curl --request POST \
--url https://api.jup.ag/trigger/v2/auth/verify \
--header 'Content-Type: application/json' \
--header 'x-api-key: <api-key>' \
--data '
{
"type": "message",
"walletPubkey": "BQ72nSv9f3PRyRKCBnHLVrerrv37CYTHm5h3s9VSGQDV",
"signature": "5eykt4UsFv8P8NJdTREpY1vzqKqZKvdpKuc147dw2N9d...",
"authMode": "access_refresh"
}
'import requests
url = "https://api.jup.ag/trigger/v2/auth/verify"
payload = {
"type": "message",
"walletPubkey": "BQ72nSv9f3PRyRKCBnHLVrerrv37CYTHm5h3s9VSGQDV",
"signature": "5eykt4UsFv8P8NJdTREpY1vzqKqZKvdpKuc147dw2N9d...",
"authMode": "access_refresh"
}
headers = {
"x-api-key": "<api-key>",
"Content-Type": "application/json"
}
response = requests.post(url, json=payload, headers=headers)
print(response.text)const options = {
method: 'POST',
headers: {'x-api-key': '<api-key>', 'Content-Type': 'application/json'},
body: JSON.stringify({
type: 'message',
walletPubkey: 'BQ72nSv9f3PRyRKCBnHLVrerrv37CYTHm5h3s9VSGQDV',
signature: '5eykt4UsFv8P8NJdTREpY1vzqKqZKvdpKuc147dw2N9d...',
authMode: 'access_refresh'
})
};
fetch('https://api.jup.ag/trigger/v2/auth/verify', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));<?php
$curl = curl_init();
curl_setopt_array($curl, [
CURLOPT_URL => "https://api.jup.ag/trigger/v2/auth/verify",
CURLOPT_RETURNTRANSFER => true,
CURLOPT_ENCODING => "",
CURLOPT_MAXREDIRS => 10,
CURLOPT_TIMEOUT => 30,
CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
CURLOPT_CUSTOMREQUEST => "POST",
CURLOPT_POSTFIELDS => json_encode([
'type' => 'message',
'walletPubkey' => 'BQ72nSv9f3PRyRKCBnHLVrerrv37CYTHm5h3s9VSGQDV',
'signature' => '5eykt4UsFv8P8NJdTREpY1vzqKqZKvdpKuc147dw2N9d...',
'authMode' => 'access_refresh'
]),
CURLOPT_HTTPHEADER => [
"Content-Type: application/json",
"x-api-key: <api-key>"
],
]);
$response = curl_exec($curl);
$err = curl_error($curl);
curl_close($curl);
if ($err) {
echo "cURL Error #:" . $err;
} else {
echo $response;
}package main
import (
"fmt"
"strings"
"net/http"
"io"
)
func main() {
url := "https://api.jup.ag/trigger/v2/auth/verify"
payload := strings.NewReader("{\n \"type\": \"message\",\n \"walletPubkey\": \"BQ72nSv9f3PRyRKCBnHLVrerrv37CYTHm5h3s9VSGQDV\",\n \"signature\": \"5eykt4UsFv8P8NJdTREpY1vzqKqZKvdpKuc147dw2N9d...\",\n \"authMode\": \"access_refresh\"\n}")
req, _ := http.NewRequest("POST", url, payload)
req.Header.Add("x-api-key", "<api-key>")
req.Header.Add("Content-Type", "application/json")
res, _ := http.DefaultClient.Do(req)
defer res.Body.Close()
body, _ := io.ReadAll(res.Body)
fmt.Println(string(body))
}HttpResponse<String> response = Unirest.post("https://api.jup.ag/trigger/v2/auth/verify")
.header("x-api-key", "<api-key>")
.header("Content-Type", "application/json")
.body("{\n \"type\": \"message\",\n \"walletPubkey\": \"BQ72nSv9f3PRyRKCBnHLVrerrv37CYTHm5h3s9VSGQDV\",\n \"signature\": \"5eykt4UsFv8P8NJdTREpY1vzqKqZKvdpKuc147dw2N9d...\",\n \"authMode\": \"access_refresh\"\n}")
.asString();require 'uri'
require 'net/http'
url = URI("https://api.jup.ag/trigger/v2/auth/verify")
http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true
request = Net::HTTP::Post.new(url)
request["x-api-key"] = '<api-key>'
request["Content-Type"] = 'application/json'
request.body = "{\n \"type\": \"message\",\n \"walletPubkey\": \"BQ72nSv9f3PRyRKCBnHLVrerrv37CYTHm5h3s9VSGQDV\",\n \"signature\": \"5eykt4UsFv8P8NJdTREpY1vzqKqZKvdpKuc147dw2N9d...\",\n \"authMode\": \"access_refresh\"\n}"
response = http.request(request)
puts response.read_body{
"authMode": "access_refresh",
"accessToken": "eyJhbGciOiJIUzI1NiIs...",
"refreshToken": "01a08512-95d8-70ac-bab5-20c73aa002bb.6lr8kn3eMIsNGR9rXR1...",
"expiresAt": "2026-09-16T14:12:43.000Z",
"tokenType": "Bearer"
}{
"error": "<string>",
"details": {}
}{
"error": "<string>",
"details": {}
}Verify Challenge
Submit the signed challenge to receive a JWT token
curl --request POST \
--url https://api.jup.ag/trigger/v2/auth/verify \
--header 'Content-Type: application/json' \
--header 'x-api-key: <api-key>' \
--data '
{
"type": "message",
"walletPubkey": "BQ72nSv9f3PRyRKCBnHLVrerrv37CYTHm5h3s9VSGQDV",
"signature": "5eykt4UsFv8P8NJdTREpY1vzqKqZKvdpKuc147dw2N9d...",
"authMode": "access_refresh"
}
'import requests
url = "https://api.jup.ag/trigger/v2/auth/verify"
payload = {
"type": "message",
