Overview

Authenticate, grab a key, and learn the limits before you call an endpoint.

Authentication

The Developer API is a JSON REST API for developers, trading bots, and AI agents. One Premium key unlocks three data feeds over the same API: Solana token-security analysis, AI-verified crypto news, and an economic calendar.

  • Base URL: https://api.xaxios.com
  • Send your key on every request in the X-API-Key header. Keys are for servers, so never ship them in public client-side code.
  • You need a Premium account with a verified email. Every endpoint is a plain HTTP GET.
  • Network: Solana. The rug-check endpoints take a Solana token mint address in the path.

Every response comes back in the same JSON envelope:

json
{
  "success": true,
  "data": { /* endpoint payload */ },
  "message": "string"
}

Get an API key

  1. 1

    Go Premium

    API keys need an active Premium subscription. If you are not Premium yet, start from the pricing page.

  2. 2

    Create the key

    Open Settings, API Keys and generate a key. Keys start with xax_, and you can keep one active key at a time.

  3. 3

    Store it securely

    The full key shows only once, at creation. Copy it and keep it as a secret, like an environment variable. If you lose it, revoke it and make a new one.

Keep your key private

Anyone with your key can burn through your rate limit. Never commit it to a repo or bundle it into a browser build. Use it from a server or another secure environment.

Rate limits

Premium keys are built for real workloads: unlimited daily scans (the per-day cap only applies to anonymous and free web usage) plus up to 50 requests a minute. And a rug-check call does a lot for one request. A single scan scores 150 or more holder wallets for sniper, bundle, insider, and bot behavior and pulls coin, LP, and creator history on the server, yet it still counts as one call.

Errors

Errors come back in the standard envelope with success: false and a message. The usual suspects:

StatusMeaning
400Malformed token address.
401Missing or invalid API key.
403The account is not Premium, the email is unverified, or the key scope is insufficient.
404Token not found on Solana.
429Rate limit hit. Back off and retry.

Make your first call

Here is the scan endpoint in curl, JavaScript, and Python. Swap in your key and go:

Anfrage
curl -s "https://api.xaxios.com/rug-check/scan/{mint}" \
  -H "X-API-Key: YOUR_API_KEY"
Antwort
200 OKapplication/json
{
  "success": true,
  "data": {
    "globalScore": 19,
    "metrics": [
      { "key": "B1", "title": "Empty Wallets", "description": "Measures how many top holders appear to have abandoned or disposable wallets", "score": 24 },
      { "key": "B2", "title": "Inactive Wallets", "description": "Detects wallets that show signs of being inactive or single-use", "score": 12 },
      { "key": "B3", "title": "Coordinated Buying", "description": "Analyzes whether buying patterns suggest automated or synchronized activity", "score": 8 },
      { "key": "B4", "title": "Wallet Similarity", "description": "Checks if holder wallets share suspiciously identical structures", "score": 21 },
      { "key": "B5", "title": "Single-Purpose Wallets", "description": "Identifies wallets that appear to exist solely for holding this token", "score": 15 },
      { "key": "B6", "title": "New Wallets", "description": "Evaluates how many holders are using recently created wallets with little history", "score": 9 },
      { "key": "B7", "title": "Bot Activity", "description": "Detects signs of automated trading bots among the top holders", "score": 33 },
      { "key": "B8", "title": "Connected Wallets", "description": "Identifies groups of wallets that appear to be controlled by the same entity", "score": 41 }
    ],
    "signalThresholds": [
      { "min": 0, "max": 40, "level": "good" },
      { "min": 41, "max": 60, "level": "warning" },
      { "min": 61, "max": 100, "level": "danger" }
    ]
  }
}

Endpoints