Quotes

Request a signed quote to lock a conversion rate for a set window. A quote-based Autoramp holds several active quotes at once, so you keep one Autoramp running over time without recreating it.

How It Works

A quote binds a conversion rate between two currencies for a limited window. You request a quote with GET /api/autoramps/quote, then pass the signed result to POST /api/autoramps to create an Autoramp that executes at the locked rate. Once the Autoramp exists, keep attaching new quotes to it with POST /api/autoramps/{autoramp_id}/quotes. Each attached quote stays active until its own valid_until passes. When a deposit arrives, MoonPay Enterprise picks the newest active quote whose amount_in value and source currency match the deposit. Deposits that match no quote, or only an expired one, are returned to the sender. When a deposit matches a quote whose rate lock has expired but whose valid_until has not, the quote’s rate_expiry_policy decides what happens (see Expiry policies).

Without a quote, a standing Autoramp converts at the current market rate when the deposit is processed. With one or more active quotes, the deposit executes at the locked rate of the matching quote. See Standing or quote-based.

Key parameters

Rate lock duration: the window where the quoted rate and fee are guaranteed. Deposits that match within it execute at the quoted price. Validity period: the total time the quote stays usable, ending at valid_until. Deposits arriving after it don’t match the quote. Exact amount: a deposit must equal the quote’s amount_in exactly. A transfer that arrives short, for example after bank charges taken off a SEPA or wire transfer, matches no quote and is returned. Validity cap: valid_until is at most 24 hours after the quote, whatever the rate lock allows. Minimum amount: a quote must be worth at least 1 EUR. Smaller amounts return 400 with "Quote amount must be at least 1 EUR".

Rate lock duration caps

The rate_lock_duration_minutes parameter is optional. If omitted, the quote uses the maximum allowed for the pair. Larger values are silently clamped to the cap.

Currency pair	Max rate lock
Pegged pair (EUR ↔ EUR-stablecoin, USD ↔ USD-stablecoin)	2 days, but the quote’s validity ends after 24 hours
Other fiat ↔ stablecoin (e.g. EUR ↔ USDC)	10 minutes
Stablecoin ↔ stablecoin (e.g. USDC ↔ USDT, USDC ↔ EURC)	10 minutes
Any other pair (e.g. EUR ↔ ETH, BTC ↔ USDC)	1 minute

Expiry policies

What happens when funds arrive after the rate lock expires depends on the rate_expiry_policy you set.

Return
Slippage

The quote is valid until the rate lock or expiry_in_hours ends, whichever comes first. Funds arriving after that are returned.Example:

Quote: 100 EUR for 108 USDC
Rate lock: 10 minutes, validity: 10 minutes
Funds arrive at 12 minutes
Result: returned (both windows expired)

The validity period extends beyond the rate lock. Funds arriving after the lock are repriced at the current market rate, with fees recalculated, and execute if the new rate is within slippage_tolerance_in_bips of the quoted rate. Otherwise they are returned. There is no automatic requote.A repriced deposit’s amount_out can differ from the quote’s, because both the rate and the fees are recalculated.Example (within tolerance):

Quote: 100 EUR for 108 USDC, 5 bips slippage
Rate lock: 10 minutes, validity: 1 hour
Funds arrive at 20 minutes, market rate within 5 bips
Result: executes at market rate

Example (outside tolerance):

Same setup, but the market rate moved more than 5 bips from the quote
Result: returned

Prerequisites

The customer is Active

The customer’s status is Active: terms signed, identification approved, and nothing outstanding in GET /api/customers/{customer_id}/required-signings. Otherwise POST /api/autoramps returns 403 with "Customer is not active". See Onboarding.

The rail is Active for this customer

An Active customer can still be waiting on a specific rail. Read GET /api/customers/{customer_id}/abilities and create the Autoramp only once its rail reads Active. A rail that isn’t Active yet returns 422 with "Customer is unable to complete the action. Consult the customer abilities API". Subscribe to the customer_fiat_abilities webhook instead of polling. See Ability Status.

The recipient is registered

Register the wallet or bank account that receives the converted funds before you create the Autoramp, and pass the same details in recipient_account:

Wallet: see Crypto Addresses. An unknown wallet returns 400 with "Recipient wallet not verified for customer".
Bank account: see Fiat Addresses. It must reach Registered. An account that isn’t registered yet returns 400 with "recipient fiat account not verified".

