Concepts

The builders read the venue from chain when they build, never from the index, so a coin that graduated a second ago is bought on its pool. A coin's graduation block says when its curve completed and when it moved.

Every amount is an integer in base units, sent as a decimal string. No floats anywhere: parse them with BigInt.

Prices are priceZecE9: ZEC base units per whole token, times 10⁹, so a price far below one base unit keeps its digits. "31200000000" is 31.2 base units per token, 0.000000312 ZEC.

const zecPerToken = Number(BigInt(coin.priceZecE9)) / 1e9 / 1e8; // for display only
const zec = (BigInt(tokens) * BigInt(coin.priceZecE9)) / 10n ** 15n; // ZEC base units for `tokens` base units

Times are ISO 8601 in UTC; candle times are unix seconds.

Every coin pays a 2.00% creator fee on every trade, in ZEC. It splits the same way whoever built the trade:

How it is enforced. A Sapling coin's creator on pump.fun is not a wallet: it is the coin's CoinAuthority, a program address (["coin-authority", mint]) under Sapling's vault program. So pump.fun pays the creator fee of every trade, made from anywhere (sapling.cash, this API, Jupiter, a bot, pump.fun's own page), into Sapling's program, and the program splits it. Each destination is fixed in the program's config; anyone can run the split.

No integrator cut. There is no referral and no fee field. A coin planted or traded through the API pays exactly what one planted on sapling.cash pays. pump.fun charges its own protocol fee on top, as on any pump.fun coin.

The planter chooses where the 40% goes, once, in the planting itself:

• me: the wallet that plants the coin.
• wallet:<address>: another wallet. That wallet controls the share from the start.
• holders: holder rewards. Sapling pays every holder with $20 or more on every run; holders claim nothing. Permanent.

Only the current payee can change it later: to another wallet, or to holder rewards for good. Whoever builds the planting chooses the payee, so check it before you sign: why the payee matters.

Every builder answers transactions with empty signature slots. Sapling's servers sign nothing and hold no key of yours, so a breach of the API cannot move anyone's funds.

• Your user's wallet signs, and shows what the transaction does before it is approved.
• A planting's mint key is made on your side (the SDK does it). The API sees only its public key. Once the planting lands the key has no power left: pump.fun holds the mint authority, and the payee can be declared only once.
• Before signing, you can check every transaction against your own request, locally, without trusting the API: verify before you sign.