> For clean Markdown of any page, append .md to the page URL. > For a complete documentation index, see https://docs.crisscross.money/llms.txt. > For AI client integration (Claude Code, Cursor, etc.), connect to the MCP server at https://docs.crisscross.money/_mcp/server. # Request a quote POST https://api.crisscross.money/v1/toc/quotes Content-Type: application/json Requests a firm, expiring TOC quote priced from `sellAmount` (the ZAR amount the client sells). The response includes the rate, fees, and the total ZAR debit (`totalDebitAmount = sellAmount + fee`). The quote is retrievable via `GET /v1/toc/quotes/{quoteId}`. Idempotency: **none** - clients may fire multiple requests for quotes. Reference: https://docs.crisscross.money/api-reference/toc-api/quotes/request-quote ## Authentication - `Authorization` header (bearer token, required) — Token obtained via the login flow. ## Request ### Body (application/json) This endpoint expects a TocQuoteRequest. - `sellCurrency` (string, required) — Currency the client sells (ISO 4217). Only `ZAR` is supported at present; unsupported values return `400`. - `buyCurrency` (string, required) — Currency the client receives (ISO 4217). - `sellAmount` (string, optional) — Positive decimal string in `sellCurrency` the client wishes to sell. Mutually exclusive with `buyAmount`. - `buyAmount` (string, optional) — Positive decimal string in `buyCurrency` the client wishes to receive. Mutually exclusive with `sellAmount`. ## Response ### 201 A firm TOC quote active until `expiresAt`. - `quoteId` (string, required) - `status` (enum, required) - Allowed values: `active`, `accepted`, `expired` - `sellCurrency` (string, required) - `buyCurrency` (string, required) - `sellAmount` (string, required) — ZAR amount the client sells at the specified rate. - `buyAmount` (string, required) — Amount in `buyCurrency` the client receives. - `rate` (string, required) — Amount of buy currency received per unit of sell currency. `1 sellCurrency = buyCurrency`. - `fee` (string, required) — Total fee in ZAR. - `totalDebitAmount` (string, required) — Total ZAR debit. `sellAmount + fee`. - `createdAt` (datetime, required) - `expiresAt` (datetime, required) — Quote is `active` strictly before this time, `expired` thereafter and cannot be accepted. ## Errors ### 400 Bad Request Error Bad request — validation or malformed request. - `error` (ErrorEnvelopeError, required) ### 401 Unauthorized Error Unauthorized — missing or invalid token. - `error` (ErrorEnvelopeError, required) ### 404 Not Found Error No rate is currently available for the requested currency pair. - `error` (ErrorEnvelopeError, required) ### 422 Unprocessable Entity Error Your account is not yet enabled for TOC trading. Contact support. - `error` (ErrorEnvelopeError, required) ## Types ### ErrorEnvelopeError - `code` (string, required) — Stable machine-readable identifier. Branch on this, not `message`. Common values: `INVALID_REQUEST`, `UNAUTHENTICATED`, `FORBIDDEN`, `RATE_NOT_AVAILABLE`, `RATE_NOT_FOUND`, `CURRENCY_NOT_SUPPORTED`, `CURRENCY_NOT_PROVISIONED`, `QUOTE_NOT_FOUND`, `QUOTE_EXPIRED`, `QUOTE_NOT_EXECUTABLE`, `ORDER_NOT_FOUND`, `DEPOSIT_NOT_FOUND`, `BENEFICIARY_NOT_FOUND`, `BENEFICIARY_NOT_ACTIVE`, `CURRENCY_MISMATCH`, `INSUFFICIENT_BALANCE`, `AMOUNT_OUT_OF_RANGE`, `WITHDRAWAL_NOT_FOUND`, `WITHDRAWAL_NOT_CANCELLABLE`, `IDEMPOTENCY_CONFLICT`, `INVALID_CURSOR`. - `message` (string, required) — Human-readable description. Do not parse. - `details` (map from string to any, optional) — Structured context about the error. Shape varies per code. ## Examples **Request** ```json { "sellCurrency": "ZAR", "buyCurrency": "USD", "sellAmount": "100000.00" } ``` **Response** ```json { "quoteId": "qut_550e8400-e29b-41d4-a716-446655440000", "status": "active", "sellCurrency": "ZAR", "buyCurrency": "USD", "sellAmount": "100000.00", "buyAmount": "5400.00", "rate": "0.054", "fee": "850.00", "totalDebitAmount": "100850.00", "createdAt": "2026-05-18T14:14:55Z", "expiresAt": "2026-05-18T14:15:55Z" } ``` **SDK