Quote requests take the registered recipient’s ID as recipient_account_id. They fail if it points to an address that isn’t registered yet.

Create an Autoramp with a quote

Create a quote

GET /api/autoramps/quoteRequest a signed quote that defines the conversion rate, lock duration, validity period, and fees. Pass it unchanged when you create the Autoramp.

API Example

curl -X GET "https://api.sandbox.iron.xyz/api/autoramps/quote?customer_id=<your-customer-id>&source_currency_code=USDC&source_currency_chain=Ethereum&destination_currency_code=EUR&recipient_account_id=<your-fiat-address-id>&amount_out=100&rate_lock_duration_minutes=10&rate_expiry_policy=Return&expiry_in_hours=1&is_third_party=false" \
  -H "Accept: application/json; charset=utf-8" \
  -H "X-API-Key: <your-api-key>"

Example response:

{
  "amount_in": {
    "amount": "111.19863",
    "currency": { "blockchain": "Ethereum", "token": "USDC", "type": "Crypto" }
  },
  "amount_out": {
    "amount": "100",
    "currency": { "code": "EUR", "type": "Fiat" }
  },
  "customer_id": "<your-customer-id>",
  "deposit_account_type": null,
  "destination_currency": { "code": "EUR", "type": "Fiat" },
  "fee": {
    "banking_fee": { "amount": "0.326434", "currency": { "blockchain": "Ethereum", "token": "USDC", "type": "Crypto" } },
    "iron_fee": { "amount": "0.326434", "currency": { "blockchain": "Ethereum", "token": "USDC", "type": "Crypto" } },
    "network_fee": { "amount": "1.734570", "currency": { "blockchain": "Ethereum", "token": "USDC", "type": "Crypto" } },
    "partner_fee": { "amount": "0", "currency": { "blockchain": "Ethereum", "token": "USDC", "type": "Crypto" } },
    "total_fee": { "amount": "2.387438", "currency": { "blockchain": "Ethereum", "token": "USDC", "type": "Crypto" } }
  },
  "fee_settlement": "deductedImmediately",
  "is_third_party": false,
  "quote_id": "e8cd73a4-54cc-4a34-916d-238c5ce5f898",
  "rate": "0.919023105",
  "rate_expiry_policy": "Return",
  "rate_lock_valid_until": "2026-03-14T11:37:24.250798+00:00",
  "recipient_account": {
    "type": "Fiat",
    "account_identifier": { "type": "SEPA", "iban": "DE89370400440532013000" }
  },
  "signature": "36665918454471c078724046bcb82698eac2fb6f5f91c58a0f1a3923c5d95a28",
  "slippage_tolerance_in_bips": null,
  "source_currency": { "blockchain": "Ethereum", "token": "USDC", "type": "Crypto" },
  "valid_until": "2026-03-14T11:37:24.250798+00:00",
  "additional_in_currencies": null,
  "pay_by_reference": null
}

The fee object is trimmed. amount_in is what your customer sends to receive exactly amount_out.

Create the Autoramp with the quote

POST /api/autorampsSubmit the signed quote payload to create a quote-based Autoramp. The Autoramp matches inbound deposits against the active quotes attached to it.

API Example

curl -X POST "https://api.sandbox.iron.xyz/api/autoramps" \
  -H "Content-Type: application/json; charset=utf-8" \
  -H "Idempotency-Key: $(uuidgen)" \
  -H "X-API-Key: <your-api-key>" \
  -d '<signed-quote-payload-from-step-1>'

Example response:

{
  "id": "f8f9a8c7-d8b1-4f1a-8f15-7e6c8a1a8e50",
  "status": "Authorized",
  "source": "Quote",
  "deposit_rails": [],
  "quotes": [ { "quote_id": "e8cd73a4-54cc-4a34-916d-238c5ce5f898", "...": "..." } ],
  "created_at": "2026-01-20T12:34:56Z"
}

The Autoramp starts in Authorized with empty deposit_rails, like any Autoramp. Show the deposit details once it’s Approved. The quotes array lists every active quote on the Autoramp. The legacy quote field is deprecated; read quotes instead.

POST /api/autoramps requires an Idempotency-Key header. A missing key returns 400. Only successful responses are cached, so a retry after an error runs again. See Idempotency.

