strata-sdk

The official async Rust client for live Strata markets and Sonar quotes.

The official hosted API currently has market, exact-output, and asset-to-asset Sonar quotes enabled. The SDK still checks the live capability catalog before each gated operation; that is a runtime safety check, not an inactive-feature notice.

Install

[dependencies]
strata-public-contract = "0.2"
strata-sdk = "0.2"

Request a Sonar quote

use strata_public_contract::{QuoteRequest, QuoteSide, DEFAULT_MAXIMUM_TOLERANCE_BPS};
use strata_sdk::StrataClient;

# async fn run() -> Result<(), Box<dyn std::error::Error>> {
let strata = StrataClient::production()?;

// Exact input: sell 0.01 SOL, receive at least `minimum_output_atoms` USDC.
let quote = strata
    .quote(QuoteRequest {
        market_id: "SOL/USDC".into(),
        side: QuoteSide::Sell,
        amount_in_atoms: Some("10000000".into()),
        amount_out_atoms: None,
        maximum_tolerance_bps: DEFAULT_MAXIMUM_TOLERANCE_BPS,
    })
    .await?;

println!("Sonar output: {}", quote.amount_out_atoms);
println!("Minimum:      {}", quote.minimum_output_atoms);
println!("Price impact: {}%", quote.price_impact_pct);

// Exact output: buy 1 SOL. Strata inverts its best route and returns the USDC
// that delivers it as `amount_in_atoms`; `maximum_tolerance_bps` is the usual
// optional lower floor (zero → exactly 1 SOL or the execution fails closed).
let buy_one_sol = strata
    .quote(QuoteRequest {
        market_id: "SOL/USDC".into(),
        side: QuoteSide::Buy,
        amount_in_atoms: None,
        amount_out_atoms: Some("1000000000".into()),
        maximum_tolerance_bps: DEFAULT_MAXIMUM_TOLERANCE_BPS,
    })
    .await?;
println!("Spend USDC atoms: {}", buy_one_sol.amount_in_atoms);
# Ok(())
# }

Sonar returns one Strata quote with expected user-net output, consumed input, fees, user-net minimum output, price impact, and expiry in one typed result. Gross route output for an external route-quality comparison is exactly amount_out_atoms + output_fee_atoms; all-in user comparisons use amount_out_atoms.

Client operations

Manage Strands and Currents

The high-level Rust path takes human inputs and hides product arrays, token atoms, market IDs, tick math, expiry slots, and confirmation polling:

use strata_public_contract::PlatformMakerControlProduct;
use strata_sdk::{
    PlatformMakerQuickstartRequest, PlatformMakerQuickstartSide, StrataClient,
};

# async fn run() -> Result<(), Box<dyn std::error::Error>> {
# let strata = StrataClient::production()?;
# let maker_signer = todo!("implement MakerTransactionSigner with your wallet or HSM");
let live = strata
    .platform_maker_start(
        &PlatformMakerQuickstartRequest {
            market: "SOL/USDC".into(),
            product: PlatformMakerControlProduct::Current,
            spread_bps: 5,
            size: "0.01 SOL".into(),
            duration: Some("10m".into()),
            levels: None,          // defaults to three
            level_step_bps: None,  // defaults to spread_bps
            side: PlatformMakerQuickstartSide::Both,
            async_only: false,
        },
        &maker_signer,
        None,
    )
    .await?;

println!("confirmed at slot {}", live.maker_status.current_slot);

strata
    .platform_maker_stop(
        "SOL/USDC",
        PlatformMakerControlProduct::Current,
        &maker_signer,
        None,
    )
    .await?;
# Ok(())
# }

MakerTransactionSigner exposes only a public key and one sign_transaction(...) callback. Before calling it, the SDK decodes the exact legacy Solana transaction and checks its signer, market, action, expiry, spread, depth, exposure, and every other economic field. platform_maker_start returns only after the chain-derived status matches; platform_maker_stop skips signing when the product is already absent.

