Liquidity, payments and users for your Rust skins site

One API that lets your site buy skins from its users, sell skins to them, take their crypto and pay them out - at TradeRust's order-book prices, with no trading fees - while we keep their Steam trade links and profiles for you.

The money model

Everything settles in your business balance on TradeRust. Your users never hold money with us: when one sells skins, the money goes to you and you credit them on your site; when you buy skins for one, you pay. Crypto works the same way - deposits to your users' addresses are credited to you, payouts to them come out of your balance. Every one of these is a webhook, so your site can keep its own balances exactly in step.

Fees: none on trading. Crypto payouts cost 2% + the coin's network fee, taken out of the amount, the same as every TradeRust cash-out. Deposits and skin moves are free.

Quickstart

1. Open a business account - sign in with Steam, then Business → name it. It's separate from your personal account, with its own balance.
2. Create a key with the business scope (dashboard → Settings → API keys). It's shown once.
3. Set your webhook URL and copy the signing secret; add your servers' IPs to the allowlist and your domain for Hosted Connect.
4. Fund the balance - a crypto deposit from Wallet while switched to the business, or move money from your personal account.
5. Make your first calls:

Copyexport TR=trk_your_business_key

# 1. save a user (your id for them, their SteamID64 and trade URL)
curl -X PUT https://sandbox.traderust.com/api/biz/users/u_381 -H "Authorization: Bearer $TR" -H "Content-Type: application/json" \
  -d '{"steamid": "76561198000000042", "trade_url": "https://steamcommunity.com/tradeoffer/new/?partner=39734314&token=AbCd1234"}'

# 2. what their skins sell for right now
curl https://sandbox.traderust.com/api/biz/users/u_381/inventory -H "Authorization: Bearer $TR"

# 3. buy two of them from the user for at least $1.760 - they get a Steam trade offer
curl -X POST https://sandbox.traderust.com/api/biz/sell -H "Authorization: Bearer $TR" -H "Content-Type: application/json" \
  -d '{"ref": "sale-1042", "user_ref": "u_381", "items": [[2457, 2]], "min_net_mills": 1760}'

# 4. when they accept you get a sell.completed webhook - or check:
curl https://sandbox.traderust.com/api/biz/orders/sale-1042 -H "Authorization: Bearer $TR"

Keys & safety

Business keys belong to your business account and carry the business scope - the only kind of TradeRust key that can send skins or crypto to someone else. That's why a business account has these guards, all under your control on the dashboard:

Revoke a key on the dashboard and it stops at once. Business keys also work on the regular API (prices, orders, your balance) for the business account.

Conventions

Money

Integer mills: 1000 = $1.000, 891 = $0.891. Never floats. Divide by 1000 to show dollars.

ref - your order id, and safe retries

Every sell, buy and payout carries ref: your own id for it (1-64 chars, A-Z a-z 0-9 _ . : @ -), unique per business. Sending the same ref again returns the existing order ("created": false) instead of making a second one - so after a timeout, just retry with the same ref. Look anything up later by ref.

user_ref - your id for a user

Save users once with PUT /api/biz/users/{user_ref} (or Hosted Connect), then send just user_ref on orders and payouts. You can also send steamid + trade_url on an order directly.

Items

Either [[item_id, qty], …] or [{"market_hash_name": "Hellforged Vest", "qty": 2}, …] - Steam's own names work. Up to 50 different skins per order (one Steam trade offer).

Paging

Lists return next. Newest first: pass before=<next>. To sync from a point: after=<id>, oldest first.

Times & errors

Timestamps are UTC ISO-8601 with Z. Errors are {"error": "…", "code": "…"} plus extra fields for some codes - see Errors.

Sandbox

sandbox.traderust.com is a full copy of TradeRust where nothing is real: Steam trade offers and crypto are simulated, order books are seeded with test depth, and it can't reach real Steam accounts or wallets. Sign in with Steam there, open a business account and create a key exactly as on the live site; use https://sandbox.traderust.com as the base URL.

Because nobody is on the other end of a sandbox trade offer, you play their part with these extra endpoints (sandbox only):

Payouts finish by themselves a few seconds after you request them. Webhooks are sent for real, to your real webhook URL.

Example site: Rust Demo Market

Rust Demo Market is a small skins site built only on this API, running against the sandbox. Sign in with a test Steam account, sell skins from a fake inventory, buy from the market, deposit and withdraw crypto - with a live console beside it showing every API call it makes and every webhook it receives, signature checked.

