> ## Documentation Index > Fetch the complete documentation index at: https://docs.joyride.exchange/llms.txt > Use this file to discover all available pages before exploring further. # Record wallet device observation > Records a wallet-linked device observation for an authenticated session. Intended for abuse analysis and sybil investigation workflows. ## OpenAPI ````yaml /_generated/openapi.yaml post /v1/account/device-observation openapi: 3.1.0 info: title: Joyride Exchange REST API version: 1.0.0 description: > REST API for the Joyride 0DTE Options Exchange. ## Authentication **Public endpoints** (`/health`, `/v1/market/*`, `/v1/spot/*`, `/v1/oracle/*`) require no authentication. **Competition prize claims** (`/v1/competition/claim`) are self-authenticated by a Solana ed25519 signature over the wallet, Discord handle, and payout destination in the request body. No JWT is required for that endpoint. **Account endpoints** (`/v1/account/*`, `/v1/orders/*`, `/v1/social/profile`, `/v1/social/avatar`) require JWT authentication via one of: 1. `Authorization: Bearer ` header (primary — native clients) 2. `Cookie: joyride_session=` (web clients, set automatically by `/v1/auth/verify`) **Withdrawal endpoints** (`/withdrawals`, `/v1/withdrawals`) require the `Authorization: Bearer ` header. A session cookie alone is not accepted. Obtain a JWT by completing the SIWS (Sign In With Solana) flow: 1. `POST /v1/auth/nonce` with your wallet address to get a nonce 2. Sign the canonical SIWS message with your wallet 3. `POST /v1/auth/verify` with wallet, signature, and message to receive a JWT **Mutating admin endpoints** require a bearer token: ``` Authorization: Bearer ``` ## Data Conventions - **Prices**: Integer values in USDC micros (1 USDC = 1,000,000 micros). Example: `1500000` = $1.50 - **Sizes**: Integer values in millicontracts (1 contract = 1000 millicontracts). Example: `1000` = 1 contract - **Balances**: USDC micros. Example: `10_000_000_000` = $10,000 - **Timestamps**: Unix microseconds (µs since epoch) - **Instrument IDs**: Format `{ASSET}_USDC-{DMMMYY}-{STRIKE}-{C|P}`. Example: `SOL_USDC-28FEB26-150-C` ## Trading **Trading is WebSocket-only.** The HTTP API has no order placement endpoints. See the AsyncAPI spec for WebSocket trading methods. contact: name: Joyride Engineering email: engineering@joyride.exchange license: name: Proprietary servers: - url: https://joyride.exchange/api description: Production security: [] tags: - name: Authentication description: | SIWS (Sign In With Solana) authentication flow. Obtain a JWT for use with all authenticated endpoints. No prior authentication required. - name: Health description: Service health check. - name: Market Data description: Publicly accessible market data. No authentication required. - name: Account description: User-specific account data. Requires user identification. - name: Orders description: User order history. Requires user identification. - name: Withdrawals description: Request signed withdrawal authorizations and list withdrawal history. - name: Social description: Social features — profiles, leaderboard, and activity. - name: Referrals description: Referral-code validation and attribution surfaces. - name: Competition description: Competition-specific collection flows. - name: Spot description: Spot prices and volatility data. - name: Oracle description: Oracle data — prices, TWAP previews, and settlement timing. - name: AI Chat description: > AI-powered trading assistant. Uses SIWS (Sign In With Solana) authentication and JWT sessions. Returns responses as Server-Sent Events (SSE). - name: Admin description: Administrative operations. Requires admin bearer token. paths: /v1/account/device-observation: post: tags: - Account summary: Record wallet device observation description: | Records a wallet-linked device observation for an authenticated session. Intended for abuse analysis and sybil investigation workflows. operationId: recordDeviceObservation requestBody: required: true content: application/json: schema: $ref: '#/components/schemas/DeviceObservationRequest' responses: '200': description: Device observation recorded content: application/json: schema: $ref: '#/components/schemas/DeviceObservationResponse' '400': $ref: '#/components/responses/BadRequest' '401': description: Missing or invalid JWT/session cookie content: application/json: schema: $ref: '#/components/schemas/Error' security: - aiAuth: [] components: schemas: DeviceObservationRequest: type: object properties: first_party_device_id: type: string description: Stable first-party device identifier persisted by the client. example: 14c2a553-b7c6-42ec-b4fa-8960955f8971 fp_id: type: string description: >- Stable device fingerprint hash derived from the web analytics collector. example: 9d9ef3fef4f737f53d1d6db7efec77e365f4f420f3f18634e4a65f5f83d51989 fuzzy_id: type: string description: >- Fuzzy device fingerprint hash derived from the web analytics collector. example: 9f0f10a0a0c19af7ee0d83fc2449336cfcc4ef61de4d8970ce9054128564d0e5 raw_fingerprint: type: object additionalProperties: true description: Raw fingerprint payload collected by the client analytics bundle. stable_fingerprint: type: object additionalProperties: true description: Stable fingerprint payload used to derive `fp_id`. required: - first_party_device_id - fp_id - fuzzy_id - raw_fingerprint DeviceObservationResponse: type: object properties: recorded: type: boolean example: true required: - recorded Error: type: object properties: error: type: string description: >- Human-readable error message (auth failures may include an `auth_*` code prefix) example: Instrument not found required: - error responses: BadRequest: description: Bad request — missing or invalid parameters content: application/json: schema: $ref: '#/components/schemas/Error' securitySchemes: aiAuth: type: http scheme: bearer description: | JWT obtained from POST /v1/auth/verify after SIWS authentication. Include as: `Authorization: Bearer ` ````