The quote is digitally signed. Pass it verbatim into POST /api/autoramps. Any change, such as edited values or omitted fields, returns 400 with "Invalid signature". The quote’s rate lock must also still be running when you submit it: a quote past rate_lock_valid_until returns 400 with "Rate lock has expired", even under the Slippage policy.

For offramp quotes, send is_third_party=false. A quote requested with is_third_party=true carries that flag into the Autoramp, and creating it fails, because only onramp Autoramps accept third-party sources.

Attach a new quote to an existing Autoramp

After the Autoramp exists, attach further quotes to keep it executing at locked rates over time. This works only on quote-based Autoramps (source is Quote) that are Approved. An Autoramp that is still Authorized returns 400 with "Autoramp is not approved", and a standing Autoramp returns "Cannot attach quotes to a standalone autoramp".

Use the right quote object. This endpoint takes the SignedAutorampRateQuote returned by GET /api/autoramps/{autoramp_id}/quote, not the SignedAutorampQuote returned by GET /api/autoramps/quote. The creation quote has no autoramp_id field, so submitting it here fails with Expected input type "string_uuid", found null.

Get a signed rate quote

GET /api/autoramps/{autoramp_id}/quoteReturns a SignedAutorampRateQuote. The Autoramp’s recipient, fee profile, and destination currency are reused automatically, so this endpoint has a smaller parameter surface than the initial quote endpoint.The source_currency_code must be one of the Autoramp’s allowed input currencies: the original source_currency plus any entries you registered in additional_in_currencies at creation time.

API Example

curl -X GET "https://api.sandbox.iron.xyz/api/autoramps/<autoramp-id>/quote?source_currency_code=USDC&source_currency_chain=Ethereum&amount_out=100&rate_lock_duration_minutes=10&rate_expiry_policy=Return&expiry_in_hours=1" \
  -H "Accept: application/json; charset=utf-8" \
  -H "X-API-Key: <your-api-key>"

Attach the signed quote

POST /api/autoramps/{autoramp_id}/quotesSubmit the signed rate quote returned in the previous step. Requires an Idempotency-Key header. Returns 201 with the updated Autoramp (its quotes array now includes the new quote).

API Example

curl -X POST "https://api.sandbox.iron.xyz/api/autoramps/<autoramp-id>/quotes" \
  -H "Content-Type: application/json; charset=utf-8" \
  -H "Idempotency-Key: $(uuidgen)" \
  -H "X-API-Key: <your-api-key>" \
  -d '<signed-rate-quote-payload>'

Attaching a new quote that shares amount_in value and source currency with an existing active quote supersedes the older one for incoming deposits. The older quote stays in quotes until its own valid_until passes; nothing is deleted retroactively.

Staged setup pattern. Create the Autoramp with any initial quote to surface the deposit details early, so the payer can whitelist them or finish their onboarding. Once the real amount is known, attach the production quote. If the initial quote expired first, the Autoramp reads Cancelled (dormant) with no webhook. Attaching the new quote still works and brings it back to Approved, so don’t wait for Approved before you attach.

When quotes run out

A quote-based Autoramp with no active quote left goes dormant: the API reports it as Cancelled, and deposits don’t match it. Attach a new quote and it returns to Approved with the same deposit details. A dormant onramp Autoramp is cancelled for good after 7 days. See Autoramp Status.

Fees on a quote

The quote’s fee object shows what the transfer carries, in the source currency. transaction_fee, banking_fee, and network_fee count only fees that are deducted from the transfer. Fees your fee profile settles later don’t appear in them: they show up on your monthly invoice instead. See Fees and Invoices and Fees.

Multi-currency input

By default, a quote-based Autoramp only accepts deposits in its original source_currency. To let it accept additional crypto input currencies, and request quotes for them later, pass additional_in_currency_codes and additional_in_currency_chains when you call GET /api/autoramps/quote. A fiat source can’t take additional currencies. The two parameters are index-aligned arrays of up to 16 entries each. The chain at position i describes the code at position i. The list must not include the source_currency itself and must not contain duplicates. After the Autoramp is created, request a quote for any of the additional currencies via GET /api/autoramps/{autoramp_id}/quote and attach it via POST /api/autoramps/{autoramp_id}/quotes.

