Xora public API
Read-only endpoints for platform status, health, XRP price, APY value tiers, TRX pilot context, card waitlist count, and validator status. Treasury, TVL, wallet, and user-balance statistics are private and require admin access.
Base URL
AI app integration
XORA also exposes authenticated MCP tools for ChatGPT and Claude Desktop. For the user-facing setup flow, see how to buy XRP from ChatGPT or Claude.
Endpoints
Platform status
Returns public runtime capability context for integrations. The trx object is non-user-specific: it describes the native TRX on Tron pilot, not any account balance or treasury amount.
Health
Returns operational status. Public callers see status only; owner callers (with admin secret) see detailed checks for storage, XRPL, treasury, and yield distribution.
XRP price
Returns the current XRP/USD reference price used by public calculators, plus a 24-hour change value and cache/staleness flags.
APY value tiers
Returns the published XORA APY value tier structure. XRP tiers separate native XRP yield from estimated XORA reward value; the native TRX on Tron pilot can display 28% APY when enabled in-app. XORA token quantity remains separate from APY value.
Card waitlist count
Returns the current Xora Card waitlist count. Card network, fees, and limits remain roadmap items until card access appears in the app.
Validator status
Returns XORA's XRPL validator identity and cached node status. XRPL validators do not pay XRP rewards; this endpoint is for network and monitoring transparency.
Rate limits
- /api/health — 30 requests per minute per IP. Designed for uptime monitors. Public response is minimal.
- /api/xrp/price — 30 requests per minute per IP.
- /api/xrp/yield/tiers — 10 requests per minute per IP.
- /api/waitlist/count — 20 requests per minute per IP.
- /api/validator — 10 requests per minute per IP.
- Exceeded limits return HTTP 429 with {"error":"Too many requests"}. Back off and retry.
CORS
Documented read-only endpoints set Access-Control-Allow-Origin: *. Browser-side aggregators can fetch directly without a proxy. Authenticated, admin, and write endpoints stay restricted to Xora origins.
Stability and changelog
- Public endpoint shapes are intentionally minimal. Admin-only treasury and user statistics are not part of the public API contract.
- Major versioning: none yet. If public versioned APIs are introduced, they will be documented here before launch.
- Changes are posted on the blog and mirrored to llms.txt.
Contact
For integration support, custom endpoints, or higher rate limits: api@xora.finance. For security issues, see security.