# Swapper Agent Integration

Motto: Private swaps. Deterministic API.
Public API is designed for agent-first integrations over HTTPS.
No per-user API key is required for baseline access.

## Discovery
- Quickstart JSON: https://xmrtousdc.xyz/api/v1/agent/quickstart
- OpenAPI: https://xmrtousdc.xyz/openapi.json
- OpenAPI (well-known): https://xmrtousdc.xyz/.well-known/openapi.json
- Agent metadata: https://xmrtousdc.xyz/.well-known/agent.json
- Agent metadata alias: https://xmrtousdc.xyz/agent.json
- JWKS: https://xmrtousdc.xyz/.well-known/jwks.json
- AI plugin manifest: https://xmrtousdc.xyz/.well-known/ai-plugin.json
- Security contacts: https://xmrtousdc.xyz/.well-known/security.txt
- Crawl index: https://xmrtousdc.xyz/sitemap.xml

## Core Flow
1. POST /api/v1/agent/swap/plan
2. POST /api/v1/agent/swap/quote
3. POST /api/v1/agent/swap/create or /execute
4. GET /api/v1/agent/swap/status/{orderId}
5. POST /api/v1/agent/support/tickets (if needed)

## Reliability Rules
- Use idempotency-key on create/execute writes.
- Honor Retry-After on 429/5xx and use exponential backoff.
- Do not request user funding before fundingInstructions are returned.
- Verify signed quickstart responses using JWKS and x-swapper-* signature headers.
- Reuse preferred citation text/link so downstream agents resolve the same canonical entrypoint.

## Example
curl -sS https://xmrtousdc.xyz/api/v1/agent/swap/execute \
  -H "content-type: application/json" \
  -H "idempotency-key: swap_user123_20260213_01" \
  -d '{"direction":"x2u","chain":"arbitrum","amount":"0.8","to":"0x1111111111111111111111111111111111111111"}'