Guide: your users

Two ways to get a user into your directory:

• You already have their Steam ID and trade URL → PUT /api/biz/users/{user_ref}. We check the trade URL belongs to that Steam ID.
• You don't → send them through Hosted Connect: they sign in with Steam on TradeRust, paste their trade URL (we show them where to find it), and come back to your site signed. You get user.connected.

We then read their public Steam profile - name, avatars, privacy, whether it's a limited account, trade ban and VAC status, member-since - and keep it fresh weekly (POST …/refresh to force it). A trade_ban other than "None" or a limited_account usually means trade offers will fail.

GET /api/biz/users/{user_ref}/history is their whole story with you: every order and crypto transfer and the totals. Erasing a user (DELETE) wipes their personal data but keeps the money records under the user_ref.

Guide: inventories & prices

GET /api/biz/users/{user_ref}/inventory returns every tradable skin in their Steam inventory that TradeRust trades, with instant_sell_mills - what one sells for right now - and instant_sell_depth, how many the book would take at that price. For a basket, always quote: POST /api/biz/quote walks the book exactly as the trade will, so selling 5 of something deep in the book is priced correctly. Show your user that total, and send it as min_net_mills.

Inventories are cached 60 seconds; ?refresh=1 re-reads Steam (once per 30s per Steam ID). A private inventory gives 502 inventory_unavailable - ask the user to make it public.

Guide: buying skins from your users

Your user sells; you receive the money. POST /api/biz/sell with the quoted total as min_net_mills:

1. Steam trade offers expire after 10 minutes. Tell your user to accept in Steam (trade_offer.url opens it); the offer message names your business.
2. The skins sell the moment they arrive, at min_net_mills or better - never worse. If the book fell meanwhile, nothing sells.
3. on_fail: "return" (default) sends them straight back - right for most sites. "hold" keeps them in your vault: re-quote and let your user decide, then POST …/return or sell them yourself on the regular API.
4. On sell.completed, credit your user received_mills.

Guide: selling skins to your users

You pay; your user gets skins. POST /api/biz/buy with the most you'll pay as max_cost_mills:

1. The purchase happens immediately, fill-or-kill: either every skin is bought at max_cost_mills or less, or nothing is (409 price_changed, with a fresh quote). paid_mills is what it cost.
2. We then send the skins to your user's Steam. Debit your user when you create the order (or on buy.offer_sent).
3. If they decline, the skins are back in your vault: retry (optionally with a new trade URL), sell them again, or keep them.
4. Buys count toward your daily limit.

Guide: crypto deposits for your users

POST /api/biz/crypto/address {"user_ref", "coin"} gives that user a permanent address for the coin. Show it to them; they can send any amount above the coin's minimum (GET /api/biz/crypto/coins), any number of times. Each deposit is credited to your balance at its USD value on arrival and sent to you as crypto.deposit with the user_ref and amount_mills - credit your user that. Coins that need a memo (TON, …) return extra_id: your user must include it.

Deposits below the coin's minimum aren't credited (that's the payment provider's rule, not ours) - show the minimum next to the address.

Guide: crypto payouts

POST /api/biz/crypto/withdraw {"ref", "user_ref", "coin", "address", "usd_mills"} debits usd_mills from your balance and sends it within seconds - there's no cancel window for business payouts. The fee comes out of the amount: 2% + the coin's network fee. Example: $50.000 as USDT on Solana → fee $1.260 → payout_mills 48740 arrives. Minimum $5.

Then: crypto.withdraw_sent → crypto.withdraw_finished (with tx_hash), or crypto.withdraw_failed with the full amount back in your balance. Don't re-send on a timeout - retry with the same ref.

Guide: reconciling

Your site's books should match ours. Daily: sum your users' credits/debits from events, compare with GET /api/biz/account's balance movement, and page through GET /api/biz/events?after=… for anything your webhook missed. /api/biz/orders and /api/biz/crypto/transfers page by id for exports; /api/biz/users/export?format=csv dumps the directory.

