Skip to content

Clarify auth tiers: keyless reads work without x-api-key - #20

Open
criptocbas wants to merge 1 commit into
jup-ag:mainfrom
criptocbas:patch-1
Open

Clarify auth tiers: keyless reads work without x-api-key#20
criptocbas wants to merge 1 commit into
jup-ag:mainfrom
criptocbas:patch-1

Conversation

@criptocbas

Copy link
Copy Markdown

What

Replace the blanket "auth required for Jupiter REST endpoints" sentence in integrating-jupiter/SKILL.md with a tiered description that distinguishes keyless reads from authenticated writes.

Why

SKILL.md content is auto-loaded into agent context (Claude Code, Cursor, etc.) and read as a runtime instruction. The current line:

Auth: x-api-key from portal.jup.ag (required for Jupiter REST endpoints)

overstates the requirement. Keyless 0.5 RPS works on the read endpoints we touched while building a hackathon project on Jupiter Prediction + Lend Earn. Confirmed empirically:

  • GET /lend/v1/earn/tokens → 200, returned 5 tokens (USDC, USDT, SOL, EURC, JUICED)
  • GET /prediction/v1/events?category=crypto → 200, returned 4054 events
  • GET /prediction/v1/markets/{id} → 200
  • GET /prediction/v1/orderbook/{id} → 200

The convention in https://dev.jup.ag/docs/llms.txt already documents keyless access correctly — this brings the SKILL.md into alignment with that source of truth.

Effect

Agents reading the SKILL.md verbatim during prototyping no longer fail-fast on missing API keys for read-only exploration. Authenticated tiers remain accurately described for write paths.

Context

This came out of a Solana Frontier hackathon project (Jupiter sidetrack). Full DX report: https://github.com/criptocbas/Ballast/blob/main/DX-REPORT.md — the fix here is captured as DX-GAP-#13 in that report, alongside 26 other findings.

Happy to iterate on phrasing or formatting (e.g. a table instead of bullets, additional endpoints listed) if a different style fits the repo's conventions better.

Most read endpoints (/lend/v1/earn/tokens, /prediction/v1/events,
/markets/{id}, /orderbook/{id}) work keyless at 0.5 RPS during
prototyping. Only write endpoints and higher rate limits need an
authenticated key. Replace the blanket "required" claim with a
tiered description so agents reading SKILL.md don't fail-fast on
missing keys for read-only exploration.

Verified against the live API on 2026-05-01 during a hackathon
build. Aligns SKILL.md with the convention already in
https://dev.jup.ag/docs/llms.txt.
@bruno290714-star

Copy link
Copy Markdown

What

Replace the blanket "auth required for Jupiter REST endpoints" sentence in integrating-jupiter/SKILL.md with a tiered description that distinguishes keyless reads from authenticated writes.

Why

SKILL.md content is auto-loaded into agent context (Claude Code, Cursor, etc.) and read as a runtime instruction. The current line:

Auth: x-api-key from portal.jup.ag (required for Jupiter REST endpoints)

overstates the requirement. Keyless 0.5 RPS works on the read endpoints we touched while building a hackathon project on Jupiter Prediction + Lend Earn. Confirmed empirically:

  • GET /lend/v1/earn/tokens → 200, returned 5 tokens (USDC, USDT, SOL, EURC, JUICED)
  • GET /prediction/v1/events?category=crypto → 200, returned 4054 events
  • GET /prediction/v1/markets/{id} → 200
  • GET /prediction/v1/orderbook/{id} → 200

The convention in https://dev.jup.ag/docs/llms.txt already documents keyless access correctly — this brings the SKILL.md into alignment with that source of truth.

Effect

Agents reading the SKILL.md verbatim during prototyping no longer fail-fast on missing API keys for read-only exploration. Authenticated tiers remain accurately described for write paths.

Context

This came out of a Solana Frontier hackathon project (Jupiter sidetrack). Full DX report: https://github.com/criptocbas/Ballast/blob/main/DX-REPORT.md — the fix here is captured as DX-GAP-#13 in that report, alongside 26 other findings.

Happy to iterate on phrasing or formatting (e.g. a table instead of bullets, additional endpoints listed) if a different style fits the repo's conventions better.

Comment on lines +42 to +45

**Auth**:
- **Read endpoints** (e.g. `/lend/v1/earn/tokens`, `/prediction/v1/events`, `/prediction/v1/markets/{id}`, `/prediction/v1/orderbook/{id}`): keyless at 0.5 RPS works — useful for prototyping and discovery.
- **Write endpoints** (e.g. `POST /prediction/v1/orders`, swap quote/build, transaction crafting) and **higher rate limits**: require `x-api-key` from [portal.jup.ag](https://portal.jup.ag/).

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

https://developers.jup.ag/docs/portal/rate-limits#overview - rate limits are always 0.5 it does not depend on endpoint

@javi0guerrero4-cloud javi0guerrero4-cloud left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Add

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants