Risk Management

List Protocol Risk Configs

List all protocol risk configurations.

cURL

curl -H "x-api-key: dev-api-key" \
     http://localhost:3000/api/v1/risk/protocols

Response

{
  "status": "success",
  "data": {
    "protocols": [
      {
        "protocol": "jupiter",
        "version": "1.0.0",
        "maxSlippageBps": 100,
        "maxPoolConcentrationBps": 5000,
        "gaslessEligible": true,
        "deltaVarianceBpsThreshold": 500,
        "updatedAt": "2026-03-08T12:00:00.000Z"
      }
    ]
  }
}

Get Protocol Risk Config

Retrieve risk configuration for a specific protocol.

cURL

curl -H "x-api-key: dev-api-key" \
     http://localhost:3000/api/v1/risk/protocols/jupiter

Path Parameters

string

required

Protocol name

Response

string

required

Protocol name

string

required

Config version

number

Maximum allowed slippage in basis points (0-10000)

number

Maximum pool concentration in basis points

array

Array of allowed pool addresses

array

Array of allowed program IDs

number

Maximum oracle price deviation in basis points

boolean

Whether oracle price check is required for swaps

number

Maximum age of swap quote in seconds

number

Delta variance threshold for delta guard (basis points)

boolean

Whether protocol supports gasless transactions

string

required

ISO 8601 timestamp

Update Protocol Risk Config

Update or create risk configuration for a protocol.

cURL

curl -X PUT \
  -H "x-api-key: dev-api-key" \
  -H "Content-Type: application/json" \
  -d '{
    "maxSlippageBps": 75,
    "maxPoolConcentrationBps": 4000,
    "gaslessEligible": false,
    "deltaVarianceBpsThreshold": 300
  }' \
  http://localhost:3000/api/v1/risk/protocols/jupiter

Path Parameters

string

required

Protocol name

Request Body

All fields are optional. Only provided fields are updated.

number

Maximum slippage (0-10000 basis points)

number

Maximum pool concentration (0-10000)

array

Array of allowed pool addresses

array

Array of allowed program IDs

number

Oracle deviation threshold (0-10000)

boolean

Require oracle price verification

number

Maximum quote age in seconds

number

Delta guard threshold (0-10000)

boolean

Allow gasless transactions

List Portfolio Risk Controls

List all portfolio risk controls.

cURL

curl -H "x-api-key: dev-api-key" \
     http://localhost:3000/api/v1/risk/portfolio

Get Portfolio Risk Controls

Retrieve risk controls for a specific wallet.

cURL

curl -H "x-api-key: dev-api-key" \
     http://localhost:3000/api/v1/risk/portfolio/550e8400-e29b-41d4-a716-446655440000

Path Parameters

string

required

Wallet UUID

Response

string

required

Wallet UUID

number

Maximum allowed drawdown in lamports

number

Maximum allowed daily loss in lamports

number

Maximum exposure per token in basis points (0-10000)

number

Maximum exposure per protocol in basis points (0-10000)

boolean

default:true

Automatically pause wallet on risk breach

string

required

ISO 8601 timestamp

Update Portfolio Risk Controls

Update or create risk controls for a wallet.

cURL

curl -X PUT \
  -H "x-api-key: dev-api-key" \
  -H "Content-Type: application/json" \
  -d '{
    "maxDrawdownLamports": 100000000,
    "maxDailyLossLamports": 50000000,
    "maxExposureBpsPerToken": 2500,
    "maxExposureBpsPerProtocol": 5000,
    "autoPauseOnBreach": true
  }' \
  http://localhost:3000/api/v1/risk/portfolio/550e8400-e29b-41d4-a716-446655440000

Path Parameters

string

required

Wallet UUID

Request Body

All fields are optional. Only provided fields are updated.

number

Maximum drawdown threshold in lamports

number

Maximum daily loss threshold in lamports

number

Maximum token exposure (0-10000 basis points)

number

Maximum protocol exposure (0-10000 basis points)

boolean

default:true

Auto-pause on breach

Delta Guard

The delta guard system verifies expected vs observed lamport movement in transactions.

How It Works

Before transaction: Record wallet balance
After confirmation: Check actual balance change
Compare to expected change from transaction intent
If deviation exceeds threshold: Flag or auto-pause

Configuration

Global Tolerance:

DELTA_GUARD_ABSOLUTE_TOLERANCE_LAMPORTS=5000

Per-Protocol Threshold:

{
  "protocol": "jupiter",
  "deltaVarianceBpsThreshold": 500
}

Example

Expected change: -1,000,000 lamports (swap input)
Actual change:   -1,004,500 lamports (with fees)
Deviance:          4,500 lamports
Threshold:         5,000 lamports
Result: PASS

Chaos Engineering

Chaos mode injects controlled failures for resilience testing.