Webhooks

Set a URL on the dashboard and every change is POSTed to it as JSON:

POST /your/webhook
Content-Type: application/json
X-TradeRust-Event: sell.completed
X-TradeRust-Id: 1201
X-TradeRust-Signature: t=1762697000,v1=5f2c…

{
  "id": 1201,
  "type": "sell.completed",
  "api_version": "2026-11",
  "created_at": "2026-11-09T14:03:11.204Z",
  "data": {
    "ref": "sale-1042",
    "id": 17,
    "side": "sell",
    "status": "completed",
    "user_ref": "u_381",
    "steamid": "76561198000000042",
    "items": [
      {
        "item_id": 2457,
        "name": "Hellforged Vest",
        "market_hash_name": "Hellforged Vest",
        "icon": "https://files.facepunch.com/rust/icons/inventory/rust/70010_small.png",
        "qty": 2
      }
    ],
    "min_net_mills": 1760,
    "received_mills": 1782,
    "fills": [
      {
        "item_id": 2457,
        "name": "Hellforged Vest",
        "side": "sell",
        "qty": 2,
        "total": 1782,
        "avg_shown": 891
      }
    ],
    "trade_offer": {
      "id": 311,
      "status": "completed",
      "steam_offer_id": "7712345678",
      "url": "https://steamcommunity.com/tradeoffer/7712345678/",
      "expires_at": "2026-11-09T14:13:11.204Z",
      "reason": null
    },
    "reason": null,
    "created_at": "2026-11-09T14:03:11.204Z",
    "updated_at": "2026-11-09T14:03:11.204Z",
    "on_fail": "return",
    "return_offer": null
  }
}

• Answer 2xx within 10 seconds. Anything else is retried after 30s, 120s, 600s, 1800s, 3600s, 10800s, 21600s, 43200s (about a day in all), then left in the event feed.
• Dedupe on X-TradeRust-Id (= id): a retry repeats it. Events can arrive out of order across retries - trust the object's status.
• Nothing is ever lost: each event is written in the same database transaction as the change itself. Missed some? GET /api/biz/events?after=<last id>.
• Webhook URLs must be https on a public host.

Event types

Order events carry the full order (as GET /api/biz/orders/{ref}); crypto events the full transfer.

Verifying signatures

v1 is HMAC-SHA256, keyed with your signing secret, of "<t>." + the raw body. Reject a request whose signature doesn't match or whose t is more than 5 minutes off. Use the raw body bytes - re-serialised JSON won't match.

Copyimport hashlib, hmac, time

def verify_traderust(secret: str, header: str, body: bytes, tolerance: int = 300) -> bool:
    """header = the X-TradeRust-Signature value, body = the raw request body (bytes)."""
    try:
        parts = dict(p.split("=", 1) for p in header.split(","))
        ts = int(parts["t"])
    except (ValueError, KeyError):
        return False
    if abs(time.time() - ts) > tolerance:          # stale: a replayed request
        return False
    expected = hmac.new(secret.encode(), f"{ts}.".encode() + body, hashlib.sha256).hexdigest()
    return hmac.compare_digest(expected, parts.get("v1", ""))

Copyconst crypto = require('crypto');

// header = req.headers['x-traderust-signature'], rawBody = the raw body as a Buffer
// (e.g. express.raw({ type: 'application/json' })) - NOT re-serialised JSON.
function verifyTradeRust(secret, header, rawBody, tolerance = 300) {
  const parts = Object.fromEntries(String(header || '').split(',').map(p => p.split('=')));
  const ts = parseInt(parts.t, 10);
  if (!ts || Math.abs(Date.now() / 1000 - ts) > tolerance) return false;
  const expected = crypto.createHmac('sha256', secret).update(`${ts}.`).update(rawBody).digest('hex');
  return typeof parts.v1 === 'string' && parts.v1.length === expected.length
    && crypto.timingSafeEqual(Buffer.from(expected), Buffer.from(parts.v1));
}

Copy<?php
// $header = $_SERVER['HTTP_X_TRADERUST_SIGNATURE']; $body = file_get_contents('php://input');
function verify_traderust(string $secret, string $header, string $body, int $tolerance = 300): bool {
    $parts = [];
    foreach (explode(',', $header) as $p) {
        [$k, $v] = array_pad(explode('=', $p, 2), 2, '');
        $parts[$k] = $v;
    }
    $ts = (int)($parts['t'] ?? 0);
    if ($ts === 0 || abs(time() - $ts) > $tolerance) return false;
    return hash_equals(hash_hmac('sha256', $ts . '.' . $body, $secret), $parts['v1'] ?? '');
}

Copypackage traderust

import (
	"crypto/hmac"
	"crypto/sha256"
	"encoding/hex"
	"strconv"
	"strings"
	"time"
)

