RFQ

private/execute_quote

Taker-side call that accepts a specific maker quote and settles the trade atomically. You reference the rfq_id and quote_id and supply the taker’s priced legs, direction, max fee, and EIP-712 signature (signer, signature, nonce, expiry), with an optional taker-protection flag. The signature is verified and the taker fill, maker quote, and RFQ are updated together in one atomic step. Requires trade scope for every instrument in the legs.

POST

private

execute_quote

curl --request POST \
  --url https://api.derive.xyz/v3/private/execute_quote \
  --header 'Content-Type: application/json' \
  --data '
{
  "legs": [
    {
      "amount": "<string>",
      "instrument_name": "<string>",
      "price": "<string>"
    }
  ],
  "max_fee": "<string>",
  "nonce": 123,
  "quote_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
  "rfq_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
  "signature": "<string>",
  "signature_expiry_sec": 123,
  "signer": "<string>",
  "subaccount_id": 1,
  "client": "",
  "enable_taker_protection": false,
  "label": "",
  "referral_code": ""
}
'

import requests

url = "https://api.derive.xyz/v3/private/execute_quote"

payload = {
    "legs": [
        {
            "amount": "<string>",
            "instrument_name": "<string>",
            "price": "<string>"
        }
    ],
    "max_fee": "<string>",
    "nonce": 123,
    "quote_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
    "rfq_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
    "signature": "<string>",
    "signature_expiry_sec": 123,
    "signer": "<string>",
    "subaccount_id": 1,
    "client": "",
    "enable_taker_protection": False,
    "label": "",
    "referral_code": ""
}
headers = {"Content-Type": "application/json"}

response = requests.post(url, json=payload, headers=headers)

print(response.text)

const options = {
  method: 'POST',
  headers: {'Content-Type': 'application/json'},
  body: JSON.stringify({
    legs: [{amount: '<string>', instrument_name: '<string>', price: '<string>'}],
    max_fee: '<string>',
    nonce: 123,
    quote_id: '3c90c3cc-0d44-4b50-8888-8dd25736052a',
    rfq_id: '3c90c3cc-0d44-4b50-8888-8dd25736052a',
    signature: '<string>',
    signature_expiry_sec: 123,
    signer: '<string>',
    subaccount_id: 1,
    client: '',
    enable_taker_protection: false,
    label: '',
    referral_code: ''
  })
};

fetch('https://api.derive.xyz/v3/private/execute_quote', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://api.derive.xyz/v3/private/execute_quote",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "POST",
  CURLOPT_POSTFIELDS => json_encode([
    'legs' => [
        [
                'amount' => '<string>',
                'instrument_name' => '<string>',
                'price' => '<string>'
        ]
    ],
    'max_fee' => '<string>',
    'nonce' => 123,
    'quote_id' => '3c90c3cc-0d44-4b50-8888-8dd25736052a',
    'rfq_id' => '3c90c3cc-0d44-4b50-8888-8dd25736052a',
    'signature' => '<string>',
    'signature_expiry_sec' => 123,
    'signer' => '<string>',
    'subaccount_id' => 1,
    'client' => '',
    'enable_taker_protection' => false,
    'label' => '',
    'referral_code' => ''
  ]),
  CURLOPT_HTTPHEADER => [
    "Content-Type: application/json"
  ],
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

package main

import (
	"fmt"
	"strings"
	"net/http"
	"io"
)

func main() {

	url := "https://api.derive.xyz/v3/private/execute_quote"

	payload := strings.NewReader("{\n  \"legs\": [\n    {\n      \"amount\": \"<string>\",\n      \"instrument_name\": \"<string>\",\n      \"price\": \"<string>\"\n    }\n  ],\n  \"max_fee\": \"<string>\",\n  \"nonce\": 123,\n  \"quote_id\": \"3c90c3cc-0d44-4b50-8888-8dd25736052a\",\n  \"rfq_id\": \"3c90c3cc-0d44-4b50-8888-8dd25736052a\",\n  \"signature\": \"<string>\",\n  \"signature_expiry_sec\": 123,\n  \"signer\": \"<string>\",\n  \"subaccount_id\": 1,\n  \"client\": \"\",\n  \"enable_taker_protection\": false,\n  \"label\": \"\",\n  \"referral_code\": \"\"\n}")

	req, _ := http.NewRequest("POST", url, payload)

	req.Header.Add("Content-Type", "application/json")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

