---
title: "List suggested deposit tokens"
method: GET
path: "/qr/tokens"
tags: ["Utilities"]
---

# List suggested deposit tokens

`GET /qr/tokens`

## Request

- Base URL: `https://v1.orchestrator.rhinestone.dev/deposit-processor`
- URL: `https://v1.orchestrator.rhinestone.dev/deposit-processor/qr/tokens`
- Auth: one of:
  - API key in header `x-api-key`
  - HTTP bearer
- TypeScript: <https://skmtc.dev/rhinestonewtf/apis/deposit-service-api/docs/qr/tokens/get.ts> (a function with typed inputs; its response is checked against the schema)

Returns suggested tokens for QR and manual-transfer deposits.

## Headers

- `x-api-key` string: API key for authentication

## Response `200`

Token shortlist per chain

- QrTokensResponse
  - `restricted` boolean, required: True when the project has a deposit whitelist. `tokens` is then the complete accepted set: every chain is reported, a chain absent from `tokens` is not offered, and a token is listed exactly when a deposit of it would be accepted.
  - `tokens` object, required: Keyed by EVM chain id as a decimal string, plus "solana" and "hypercore". An empty array means the chain is not offered (paused, not depositable, or disallowed by the whitelist) and clients should hide it. When `restricted` is false this is a suggested shortlist, and an absent chain carries no opinion; when `restricted` is true it is exhaustive.

## Other responses

- `401`: Authentication required
- `403`: API key lacks required deposits scope
- `503`: Tenant billing verification is temporarily unavailable; retry after 5 seconds.

## Changes

- **2026-11-06** `aa1767d704fa`: 4 info
  - the endpoint scheme security `internalProjectBearer` was added to the API
  - the endpoint scheme security `tenantApiKey` was added to the API
  - the `header` request parameter `x-api-key` became optional
  - added the non-success response with the status `503`
- **2026-09-17** `676300ac19ff`: 5 info
  - added the optional property `code` to the response with the `401` status
  - added the optional property `code` to the response with the `403` status
  - added the optional property `tokens/additionalProperties/items/maxAmount` to the response with the `200` status
  - added the optional property `tokens/additionalProperties/items/minAmount` to the response with the `200` status
  - …1 more
- **2026-09-11** `b49146029e5a`: 1 breaking, 1 warning
  - the `header` request parameter `x-api-key` became required
  - deleted the `header` request parameter `authorization`
- **2026-07-29** `7f6aae39bb48`: 1 info
  - endpoint added

[Operation history](https://skmtc.dev/rhinestonewtf/apis/deposit-service-api/changes/qr/tokens/get.md)

---

[API](https://skmtc.dev/rhinestonewtf/apis/deposit-service-api.md) - [All operations](https://skmtc.dev/rhinestonewtf/apis/deposit-service-api/llms.txt) - [OpenAPI document](https://skmtc.dev/rhinestonewtf/apis/deposit-service-api/revisions/aa1767d704fa?raw)