"walletPubkey": "BQ72nSv9f3PRyRKCBnHLVrerrv37CYTHm5h3s9VSGQDV",
"signature": "5eykt4UsFv8P8NJdTREpY1vzqKqZKvdpKuc147dw2N9d...",
"authMode": "access_refresh"
}
headers = {
"x-api-key": "<api-key>",
"Content-Type": "application/json"
}
response = requests.post(url, json=payload, headers=headers)
print(response.text)const options = {
method: 'POST',
headers: {'x-api-key': '<api-key>', 'Content-Type': 'application/json'},
body: JSON.stringify({
type: 'message',
walletPubkey: 'BQ72nSv9f3PRyRKCBnHLVrerrv37CYTHm5h3s9VSGQDV',
signature: '5eykt4UsFv8P8NJdTREpY1vzqKqZKvdpKuc147dw2N9d...',
authMode: 'access_refresh'
})
};
fetch('https://api.jup.ag/trigger/v2/auth/verify', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));<?php
$curl = curl_init();
curl_setopt_array($curl, [
CURLOPT_URL => "https://api.jup.ag/trigger/v2/auth/verify",
CURLOPT_RETURNTRANSFER => true,
CURLOPT_ENCODING => "",
CURLOPT_MAXREDIRS => 10,
CURLOPT_TIMEOUT => 30,
CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
CURLOPT_CUSTOMREQUEST => "POST",
CURLOPT_POSTFIELDS => json_encode([
'type' => 'message',
'walletPubkey' => 'BQ72nSv9f3PRyRKCBnHLVrerrv37CYTHm5h3s9VSGQDV',
'signature' => '5eykt4UsFv8P8NJdTREpY1vzqKqZKvdpKuc147dw2N9d...',
'authMode' => 'access_refresh'
]),
CURLOPT_HTTPHEADER => [
"Content-Type: application/json",
"x-api-key: <api-key>"
],
]);
$response = curl_exec($curl);
$err = curl_error($curl);
curl_close($curl);
if ($err) {
echo "cURL Error #:" . $err;
} else {
echo $response;
}package main
import (
"fmt"
"strings"
"net/http"
"io"
)
func main() {
url := "https://api.jup.ag/trigger/v2/auth/verify"
payload := strings.NewReader("{\n \"type\": \"message\",\n \"walletPubkey\": \"BQ72nSv9f3PRyRKCBnHLVrerrv37CYTHm5h3s9VSGQDV\",\n \"signature\": \"5eykt4UsFv8P8NJdTREpY1vzqKqZKvdpKuc147dw2N9d...\",\n \"authMode\": \"access_refresh\"\n}")
req, _ := http.NewRequest("POST", url, payload)
req.Header.Add("x-api-key", "<api-key>")
req.Header.Add("Content-Type", "application/json")
res, _ := http.DefaultClient.Do(req)
defer res.Body.Close()
body, _ := io.ReadAll(res.Body)
fmt.Println(string(body))
}HttpResponse<String> response = Unirest.post("https://api.jup.ag/trigger/v2/auth/verify")
.header("x-api-key", "<api-key>")
.header("Content-Type", "application/json")
.body("{\n \"type\": \"message\",\n \"walletPubkey\": \"BQ72nSv9f3PRyRKCBnHLVrerrv37CYTHm5h3s9VSGQDV\",\n \"signature\": \"5eykt4UsFv8P8NJdTREpY1vzqKqZKvdpKuc147dw2N9d...\",\n \"authMode\": \"access_refresh\"\n}")
.asString();require 'uri'
require 'net/http'
url = URI("https://api.jup.ag/trigger/v2/auth/verify")
http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true
request = Net::HTTP::Post.new(url)
request["x-api-key"] = '<api-key>'
request["Content-Type"] = 'application/json'
request.body = "{\n \"type\": \"message\",\n \"walletPubkey\": \"BQ72nSv9f3PRyRKCBnHLVrerrv37CYTHm5h3s9VSGQDV\",\n \"signature\": \"5eykt4UsFv8P8NJdTREpY1vzqKqZKvdpKuc147dw2N9d...\",\n \"authMode\": \"access_refresh\"\n}"
response = http.request(request)
puts response.read_body{
"authMode": "access_refresh",
"accessToken": "eyJhbGciOiJIUzI1NiIs...",
"refreshToken": "01a08512-95d8-70ac-bab5-20c73aa002bb.6lr8kn3eMIsNGR9rXR1...",
"expiresAt": "2026-09-16T14:12:43.000Z",
"tokenType": "Bearer"
}{
"error": "<string>",
"details": {}
}{
"error": "<string>",
"details": {}
}Authorizations
Get API key via https://developers.jup.ag/portal
Body
- MessageVerification
- TransactionVerification
message Base58-encoded signature
Token model. Defaults to the deprecated access_only when omitted. Send access_refresh for refresh tokens.
access_only, access_refresh Response
Tokens for the requested auth mode. The access_only variant is returned with
Deprecation (an RFC 8594 HTTP-date, e.g. Tue, 21 Jul 2026 00:00:00 GMT) and
Link (rel="successor-version" naming the absolute refresh URL
https://api.jup.ag/trigger/v2/auth/refresh) response headers.
- AccessRefreshResult
- AccessOnlyResult
Access token plus rotating refresh token, returned identically by access_refresh verify and by refresh.
access_refresh JWT to send in the Authorization Bearer header. Expires 15 minutes after issue.
Opaque token used to obtain a new access token. Rotates on every /auth/refresh call.
ISO 8601 timestamp when accessToken expires.
Bearer Was this page helpful?