Get Chaos Config

cURL

curl -H "x-api-key: dev-api-key" \
     http://localhost:3000/api/v1/chaos

Response

boolean

required

Whether chaos mode is enabled

object

Failure rate percentages by stage

Show stages

number

Simulation failure rate (0.0-1.0)

number

Build failure rate (0.0-1.0)

number

Signing failure rate (0.0-1.0)

number

Send failure rate (0.0-1.0)

number

Additional latency to inject (milliseconds)

{
  "status": "success",
  "data": {
    "enabled": false,
    "failureRates": {
      "simulation": 0.0,
      "build": 0.0,
      "sign": 0.0,
      "send": 0.0
    },
    "latencyMs": 0
  }
}

Update Chaos Config

cURL

curl -X PUT \
  -H "x-api-key: dev-api-key" \
  -H "Content-Type: application/json" \
  -d '{
    "enabled": true,
    "failureRates": {
      "simulation": 0.1,
      "build": 0.05
    },
    "latencyMs": 100
  }' \
  http://localhost:3000/api/v1/chaos

Request Body

boolean

Enable/disable chaos mode

object

Failure rates by stage (0.0-1.0)

number

Artificial latency in milliseconds

Only enable chaos mode in testing environments. Never use in production.

Risk Monitoring Best Practices

Set protocol-specific slippage limits based on liquidity

Configure portfolio limits to prevent overexposure

Enable auto-pause for critical wallets

Monitor delta guard violations via audit events

Regularly review and update risk configs

Test chaos scenarios before production deployment

Example: Conservative Risk Profile

{
  "protocolRisk": {
    "jupiter": {
      "maxSlippageBps": 50,
      "maxPoolConcentrationBps": 3000,
      "requireOracleForSwap": true,
      "oracleDeviationBps": 100,
      "maxQuoteAgeSeconds": 30,
      "deltaVarianceBpsThreshold": 200,
      "gaslessEligible": false
    }
  },
  "portfolioRisk": {
    "maxDrawdownLamports": 50000000,
    "maxDailyLossLamports": 25000000,
    "maxExposureBpsPerToken": 2000,
    "maxExposureBpsPerProtocol": 3000,
    "autoPauseOnBreach": true
  }
}

Example: Aggressive Risk Profile

{
  "protocolRisk": {
    "jupiter": {
      "maxSlippageBps": 200,
      "maxPoolConcentrationBps": 7000,
      "requireOracleForSwap": false,
      "deltaVarianceBpsThreshold": 1000,
      "gaslessEligible": true
    }
  },
  "portfolioRisk": {
    "maxDrawdownLamports": 500000000,
    "maxDailyLossLamports": 250000000,
    "maxExposureBpsPerToken": 5000,
    "maxExposureBpsPerProtocol": 7000,
    "autoPauseOnBreach": false
  }
}

Overview

Endpoints

List Protocol Risk Configs

Response

Get Protocol Risk Config

Path Parameters

Response

Update Protocol Risk Config

Path Parameters

Request Body

List Portfolio Risk Controls

Get Portfolio Risk Controls

Path Parameters

Response

Update Portfolio Risk Controls

Path Parameters

Request Body

Delta Guard

How It Works

Configuration

Example

Chaos Engineering

Get Chaos Config

Response

Update Chaos Config

Request Body

Risk Monitoring Best Practices

Example: Conservative Risk Profile

Example: Aggressive Risk Profile

​List Protocol Risk Configs

​Response

​Get Protocol Risk Config

​Path Parameters

​Response

​Update Protocol Risk Config

​Path Parameters

​Request Body

​List Portfolio Risk Controls

​Get Portfolio Risk Controls

​Path Parameters

​Response

​Update Portfolio Risk Controls

​Path Parameters

​Request Body

​Delta Guard

​How It Works

​Configuration

​Example

​Chaos Engineering

​Get Chaos Config

​Response

​Update Chaos Config

​Request Body

​Risk Monitoring Best Practices

​Example: Conservative Risk Profile

​Example: Aggressive Risk Profile

List Protocol Risk Configs

Response

Get Protocol Risk Config

Path Parameters

Response

Update Protocol Risk Config

Path Parameters

Request Body

List Portfolio Risk Controls

Get Portfolio Risk Controls

Path Parameters

Response

Update Portfolio Risk Controls

Path Parameters

Request Body

Delta Guard

How It Works

Configuration

Example

Chaos Engineering

Get Chaos Config

Response

Update Chaos Config

Request Body

Risk Monitoring Best Practices

Example: Conservative Risk Profile

Example: Aggressive Risk Profile