API Example

curl -X GET "https://api.sandbox.iron.xyz/api/autoramps/quote?customer_id=<your-customer-id>&source_currency_code=USDC&source_currency_chain=Ethereum&destination_currency_code=EUR&recipient_account_id=<your-fiat-address-id>&amount_out=100&rate_expiry_policy=Return&expiry_in_hours=1&is_third_party=false&additional_in_currency_codes=USDT,USDC&additional_in_currency_chains=Ethereum,Polygon" \
  -H "Accept: application/json; charset=utf-8" \
  -H "X-API-Key: <your-api-key>"

Query parameters: `GET /api/autoramps/quote`

Parameter	Type	Required	Description
`customer_id`	string (UUID)	Yes	Unique identifier for the customer.
`source_currency_code`	string	Yes	Currency or token being sent (e.g. `USDC`, `USD`).
`source_currency_chain`	string	Conditional	Blockchain for the source currency. Required for crypto source currencies.
`destination_currency_code`	string	Yes	Currency or token being received (e.g. `EUR`, `GBP`).
`destination_currency_chain`	string	Conditional	Blockchain for the destination currency. Required for crypto destination currencies.
`recipient_account_id`	string (UUID)	Yes	UUID of a registered recipient account (`fiat_address` or `verified_crypto_address`).
`recipient_account`	string	No	Deprecated. Use `recipient_account_id` instead. Ignored when `recipient_account_id` is provided.
`amount_out`	string	Conditional	Desired output amount in the destination currency. Set either `amount_out` or `amount_in`, not both.
`amount_in`	string	Conditional	Desired input amount in the source currency. Set either `amount_in` or `amount_out`, not both.
`rate_lock_duration_minutes`	integer	No	Duration the rate is locked. Defaults to the pair’s maximum; values above the cap are clamped. See the rate-lock cap table above.
`rate_expiry_policy`	string	Yes	What happens when the rate lock expires. One of `Return`, `Slippage`.
`slippage_tolerance_in_bips`	string	Conditional	Allowable deviation from quoted rate (1 bip = 0.01%). Required when `rate_expiry_policy` is `Slippage`.
`is_third_party`	boolean	Yes	Whether the Autoramp accepts third-party deposits. Onramp quotes only; send `false` for offramp and swap quotes.
`expiry_in_hours`	integer	Yes	Duration the quote is valid. Values above 24 are clamped to 24. Under `Return`, validity ends with the rate lock.
`additional_in_currency_codes`	string array	No	Additional crypto input currencies to allow on the Autoramp beyond `source_currency`. Up to 16, must not duplicate or include `source_currency`. Index-aligned with `additional_in_currency_chains`. Pass as a single comma-separated value (e.g. `USDT,USDC`), not repeated query keys.
`additional_in_currency_chains`	string array	No	Chains for each entry in `additional_in_currency_codes`. Same length, index-aligned. Pass as a single comma-separated value (e.g. `Ethereum,Polygon`), not repeated query keys.
`fee_profile_id`	string (UUID)	No	Transactional fee profile to price the quote with and apply to the Autoramp. Defaults to the Autoramp’s matching profile. See Fees.
`batch_payout`	boolean	No	Fiat destinations only. Batch the Autoramp’s payouts once a day. See End of Day Settlement.
`external_id`	string	No	Your own ID for the Autoramp created from this quote.
`sepa_payment_reference`, `ach_payment_reference`, `fps_payment_reference`, `wire_message`, `swift_payment_reference`	string	No	Payout Autoramps only. The reference sent with each payout, in the field for the bank account’s rail. Same rules as on `POST /api/autoramps`. See Payouts.
`swift_purpose_code`	string	Conditional	SWIFT payouts only. Required for banks in `AE`, `KR`, and `PH`, rejected elsewhere. See USD payouts.
`pay_by_reference`	boolean	No	If `true`, the Autoramp uses pay by reference. See Autoramps → pay by reference for eligibility rules and the `inbound_payment_reference` response field. Defaults to `false`.

Every parameter above is part of the signed quote. On a quote-based Autoramp, set external_id, fee_profile_id, batch_payout, pay_by_reference, swift_purpose_code, and the payout reference fields here. Adding them later on POST /api/autoramps returns 400 with "Invalid signature".

Query parameters: `GET /api/autoramps/{autoramp_id}/quote`

The Autoramp’s recipient, destination currency, and fee profile are reused, so only pricing-related parameters are needed.

