Developer API.

Base URL & versioning

Every endpoint runs over HTTPS, with the version baked into the path. Right now the current major version is v1.

https://api.torboto.com/v1

Authentication

Each request carries a bearer token in the Authorization header for authentication. A key is scoped to a single account, and you can rotate it whenever you like from the control panel.

Authorization: Bearer pfvb_live_xxxxxxxxxxxxxxxxxxxx

Create a campaign

POST /v1/campaigns — stand up a fleet and queue a campaign. You get back a deposit address in the response, and the campaign kicks off on its own once the 2% fee and the volume budget have been funded.

{
  "mint": "7xKXtg2CW87d97TXJSDpbD5jBkheTqA83TZRuJosgAsU",
  "target_volume_sol": 250,
  "wallet_count": 320,
  "trade_band_sol": [0.05, 0.30],
  "buy_sell_ratio": 0.72,
  "comment_density": 0.40,
  "favorite_density": 0.70,
  "curve": "burst",
  "duration_minutes": 90
}

Fetch live telemetry

GET /v1/campaigns/{id} — hands back the current state of the campaign: how many wallets are in rotation, how much volume has been routed, how many trades have confirmed, comments posted, the change in holders and the trending rank, along with the full set of signed transaction hashes you can verify on-chain.

Stop a campaign

POST /v1/campaigns/{id}/stop — stops execution then and there and pushes an immediate refund of whatever deposit is left over back to your wallet; the sweep hash comes back in the response.

Rate limits

• Read endpoints: 120 requests/minute per key.
• Campaign creation: 10 requests/minute per key.
• Go past a limit and you get a 429 back, with a Retry-After header attached.

Errors

When something goes wrong you get a standard HTTP status code and a JSON body that pairs a machine-readable code with a message meant for humans. Every amount is given in SOL and every timestamp is UTC ISO-8601.