HttpResponse<String> response = Unirest.post("https://api.derive.xyz/v3/private/execute_quote")
  .header("Content-Type", "application/json")
  .body("{\n  \"legs\": [\n    {\n      \"amount\": \"<string>\",\n      \"instrument_name\": \"<string>\",\n      \"price\": \"<string>\"\n    }\n  ],\n  \"max_fee\": \"<string>\",\n  \"nonce\": 123,\n  \"quote_id\": \"3c90c3cc-0d44-4b50-8888-8dd25736052a\",\n  \"rfq_id\": \"3c90c3cc-0d44-4b50-8888-8dd25736052a\",\n  \"signature\": \"<string>\",\n  \"signature_expiry_sec\": 123,\n  \"signer\": \"<string>\",\n  \"subaccount_id\": 1,\n  \"client\": \"\",\n  \"enable_taker_protection\": false,\n  \"label\": \"\",\n  \"referral_code\": \"\"\n}")
  .asString();

require 'uri'
require 'net/http'

url = URI("https://api.derive.xyz/v3/private/execute_quote")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Post.new(url)
request["Content-Type"] = 'application/json'
request.body = "{\n  \"legs\": [\n    {\n      \"amount\": \"<string>\",\n      \"instrument_name\": \"<string>\",\n      \"price\": \"<string>\"\n    }\n  ],\n  \"max_fee\": \"<string>\",\n  \"nonce\": 123,\n  \"quote_id\": \"3c90c3cc-0d44-4b50-8888-8dd25736052a\",\n  \"rfq_id\": \"3c90c3cc-0d44-4b50-8888-8dd25736052a\",\n  \"signature\": \"<string>\",\n  \"signature_expiry_sec\": 123,\n  \"signer\": \"<string>\",\n  \"subaccount_id\": 1,\n  \"client\": \"\",\n  \"enable_taker_protection\": false,\n  \"label\": \"\",\n  \"referral_code\": \"\"\n}"

response = http.request(request)
puts response.read_body

{
  "cancel_reason": "",
  "creation_timestamp": 123,
  "direction": "buy",
  "extra_fee": "<string>",
  "fee": "<string>",
  "fill_pct": "<string>",
  "is_transfer": true,
  "label": "<string>",
  "last_update_timestamp": 123,
  "legs": [
    {
      "amount": "<string>",
      "direction": "buy",
      "instrument_name": "<string>",
      "price": "<string>"
    }
  ],
  "legs_hash": "<string>",
  "liquidity_role": "maker",
  "max_fee": "<string>",
  "mmp": true,
  "nonce": "<string>",
  "quote_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
  "rfq_filled_pct": "<string>",
  "rfq_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
  "signature_expiry_sec": 123,
  "status": "open",
  "subaccount_id": 123
}

Body

application/json

direction

enum<string>

required

Available options:

buy,

sell

legs

object[]

required

Show child attributes

max_fee

string<decimal>

required

Non-negative decimal string of the human value (e.g. "1.5"), up to 12 fractional digits; a string or JSON number is accepted

nonce

integer<int64>

required

quote_id

string<uuid>

required

UUID v4 string

rfq_id

string<uuid>

required

UUID v4 string

signature

string

required

signature_expiry_sec

integer<int64>

required

signer

string

required

20-byte Ethereum address as a 0x-prefixed lowercase hex string.

Required string length: 42

Pattern: ^0x[0-9a-fA-F]{40}$

subaccount_id

integer<uint64>

required

Required range: x >= 0

client

string

default:""

enable_taker_protection

boolean

default:false

label

string

default:""

referral_code

string

default:""

Response

Success

cancel_reason

enum<string>

required

Available options:

user_request,

insufficient_margin,

signed_max_fee_too_low,

mmp_trigger,

cancel_on_disconnect,

session_key_deregistered,

subaccount_withdrawn,

rfq_no_longer_open,

compliance,

validation_failed

creation_timestamp

integer<int64>

required

direction

enum<string>

required

Available options:

buy,

sell

extra_fee

string<decimal>

required

Non-negative decimal string of the human value (e.g. "1.5"), up to 12 fractional digits; a string or JSON number is accepted

fee

string<decimal>

required

Non-negative decimal string of the human value (e.g. "1.5"), up to 12 fractional digits; a string or JSON number is accepted

