Skip to main content
Every request to the Argyros API (https://api.argyros.xyz) is authenticated with an API key. Keys look like argy_ followed by a long hex string, and you send them in the standard Authorization: Bearer header.
Argyros is free during beta — there are no paid tiers yet. You still need a key so we can apply rate limits and keep the service healthy.

​
Get an API key

1

Request a key

During beta, keys are issued in our community Discord. Join and ask in the developer channel — keys are granted at no cost.

Get an API key on Discord

Join the Argyros Discord and request a key.
2

Store it as an environment variable

Never hard-code a key in source. Keep it in an environment variable:
export ARGYROS_KEY="argy_your_key_here"

​
Authenticate a request

Send your key in the Authorization header on every request: 
curl "https://api.argyros.xyz/api/v1/quote?inputMint=So11111111111111111111111111111111111111112&outputMint=uSd2czE61Evaf76RNbq4KPpXnkiL3irdzgLFUMe3NoG&amount=1000000000&swapMode=ExactIn" \
  -H "Authorization: Bearer $ARGYROS_KEY"

​
SDK and widget

The SDK and widget take the key directly — you don’t set headers yourself. 
import { ArgyrosSDK } from "@argyros/sdk";

const sdk = new ArgyrosSDK({ apiKey: process.env.ARGYROS_KEY });

​
WebSocket streaming

Browsers can’t set custom headers on a WebSocket connection, so the streaming endpoint accepts the key as a key query parameter instead: 
wss://api.argyros.xyz/api/v1/stream?key=argy_your_key_here

​
Keep your key secret

A key grants access under your account’s rate limits. Treat it like a password.
  • Server-side keys stay on the server. Don’t commit keys to git or ship them in a public repo.
  • Browser and widget usage exposes the key in client code. For client-side embeds, use a key you’ve provisioned for that purpose and rotate it if it leaks.
  • Rotate compromised keys by requesting a new one and retiring the old.

​
Errors

A missing or invalid key returns an authentication error:
StatusMeaning
401 UnauthorizedNo API key was provided.
403 ForbiddenThe key is invalid, disabled, or revoked.
The SDK surfaces these as AuthError — see SDK error handling. For throughput limits and the 429 response, see Rate limits.
Last modified on June 28, 2026