Preview Sessions

How walletless preview sessions work in the DeFiMara API: what they can read, why they cannot chat, and how the preview quota is reported.

Updated October 13, 2026

Preview sessions are the walletless sessions the web app creates for visitors with POST /connect. They exist so the demo dashboard can load data — they are not a free API tier.

Preview sessions cannot chat: POST /message returns 403 Preview chat disabled. Use agent authentication for programmatic access.

• What They Can and Cannot Do

Read and quote tools are allowed for the demo experience:

get_live_price, search_tokens, get_portfolio, get_wallet_activity, get_position_history, analyze_portfolio_balance, check_swap_route, get_best_solana_swap, bridge_quote, find_yield_pools, check_limit_pair_support

Execution and personal-history tools are blocked:

trade_market, prepare_transaction, prepare_transaction_sol, trade_limit, create_limit_order_sol, trade_perp, deposit_yield, bridge_transfer, wallet_switch_network, get_user_transactions

Wallet activity in preview always uses the demo address.

• Quota

Preview usage is counted per IP: 5 per 24 hours by default, with a higher limit for trusted clients. Self-hosted instances can change this with ANON_MSG_RATE_LIMIT, ANON_MSG_RATE_LIMIT_WINDOW (seconds) and ANON_MSG_RATE_LIMIT_TRUSTED. GET /health and GET /sessions/{session_id}/quota report it:

JSON

{
  "anonymous_msgs": {
    "used": 2,
    "limit": 5,
    "reset_at": "2026-10-14T12:00:00+00:00",
    "backend": "redis",
    "limit_tier": "default"
  }
}

• Limits

/connect allows 10 requests per 60 seconds per IP (429 after that)

Walletless /connect also applies browser origin and fingerprint checks meant for the web app

PreviousREST Endpoints

Share this page