Code** ```python Quotes_requestQuote_example import requests url = "https://api.crisscross.money/v1/toc/quotes" payload = { "sellCurrency": "ZAR", "buyCurrency": "USD", "sellAmount": "100000.00" } headers = { "Authorization": "Bearer ", "Content-Type": "application/json" } response = requests.post(url, json=payload, headers=headers) print(response.json()) ``` ```javascript Quotes_requestQuote_example const url = 'https://api.crisscross.money/v1/toc/quotes'; const options = { method: 'POST', headers: {Authorization: 'Bearer ', 'Content-Type': 'application/json'}, body: '{"sellCurrency":"ZAR","buyCurrency":"USD","sellAmount":"100000.00"}' }; try { const response = await fetch(url, options); const data = await response.json(); console.log(data); } catch (error) { console.error(error); } ``` ```go Quotes_requestQuote_example package main import ( "fmt" "strings" "net/http" "io" ) func main() { url := "https://api.crisscross.money/v1/toc/quotes" payload := strings.NewReader("{\n \"sellCurrency\": \"ZAR\",\n \"buyCurrency\": \"USD\",\n \"sellAmount\": \"100000.00\"\n}") req, _ := http.NewRequest("POST", url, payload) req.Header.Add("Authorization", "Bearer ") req.Header.Add("Content-Type", "application/json") res, _ := http.DefaultClient.Do(req) defer res.Body.Close() body, _ := io.ReadAll(res.Body) fmt.Println(res) fmt.Println(string(body)) } ``` ```ruby Quotes_requestQuote_example require 'uri' require 'net/http' url = URI("https://api.crisscross.money/v1/toc/quotes") http = Net::HTTP.new(url.host, url.port) http.use_ssl = true request = Net::HTTP::Post.new(url) request["Authorization"] = 'Bearer ' request["Content-Type"] = 'application/json' request.body = "{\n \"sellCurrency\": \"ZAR\",\n \"buyCurrency\": \"USD\",\n \"sellAmount\": \"100000.00\"\n}" response = http.request(request) puts response.read_body ``` ```java Quotes_requestQuote_example import com.mashape.unirest.http.HttpResponse; import com.mashape.unirest.http.Unirest; HttpResponse response = Unirest.post("https://api.crisscross.money/v1/toc/quotes") .header("Authorization", "Bearer ") .header("Content-Type", "application/json") .body("{\n \"sellCurrency\": \"ZAR\",\n \"buyCurrency\": \"USD\",\n \"sellAmount\": \"100000.00\"\n}") .asString(); ``` ```php Quotes_requestQuote_example request('POST', 'https://api.crisscross.money/v1/toc/quotes', [ 'body' => '{ "sellCurrency": "ZAR", "buyCurrency": "USD", "sellAmount": "100000.00" }', 'headers' => [ 'Authorization' => 'Bearer ', 'Content-Type' => 'application/json', ], ]); echo $response->getBody(); ``` ```csharp Quotes_requestQuote_example using RestSharp; var client = new RestClient("https://api.crisscross.money/v1/toc/quotes"); var request = new RestRequest(Method.POST); request.AddHeader("Authorization", "Bearer "); request.AddHeader("Content-Type", "application/json"); request.AddParameter("application/json", "{\n \"sellCurrency\": \"ZAR\",\n \"buyCurrency\": \"USD\",\n \"sellAmount\": \"100000.00\"\n}", ParameterType.RequestBody); IRestResponse response = client.Execute(request); ``` ```swift Quotes_requestQuote_example import Foundation let headers = [ "Authorization": "Bearer ", "Content-Type": "application/json" ] let parameters = [ "sellCurrency": "ZAR", "buyCurrency": "USD", "sellAmount": "100000.00" ] as [String : Any] let postData = JSONSerialization.data(withJSONObject: parameters, options: []) let request = NSMutableURLRequest(url: NSURL(string: "https://api.crisscross.money/v1/toc/quotes")! as URL, cachePolicy: .useProtocolCachePolicy, timeoutInterval: 10.0) request.httpMethod = "POST" request.allHTTPHeaderFields = headers request.httpBody = postData as Data let session = URLSession.shared let dataTask = session.dataTask(with: request as URLRequest, completionHandler: { (data, response, error) -> Void in if (error != nil) { print(error as Any) } else { let httpResponse = response as? HTTPURLResponse print(httpResponse) } }) dataTask.resume() ```