Parameter	Type	Required	Description
`source_currency_code`	string	Yes	Currency or token being sent. Must be one of the Autoramp’s allowed input currencies.
`source_currency_chain`	string	Conditional	Blockchain for the source currency. Required for crypto source currencies.
`amount_out`	string	Conditional	Desired output amount. Set either `amount_out` or `amount_in`, not both.
`amount_in`	string	Conditional	Desired input amount. Set either `amount_in` or `amount_out`, not both.
`rate_lock_duration_minutes`	integer	No	Optional. Defaults and clamps as on the initial endpoint.
`rate_expiry_policy`	string	Yes	One of `Return`, `Slippage`.
`slippage_tolerance_in_bips`	string	Conditional	Required when `rate_expiry_policy` is `Slippage`.
`expiry_in_hours`	integer	Yes	Max 24. Unlike the initial endpoint, a larger value returns `400` instead of being clamped.
`payment_reference`	string	No	Payout reference applied to transactions matched to this quote. Overrides the Autoramp’s payment reference.

Check rate_lock_valid_until and valid_until before submitting. Expired quotes return 400.
Use idempotency keys for POST /api/autoramps and POST /api/autoramps/{autoramp_id}/quotes.

Error Handling

Client errors return a plain string body.

Status	Body	Cause
`400`	`"Rate lock has expired"`	The quote’s `rate_lock_valid_until` passed before you created the Autoramp or attached the quote
`400`	`"Autoramp validity has expired"`	The quote’s `valid_until` passed
`400`	`"Invalid signature"`	The signed payload was changed
`400`	`"Quote amount must be at least 1 EUR"`	The quoted amount is worth less than 1 EUR
`400`	`"Autoramp is not approved"`	Attaching to an Autoramp that isn’t `Approved` yet
`400`	`"Cannot attach quotes to a standalone autoramp"`	Attaching to a standing Autoramp
`400`	`"Cannot get a rate quote for a standalone autoramp"`	`GET /api/autoramps/{autoramp_id}/quote` on a standing Autoramp
`400`	`"source_currency is not an allowed input currency for this autoramp"`	The currency isn’t the Autoramp’s source or one of its additional input currencies
`400`	`"Quote autoramp_id does not match the path"`	The rate quote belongs to a different Autoramp
`400`	`Expected input type "string_uuid", found null.`	A creation quote (`SignedAutorampQuote`) was sent to the attach endpoint
`401`		Missing or invalid API key
`404`		`autoramp_id` not found
`400`	`"One of amount_in or amount_out has to be provided"`	Neither amount was sent
`400`	`"amount_in and amount_out cannot both be provided"`	Both amounts were sent
`400`	`"Slippage policy requires a slippage tolerance"`	`Slippage` without `slippage_tolerance_in_bips`
`400`	`"Invalid rate lock duration"`	`rate_lock_duration_minutes` isn’t a usable value
`400`	`"additional_in_currencies must not include source_currency"`	The source currency is repeated in the additional list
`400`	`"GBP is disabled for this partner"`	GBP isn’t enabled for your account
`409`	`"Quote already attached to autoramp"`	The same quote was attached twice

400 Bad Request

"Rate lock has expired"

Autoramp

Create, edit, and cancel Autoramps

Autoramp Status

Every status an Autoramp moves through

Getting Started

Coverage

Onboarding & Compliance

Virtual Accounts & Global Payouts

Issuance

Wallets

Webhooks & Events

Billing & Settlement

Support

How It Works

Key parameters

Rate lock duration caps

Expiry policies

Prerequisites

Create an Autoramp with a quote

Attach a new quote to an existing Autoramp

When quotes run out

Fees on a quote

Multi-currency input

Query parameters: `GET /api/autoramps/quote`

Query parameters: `GET /api/autoramps/{autoramp_id}/quote`

Error Handling

Autoramp

Autoramp Status

​How It Works

​Key parameters

​Rate lock duration caps

​Expiry policies

​Prerequisites

​Create an Autoramp with a quote

​Attach a new quote to an existing Autoramp

​When quotes run out

​Fees on a quote

​Multi-currency input

​Query parameters: GET /api/autoramps/quote

​Query parameters: GET /api/autoramps/{autoramp_id}/quote

​Error Handling

Autoramp

Autoramp Status

How It Works

Key parameters

Rate lock duration caps

Expiry policies

Prerequisites

Create an Autoramp with a quote

Attach a new quote to an existing Autoramp

When quotes run out

Fees on a quote

Multi-currency input

Query parameters: `GET /api/autoramps/quote`

Query parameters: `GET /api/autoramps/{autoramp_id}/quote`

Error Handling