Both maker products also expose every low-level control. Request exact transaction bytes, verify and sign those bytes outside Strata, then submit the signed transaction with an idempotency key:

use strata_public_contract::{
    PlatformMakerControlSubmitRequest, PlatformMakerCurrentPrepareRequest,
    PlatformMakerStrandPrepareRequest,
};

# async fn run() -> Result<(), Box<dyn std::error::Error>> {
# let strata = strata_sdk::StrataClient::production()?;
# let market_id = "market_33333333333333333333333333333333";
# let maker_wallet = "5Ji61Fbeb22Yntgv1hhHeSSLgdEdZchHeM1Tv1MjGhSL";
let prepared = strata
    .platform_maker_strand_prepare(
        market_id,
        PlatformMakerStrandPrepareRequest::Cancel {
            maker_wallet: maker_wallet.into(),
        },
    )
    .await?;

// Verify `prepared.transaction_base64`, sign it in your wallet or signer, then:
# let signed_transaction_base64 = "AQ==";
let submitted = strata
    .platform_maker_strand_submit(
        market_id,
        PlatformMakerControlSubmitRequest {
            maker_control_id: prepared.maker_control_id,
            signed_transaction_base64: signed_transaction_base64.into(),
            idempotency_key: "strand-cancel-1".into(),
        },
    )
    .await?;

// Current uses the identical prepare/sign/submit boundary.
let _current = strata
    .platform_maker_current_prepare(
        market_id,
        PlatformMakerCurrentPrepareRequest::Cancel {
            maker_wallet: maker_wallet.into(),
        },
    )
    .await?;
# let _ = submitted;
# Ok(())
# }

Upserts use PlatformMakerStrandPrepareRequest::Upsert or PlatformMakerCurrentPrepareRequest::Upsert. Current bands are priced from the market's live Strata mark; no separate oracle publisher is required. Amounts are base-asset atoms, encoded as unsigned decimal strings. platform_maker_status_for_wallet(...) reports the resulting live controls, remaining exposure, expiry, and health.

For maker funding, initialize the market Vault if needed, submit the active Strand or Current, then use platform_vault_deposit_prepare(...) and platform_vault_submit(...). Available collateral remains in that market while at least one control is live and returns to the canonical Vault balance after the final control is disabled, exhausted, expired, or cancelled.

Token amounts use unsigned decimal strings in atomic units. The client validates contract compatibility, quote binding, lifetime, and economic fields before returning data to the caller.

The 2.0 methods use stable product identities and the Strata book. They expose no private implementation details. Signed account reads use Strata's server time and exact SDK-generated authorization bytes; wallet keys remain in the agent owner's AccountSigner implementation.

maximum_tolerance_bps is yours: the most you accept below the quoted output, 0 by default (DEFAULT_MAXIMUM_TOLERANCE_BPS), applied in minimum_output_atoms and echoed back on the quote. price_impact_pct is measured: how far the quoted fills' average price sits from the best price before your order. They are unrelated — a quote can show 0 impact with a 25 bps tolerance, or 40 bps of impact with 0 tolerance.

Terminal companion

cargo install strata-agent-cli

strata-agent markets
strata-agent quote --market SOL/USDC --side sell --amount-atoms 10000000

Add --json for scripts, pipes, and agents.

Execution uses external-owner implementations of SessionSigner and ExecutionVerifier. execute_quote(...) is one signature per action: it prepares directly from the quote binding (no challenge, no message signature), validates the quote, minimum output, expiry, prepared response, and receipt, and calls the verifier before the session adapter can sign the transaction. It never accepts private key bytes. The agent owner controls permission and signer policy; MCP exposes the same prepare and submit operations when live capabilities allow them. The two-step challenge path (execution_challenge + ExecutionPrepareRequest::Authorized) remains available, with validate_execution_authorization to check the payload before signing it.

Resting-order actions use the same external-owner boundary. The high-level execute_order(...) helper sends the operation itself to orders/prepare (PlatformOrderPrepareRequest::Direct), checks the prepared market, action, and order IDs against the request, then requires an OrderVerifier before requesting the one transaction signature. DefaultTransactionVerifier is the built-in verifier: it decodes the base64 v0/legacy transaction without any RPC and refuses to sign unless the session key co-signs without paying fees, the owner wallet is not asked to sign, the session signs only Vault-delegated instructions of one program (never a system, token, or other well-known program), and every delegated place/cancel matches the requested sides, prices, sizes, order types, order IDs, and market exactly. Supply your own verifier for stricter policies; the context carries the bound operation, market_id, the prepared response, and (two-step path only) the challenge.

TWAP actions follow the same pattern. execute_twap(...) prepares directly from the action, checks the prepared bindings, then requires a TwapVerifier (DefaultTransactionVerifier applies the structural checks) before the session adapter signs the one transaction.

See the workspace README for the complete guide.