> ## Documentation Index
> Fetch the complete documentation index at: https://docs.lucidblock.xyz/llms.txt
> Use this file to discover all available pages before exploring further.

# First-party logo file (14 §3.3). Outside /v1, no access token, own per-IP limit.



## OpenAPI

````yaml /openapi.yaml get /assets/v1/{file}
openapi: 3.1.0
info:
  title: Lucidblock Positions API
  version: 0.1.0
  summary: >-
    Read-only Solana DeFi positions with explicit coverage and sourced USD
    values.
  description: >
    For a Solana wallet, returns the lending, liquidity, staking, vault and
    perpetual positions found by

    verified protocol adapters, with exact per-leg amounts, sourced USD values
    and explicit coverage.


    Conventions: amounts (`amount_raw`) are non-negative base-10 integer
    strings; `amount` and every USD

    value are decimal strings; unknown values are `null`, never `"0"`. Times are
    ISO 8601 UTC with second

    precision. Addresses are base58 and case-sensitive. Absence of a position is
    trustworthy only for

    protocols whose coverage status is `complete`. Totals cover the supported
    universe only; they are not

    total wallet net worth.


    Every `/v1/*` response that passed the rate limiter carries
    `RateLimit-Limit`, `RateLimit-Remaining`

    and `RateLimit-Reset`; a 429 adds `Retry-After`. Every response carries
    `X-Request-Id`.


    While `PRIVATE_API_TOKEN` is configured (private alpha), every `/v1/*` route
    except `/v1/health`

    requires `Authorization: Bearer <token>`.


    Snapshots carry display metadata (names, symbols, first-party logo URLs
    under /assets/v1/, provenance)

    and a trademark notice: protocol and token names and logos belong to their
    owners and are shown for

    identification only (14-metadata.md). Metadata never changes ids, amounts or
    totals.
  license:
    name: Proprietary
servers:
  - url: https://api.lucidblock.xyz
    description: Production (private alpha until the v1 release gate)
security:
  - {}
  - AccessToken: []
tags:
  - name: meta
  - name: positions
  - name: catalogue
paths:
  /assets/v1/{file}:
    get:
      tags:
        - meta
      summary: >-
        First-party logo file (14 §3.3). Outside /v1, no access token, own
        per-IP limit.
      operationId: getAsset
      parameters:
        - name: file
          in: path
          required: true
          schema:
            type: string
            pattern: ^[0-9a-f]{64}\.(webp|png)$
      responses:
        '200':
          description: >-
            Image bytes (immutable by content hash). Cache-Control public,
            max-age=86400; ETag is the sha256.
          headers:
            ETag:
              schema:
                type: string
          content:
            image/webp:
              schema:
                type: string
                format: binary
            image/png:
              schema:
                type: string
                format: binary
        '304':
          description: Not modified (If-None-Match matched the ETag)
        '404':
          $ref: '#/components/responses/NotFound'
        '410':
          description: ASSET_REMOVED (taken down, 14 §6.4)
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ErrorEnvelope'
        '429':
          $ref: '#/components/responses/RateLimited'
      security:
        - {}
components:
  responses:
    NotFound:
      description: NOT_FOUND or JOB_NOT_FOUND
      content:
        application/json:
          schema:
            $ref: '#/components/schemas/ErrorEnvelope'
    RateLimited:
      description: RATE_LIMITED
      headers:
        Retry-After:
          $ref: '#/components/headers/RetryAfter'
      content:
        application/json:
          schema:
            $ref: '#/components/schemas/ErrorEnvelope'
  schemas:
    ErrorEnvelope:
      type: object
      additionalProperties: false
      required:
        - error
        - request_id
      properties:
        error:
          type: object
          additionalProperties: false
          required:
            - code
            - message
          properties:
            code:
              $ref: '#/components/schemas/ErrorCode'
            message:
              type: string
            details:
              type: object
        request_id:
          type: string
    ErrorCode:
      type: string
      enum:
        - INVALID_PARAMETER
        - INVALID_ADDRESS
        - UNSUPPORTED_PROTOCOL
        - CURSOR_EXPIRED
        - UNAUTHORIZED
        - NOT_FOUND
        - JOB_NOT_FOUND
        - METHOD_NOT_ALLOWED
        - FORBIDDEN
        - CONFLICT
        - CONFIG_INVALID
        - RATE_LIMITED
        - INTERNAL
        - DB_UNAVAILABLE
        - QUEUE_UNAVAILABLE
        - SNAPSHOT_UNAVAILABLE
        - SCAN_FAILED
        - RPC_BUDGET_EXHAUSTED
        - ASSET_REMOVED
  headers:
    RetryAfter:
      schema:
        type: integer
        minimum: 1
  securitySchemes:
    AccessToken:
      type: http
      scheme: bearer
      description: >-
        PRIVATE_API_TOKEN, required on /v1/* (except /v1/health) while
        configured.

````

This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.