Two ledger writes per game cycle. Nothing else is written.

Opens a tenant and returns its key once. The key is not stored and cannot be retrieved again.

{ "tenantId": "yourgame",        // [a-z0-9-], 3-32 chars
  "tenantParty": "yourgame::1220ab...",  // must already exist
  "maxWrites": 60, "quotaWindowSeconds": 60 }

201 -> { "tenantId", "tenantParty", "secret", "createdAt" }
400 -> tenantParty unknown to this participant
409 -> tenant already exists

Lists tenants. Key hashes are never included in any response.

Issues a new key. The previous key stops working on the same call - there is no grace period.

Blocks the tenant from acting. Players keep every asset they already own.

{ "suspended": true, "reason": "under review" }

Grants minting inside the tenant's namespace. Above the quota, minting needs explicit approval.

{ "registryCid": "00d37a98...",
  "mintQuota": 100, "quotaWindowSeconds": 3600 }

201 -> { "tenantId", "mintRightCid", "updateId" }

Creates the ecosystem asset registry. Once per deployment. Returns contractId.

Creates a venue and its policy. Dry-run venues must be prefixed dryrun- and cannot charge fees or pay out.

{ "venueId": "yourgame-arena", "mode": "ModeLive",
  "gameCodes": ["yourgame-runner-v1"],
  "policy": { "minStakeAmount": "10.0", "minPlatformFee": "0.01",
              "minLockSeconds": 14400, "minCycleSeconds": 600,
              "cooldownSeconds": 30, "concurrencyLimit": 1 } }

Confirms the key and returns your namespace and quota. No quota cost. Use it as a health check.

Validates instrument ids against isolation rules. No quota, no ledger write.

{ "instrumentIds": [ { "admin": "reg::1220ee...", "id": "yourgame/gold" } ] }

200 -> { "ok": true, "quotaRemaining", "quotaResetAt" }
403 -> isolation violation, with the offending id named

Parses one instrument id and reports its shape.

200 -> { "ok": true, "tenantId": "yourgame",
        "localId": "sword-of-dawn", "instanceId": "4a91c8f2",
        "assetClass": "unique" }

Opens a player's asset account. This is the only call the player signs; afterwards the registry can mint to them without a signature per reward.

{ "playerParty": "alice::1220ab...", "accountId": "alice-1" }

201 -> { "playerParty", "accountCid", "updateId" }

Mints into a player account. localId is namespaced automatically - send gold, receive yourgame/gold. Append #instance for a unique asset, whose amount must be "1.0".

{ "accountCid": "00c8a438...",
  "localId": "sword-of-dawn#4a91c8f2",
  "amount": "1.0",
  "assetMeta": { "attack": "9", "tier": "legendary" } }

201 -> { "instrumentId": { "admin", "id" }, "assetCid", "updateId" }
409 -> no mint right granted yet
500 -> quota exhausted (contract-level); request approval

A player's holdings, filtered to your namespace. Safe to poll; costs no quota.

200 -> { "party", "count",
        "assets": [ { "contractId", "instrumentId", "amount" } ] }

Sets an asset aside for a settlement. Both sides of a trade must allocate with the same settlementId, using legId "offer" and "ask". An allocated asset cannot be allocated again.

{ "registryCid": "00d37a98...", "assetCid": "00b480a9...",
  "sender": "alice::1220ab...", "receiver": "bob::1220cd...",
  "localId": "sword-of-dawn#4a91c8f2", "amount": "1.0",
  "settlementId": "trade-8814", "legId": "offer" }

201 -> { "allocationCid", "legId", "instrumentId", "updateId" }

Two legs minimum - a one-sided gift cannot be written with this primitive. Set taker to null for an open offer.

{ "tradeId": "trade-8814", "maker": "alice::...", "taker": "bob::...",
  "tradeDigest": "<64-char sha256>",
  "legs": {
    "offer": { "sender": "alice::...", "receiver": "bob::...",
                "instrumentId": {...}, "amount": "1.0" },
    "ask":   { "sender": "bob::...", "receiver": "alice::...",
                "instrumentId": {...}, "amount": "300.0" } } }

Body { "acceptor": "bob::..." }. Returns tradeCid. Fails after the proposal expires.

Executes every leg in one transaction. Allocation keys must match leg keys exactly - a missing leg is rejected, never silently skipped.

{ "allocations": { "offer": "00fb0ae4...", "ask": "00881beb..." },
  "parties": ["alice::...", "bob::..."] }

200 -> { "settled": true, "updateId",
        "created": [ { "instrumentId", "amount", "owner" } ] }

Issues player slots. The slot is what enforces the concurrency limit - a second commit on a consumed slot is rejected by the ledger, not by this service.

{ "grants": [ { "player": "alice::...", "concurrencyIndex": 0,
                "tier": "silver" } ] }

Write 1. Fix entryDigest before play so entry conditions cannot be retrofitted afterwards.

{ "entitlementCid": "002769ea...", "player": "alice::...",
  "gameCode": "yourgame-runner-v1", "cycleId": "run-3f2a...",
  "entryDigest": "<64-char sha256>",
  "stakeAmount": "100.0", "lockSeconds": 14400 }

201 -> { "cycleId", "stakeCid", "custodyTag", "lockExpiresAt", "updateId" }

Write 2. If you send revealedOutcome, the ledger recomputes its hash and rejects a mismatch. Fails before minCycleSeconds have elapsed.

{ "player": "alice::...", "disposition": "ReturnedInFull",
  "returnedAmount": "100.0", "forfeitedAmount": "0.0",
  "outcomeDigest": "<64-char sha256>",
  "revealedOutcome": "{\"score\":4200,\"result\":\"win\"}" }

200 -> { "settled": true, "entitlementCid", "updateId" }

Reads the settlement out of the transaction's exercise node. This data does not appear in the default ledger event stream - this endpoint is how you get it.

200 -> { "choice": "GameStake_Settle", "disposition",
        "returnedAmount", "forfeitedAmount", "payoutAmount",
        "outcomeDigest", "revealedOutcome" }