldings takes no query and returns at most 500 holdings, unpaginated. See Tokens and market data.

Market data

listTokenCandles requires from, to, and interval (1m, 5m, 15m, 1h, 4h, 1d) and returns at most 1,000 points. Query for listWalletTrades: cursor, limit, mint.

Staking

Query for listStakingStakers: cursor, limit. Query for listWalletStakingPositions: cursor, limit, mint. Both position operations return live reward fields read from the chain per request (pendingRewardsLamports, totalRewardsClaimedLamports, claimable, rewardsAsOf) and answer 503 api_dependency_unavailable when that read fails. See Staking.

Fees

See Fees.

Presales

See Presales.

Predictions

See Price predictions.

Operations

Transaction intents

See Operations and transaction intents.

Webhooks

Blank also sends one request to you: the signed CloudEvent delivery, documented in the OpenAPI spec as the receiveBlankWebhookEvent webhook. See Webhooks.

Worked examples

Anonymous read with a conditional request:
Authenticated read from a server shell:
Mutation with durable idempotency:
Never run an authenticated example in a browser or embed a key in client-side code. Authenticated operations receive no browser CORS allowance.