Transparency

Public solvency snapshot + engine identity + aggregate stats. Unauthenticated.

curl --request GET \
  --url https://api.darknyx.example.com/transparency

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://api.darknyx.example.com/transparency",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "GET",
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

package main

import (
	"fmt"
	"net/http"
	"io"
)

func main() {

	url := "https://api.darknyx.example.com/transparency"

	req, _ := http.NewRequest("GET", url, nil)

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

require 'uri'
require 'net/http'

url = URI("https://api.darknyx.example.com/transparency")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Get.new(url)

response = http.request(request)
puts response.read_body

{
  "reserves": {
    "shards": [
      {
        "tree_id": 123,
        "merkle_root": "<string>",
        "leaf_count": 123
      }
    ],
    "shard0_merkle_root": "<string>",
    "total_leaf_count": 123,
    "per_mint": [
      {
        "mint": "<string>",
        "outstanding": "<string>",
        "vault_balance": "<string>",
        "stale": true
      }
    ]
  },
  "tee": {
    "app_id": "<string>",
    "compose_hash": "<string>",
    "mrtd": "<string>",
    "signer_pubkey": "<string>"
  },
  "stats": {
    "batches": 123,
    "jobs": 123
  }
}

{
  "code": 1102,
  "message": "trading_key_signature does not verify against the canonical body"
}

TL;DRGET /transparency is a public solvency snapshot: for every mint it reports the outstanding note value (the venue’s liability) against the actual SPL balance held in the vault (the assets). Treat the endpoint as a convenience view and verify the same OutstandingMint and vault token accounts directly on Solana when making a trust decision.

A dark pool hides individual orders and balances, but solvency should still be publicly checkable. Transparency squares that circle: it never reveals who owns what, but it makes aggregate assets and liabilities easy to compare. The values remain independently verifiable from Solana, while engine identity is verified through a separate fresh attestation.

GET /transparency

Public, with no authentication.

Response

{
  "reserves": {
    "shards": [
      { "tree_id": 0, "merkle_root": "…", "leaf_count": 1024 },
      { "tree_id": 1, "merkle_root": "…", "leaf_count": 1024 },
      { "tree_id": 2, "merkle_root": "…", "leaf_count": 1024 },
      { "tree_id": 3, "merkle_root": "…", "leaf_count": 1024 }
    ],
    "shard0_merkle_root": "…",
    "total_leaf_count": 4096,
    "per_mint": [
      {
        "mint": "EPjFWdd5AufqSSqeM2qN1xzybapC8G4wEGGkZwyTDt1v",
        "outstanding": "1250000000000",
        "vault_balance": "1250000000000",
        "stale": false
      }
    ]
  },
  "tee": {
    "app_id": "…",
    "compose_hash": "…",
    "mrtd": "…",
    "signer_pubkey": "…"
  },
  "stats": {
    "batches": 12,
    "jobs": 48
  }
}

Reserves

Field	Type	Description
`reserves.shards[]`	array	One entry per shard: `tree_id`, that shard’s `merkle_root`, and the `leaf_count` under that root. There is no single global root, so this is the only lossless form — prefer it.
`reserves.shard0_merkle_root`	string	Shard 0’s root, kept for pre-sharding consumers.
`reserves.total_leaf_count`	integer	Total note commitments across all shards — not the count under `shard0_merkle_root`.
`per_mint[].mint`	string	The SPL mint, base58.
`per_mint[].outstanding`	string	Sum of unspent note value for this mint in smallest token units, the venue’s liability.
`per_mint[].vault_balance`	string	Actual SPL balance held in the vault in smallest token units, the assets.
`per_mint[].stale`	boolean	`true` if an on-chain read was degraded; treat the numbers as unknown, not zero, when set.

The solvency check is vault_balance >= outstanding for every mint. When it holds, the pool can honor every withdrawal: the tokens are there. If a row is stale, an on-chain read failed and you should ignore that row’s numbers rather than read a transient 0 as insolvency.

Engine identity

Field	Description
`tee.app_id`	The deployment’s application id.
`tee.compose_hash`	The server’s convenience copy of its compose hash; use the quote-bound event log for verification.
`tee.mrtd`	The TDX measurement of the running VM.
`tee.signer_pubkey`	The enclave’s on-chain settlement signer (base58).

These fields identify what the server claims to be. They are not an attestation proof: derive the compose hash from the DCAP-verified quote event log and compare the quote-bound full signer set with finalized on-chain VaultConfig.tee_pubkeys. The transparency response exposes only the primary signer.

Stats

Field	Description
`stats.batches`	Settlement batches currently retained by the scheduler. Terminal history is capped; active batches are never evicted. This is not a lifetime counter.
`stats.jobs`	Per-match settlement jobs belonging to those retained batches. This is not a lifetime counter.

Aggregate operational gauges, useful for a public health dashboard. They reveal nothing about any individual order; terminal entries age out, so do not sum deltas or treat the values as historical volume.

How to use it

Independent solvency monitoring. Poll it and alert if any non-stale mint shows vault_balance < outstanding.
Pre-trade trust check. Confirm reserves cover liabilities, then perform the independent quote, measurement, and full signer-set checks described in Transport & Attestation.
Public dashboards. Because it is unauthenticated and leaks nothing about individuals, it is safe to surface on a status page.

Response

Transparency snapshot.

Public, unauthenticated convenience snapshot. Independently read the corresponding Solana accounts and verify /attestation before treating the reserve or engine-identity fields as trusted evidence.

reserves

object

required

Show child attributes

tee

object

required

Engine attestation IDENTITY — enough to tie this response to a measured image. The full challenge-response quote is at GET /attestation.

Show child attributes

stats

object

required

Aggregate settlement-scheduler counters.

Show child attributes

⌘I

Public solvency snapshot + engine identity + aggregate stats. Unauthenticated.

curl --request GET \
  --url https://api.darknyx.example.com/transparency

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://api.darknyx.example.com/transparency",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "GET",
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

package main

import (
	"fmt"
	"net/http"
	"io"
)

func main() {

	url := "https://api.darknyx.example.com/transparency"

	req, _ := http.NewRequest("GET", url, nil)

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

require 'uri'
require 'net/http'

url = URI("https://api.darknyx.example.com/transparency")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Get.new(url)

response = http.request(request)
puts response.read_body

{
  "reserves": {
    "shards": [
      {
        "tree_id": 123,
        "merkle_root": "<string>",
        "leaf_count": 123
      }
    ],
    "shard0_merkle_root": "<string>",
    "total_leaf_count": 123,
    "per_mint": [
      {
        "mint": "<string>",
        "outstanding": "<string>",
        "vault_balance": "<string>",
        "stale": true
      }
    ]
  },
  "tee": {
    "app_id": "<string>",
    "compose_hash": "<string>",
    "mrtd": "<string>",
    "signer_pubkey": "<string>"
  },
  "stats": {
    "batches": 123,
    "jobs": 123
  }
}

{
  "code": 1102,
  "message": "trading_key_signature does not verify against the canonical body"
}

Getting Started

System

Account

Instruments

Orders

Settlement

Tree

WebSocket

GET /transparency

Response

Reserves

Engine identity

Stats

How to use it

Response

​GET /transparency

​Response

​Reserves

​Engine identity

​Stats

​How to use it

Response

GET /transparency

Response

Reserves

Engine identity

Stats

How to use it