fill_pct

string<decimal>

required

Non-negative decimal string of the human value (e.g. "1.5"), up to 12 fractional digits; a string or JSON number is accepted

is_transfer

boolean

required

label

string

required

last_update_timestamp

integer<int64>

required

legs

object[]

required

Show child attributes

legs_hash

string

required

liquidity_role

enum<string>

required

Available options:

maker,

taker

max_fee

string<decimal>

required

Non-negative decimal string of the human value (e.g. "1.5"), up to 12 fractional digits; a string or JSON number is accepted

mmp

boolean

required

nonce

string

required

quote_id

string<uuid>

required

UUID v4 string

rfq_filled_pct

string<decimal>

required

Cumulative fraction of the RFQ filled after this execution, as a decimal string (e.g. "0.5" = 50% filled).

rfq_id

string<uuid>

required

UUID v4 string

signature_expiry_sec

integer<int64>

required

status

enum<string>

required

Available options:

open,

filled,

cancelled,

expired

subaccount_id

integer<int64>

required

private/execute_quote

curl --request POST \
  --url https://api.derive.xyz/v3/private/execute_quote \
  --header 'Content-Type: application/json' \
  --data '
{
  "legs": [
    {
      "amount": "<string>",
      "instrument_name": "<string>",
      "price": "<string>"
    }
  ],
  "max_fee": "<string>",
  "nonce": 123,
  "quote_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
  "rfq_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
  "signature": "<string>",
  "signature_expiry_sec": 123,
  "signer": "<string>",
  "subaccount_id": 1,
  "client": "",
  "enable_taker_protection": false,
  "label": "",
  "referral_code": ""
}
'

import requests

url = "https://api.derive.xyz/v3/private/execute_quote"

payload = {
    "legs": [
        {
            "amount": "<string>",
            "instrument_name": "<string>",
            "price": "<string>"
        }
    ],
    "max_fee": "<string>",
    "nonce": 123,
    "quote_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
    "rfq_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
    "signature": "<string>",
    "signature_expiry_sec": 123,
    "signer": "<string>",
    "subaccount_id": 1,
    "client": "",
    "enable_taker_protection": False,
    "label": "",
    "referral_code": ""
}
headers = {"Content-Type": "application/json"}

response = requests.post(url, json=payload, headers=headers)

print(response.text)

const options = {
  method: 'POST',
  headers: {'Content-Type': 'application/json'},
  body: JSON.stringify({
    legs: [{amount: '<string>', instrument_name: '<string>', price: '<string>'}],
    max_fee: '<string>',
    nonce: 123,
    quote_id: '3c90c3cc-0d44-4b50-8888-8dd25736052a',
    rfq_id: '3c90c3cc-0d44-4b50-8888-8dd25736052a',
    signature: '<string>',
    signature_expiry_sec: 123,
    signer: '<string>',
    subaccount_id: 1,
    client: '',
    enable_taker_protection: false,
    label: '',
    referral_code: ''
  })
};

fetch('https://api.derive.xyz/v3/private/execute_quote', options)
  .then(res => res.json())
  .then(res => console.log(res))
  .catch(err => console.error(err));

<?php

$curl = curl_init();

curl_setopt_array($curl, [
  CURLOPT_URL => "https://api.derive.xyz/v3/private/execute_quote",
  CURLOPT_RETURNTRANSFER => true,
  CURLOPT_ENCODING => "",
  CURLOPT_MAXREDIRS => 10,
  CURLOPT_TIMEOUT => 30,
  CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
  CURLOPT_CUSTOMREQUEST => "POST",
  CURLOPT_POSTFIELDS => json_encode([
    'legs' => [
        [
                'amount' => '<string>',
                'instrument_name' => '<string>',
                'price' => '<string>'
        ]
    ],
    'max_fee' => '<string>',
    'nonce' => 123,
    'quote_id' => '3c90c3cc-0d44-4b50-8888-8dd25736052a',
    'rfq_id' => '3c90c3cc-0d44-4b50-8888-8dd25736052a',
    'signature' => '<string>',
    'signature_expiry_sec' => 123,
    'signer' => '<string>',
    'subaccount_id' => 1,
    'client' => '',
    'enable_taker_protection' => false,
    'label' => '',
    'referral_code' => ''
  ]),
  CURLOPT_HTTPHEADER => [
    "Content-Type: application/json"
  ],
]);

$response = curl_exec($curl);
$err = curl_error($curl);

curl_close($curl);

if ($err) {
  echo "cURL Error #:" . $err;
} else {
  echo $response;
}

package main

import (
	"fmt"
	"strings"
	"net/http"
	"io"
)

func main() {

	url := "https://api.derive.xyz/v3/private/execute_quote"

	payload := strings.NewReader("{\n  \"legs\": [\n    {\n      \"amount\": \"<string>\",\n      \"instrument_name\": \"<string>\",\n      \"price\": \"<string>\"\n    }\n  ],\n  \"max_fee\": \"<string>\",\n  \"nonce\": 123,\n  \"quote_id\": \"3c90c3cc-0d44-4b50-8888-8dd25736052a\",\n  \"rfq_id\": \"3c90c3cc-0d44-4b50-8888-8dd25736052a\",\n  \"signature\": \"<string>\",\n  \"signature_expiry_sec\": 123,\n  \"signer\": \"<string>\",\n  \"subaccount_id\": 1,\n  \"client\": \"\",\n  \"enable_taker_protection\": false,\n  \"label\": \"\",\n  \"referral_code\": \"\"\n}")

	req, _ := http.NewRequest("POST", url, payload)

	req.Header.Add("Content-Type", "application/json")

	res, _ := http.DefaultClient.Do(req)

	defer res.Body.Close()
	body, _ := io.ReadAll(res.Body)

	fmt.Println(string(body))

}

HttpResponse<String> response = Unirest.post("https://api.derive.xyz/v3/private/execute_quote")
  .header("Content-Type", "application/json")
  .body("{\n  \"legs\": [\n    {\n      \"amount\": \"<string>\",\n      \"instrument_name\": \"<string>\",\n      \"price\": \"<string>\"\n    }\n  ],\n  \"max_fee\": \"<string>\",\n  \"nonce\": 123,\n  \"quote_id\": \"3c90c3cc-0d44-4b50-8888-8dd25736052a\",\n  \"rfq_id\": \"3c90c3cc-0d44-4b50-8888-8dd25736052a\",\n  \"signature\": \"<string>\",\n  \"signature_expiry_sec\": 123,\n  \"signer\": \"<string>\",\n  \"subaccount_id\": 1,\n  \"client\": \"\",\n  \"enable_taker_protection\": false,\n  \"label\": \"\",\n  \"referral_code\": \"\"\n}")
  .asString();

require 'uri'
require 'net/http'

url = URI("https://api.derive.xyz/v3/private/execute_quote")

http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true

request = Net::HTTP::Post.new(url)
request["Content-Type"] = 'application/json'
request.body = "{\n  \"legs\": [\n    {\n      \"amount\": \"<string>\",\n      \"instrument_name\": \"<string>\",\n      \"price\": \"<string>\"\n    }\n  ],\n  \"max_fee\": \"<string>\",\n  \"nonce\": 123,\n  \"quote_id\": \"3c90c3cc-0d44-4b50-8888-8dd25736052a\",\n  \"rfq_id\": \"3c90c3cc-0d44-4b50-8888-8dd25736052a\",\n  \"signature\": \"<string>\",\n  \"signature_expiry_sec\": 123,\n  \"signer\": \"<string>\",\n  \"subaccount_id\": 1,\n  \"client\": \"\",\n  \"enable_taker_protection\": false,\n  \"label\": \"\",\n  \"referral_code\": \"\"\n}"

response = http.request(request)
puts response.read_body

{
  "cancel_reason": "",
  "creation_timestamp": 123,
  "direction": "buy",
  "extra_fee": "<string>",
  "fee": "<string>",
  "fill_pct": "<string>",
  "is_transfer": true,
  "label": "<string>",
  "last_update_timestamp": 123,
  "legs": [
    {
      "amount": "<string>",
      "direction": "buy",
      "instrument_name": "<string>",
      "price": "<string>"
    }
  ],
  "legs_hash": "<string>",
  "liquidity_role": "maker",
  "max_fee": "<string>",
  "mmp": true,
  "nonce": "<string>",
  "quote_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
  "rfq_filled_pct": "<string>",
  "rfq_id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
  "signature_expiry_sec": 123,
  "status": "open",
  "subaccount_id": 123
}

HTTP & WS Methods

WS-only Methods

WS Subscriptions

private/execute_quote

Body

Response