// VerifySignature: header = r.Header.Get("X-TradeRust-Signature"), body = the raw request body.
func VerifySignature(secret, header string, body []byte, tolerance time.Duration) bool {
	var ts int64
	var sig string
	for _, p := range strings.Split(header, ",") {
		kv := strings.SplitN(p, "=", 2)
		if len(kv) != 2 {
			continue
		}
		switch kv[0] {
		case "t":
			ts, _ = strconv.ParseInt(kv[1], 10, 64)
		case "v1":
			sig = kv[1]
		}
	}
	if ts == 0 {
		return false
	}
	if d := time.Since(time.Unix(ts, 0)); d > tolerance || d < -tolerance {
		return false
	}
	mac := hmac.New(sha256.New, []byte(secret))
	mac.Write([]byte(strconv.FormatInt(ts, 10) + "."))
	mac.Write(body)
	return hmac.Equal([]byte(hex.EncodeToString(mac.Sum(nil))), []byte(sig))
}

A complete handler

Copy# Flask: credit your users from TradeRust's webhooks - exactly once each.
from flask import Flask, abort, request

app = Flask(__name__)
SECRET = "whsec_…"                                  # Business dashboard -> Settings -> Show signing secret

@app.post("/traderust/webhook")
def traderust_webhook():
    if not verify_traderust(SECRET, request.headers.get("X-TradeRust-Signature", ""), request.get_data()):
        abort(400)
    event = request.get_json()
    with db.transaction():
        if db.seen_event(event["id"]):              # retries repeat the same id - process each once
            return "", 200
        db.mark_event_seen(event["id"])
        d = event["data"]
        if event["type"] == "sell.completed":
            db.credit(d["user_ref"], d["received_mills"], reason=f"skins sold ({d['ref']})")
        elif event["type"] == "crypto.deposit":
            db.credit(d["user_ref"], d["amount_mills"], reason=f"{d['coin']} deposit")
        elif event["type"] == "buy.delivery_failed":
            db.flag_for_retry(d["ref"])
    return "", 200                                    # any 2xx = delivered; anything else is retried

Hosted Connect

Skip building Steam sign-in and a trade-URL form: send your user to TradeRust and they come back with both saved in your directory.

1. Make a link - POST /api/biz/connect-link, or sign it yourself (below). Links work for 30 minutes.
2. The user signs in through Steam (their password only ever goes to Steam), sees your business name, and pastes their trade URL.
3. They're sent to your return URL with tr_user_ref, tr_steamid, tr_ts, tr_sig - check the signature - or tr_error=cancelled. You also get user.connected.

return must be https on one of your domains (dashboard → Settings → Hosted Connect). The signing secret is your webhook secret.

Copyimport hashlib, hmac, time
from urllib.parse import urlencode

def connect_link(public_id: str, secret: str, user_ref: str, return_url: str) -> str:
    ts = str(int(time.time()))
    msg = ".".join(["connect", public_id, user_ref, return_url, ts])
    sig = hmac.new(secret.encode(), msg.encode(), hashlib.sha256).hexdigest()
    return "https://traderust.com/connect?" + urlencode(
        {"b": public_id, "user_ref": user_ref, "return": return_url, "ts": ts, "sig": sig})

def connected_ok(secret: str, q: dict, max_age: int = 600) -> bool:
    """q = the query parameters TradeRust sent your user back with."""
    if "tr_sig" not in q or abs(time.time() - int(q.get("tr_ts", 0))) > max_age:
        return False
    msg = ".".join(["connected", q["tr_user_ref"], q["tr_steamid"], q["tr_ts"]])
    want = hmac.new(secret.encode(), msg.encode(), hashlib.sha256).hexdigest()
    return hmac.compare_digest(want, q["tr_sig"])

Account

Your business balance and limits.

{
  "business": {
    "id": 52,
    "public_id": "b_3f9a1c2d7e4b",
    "name": "RustDrop",
    "website": "https://rustdrop.gg",
    "status": "active",
    "webhook_url": "https://rustdrop.gg/hooks/traderust",
    "ip_allowlist": [
      "203.0.113.7/32"
    ],
    "domains": [
      "rustdrop.gg"
    ],
    "daily_limit_mills": 5000000,
    "raise": null,
    "created_at": "2026-11-09T14:03:11.204Z"
  },
  "balance": {
    "available_mills": 1250000,
    "locked_mills": 0,
    "withdrawable_mills": 1250000
  },
  "outflow_24h_mills": 84120,
  "outflow_left_mills": 4915880
}

Prices & inventories

What skins sell and cost for right now, and your users' Steam inventories.

{
  "updated_at": "2026-11-09T14:03:11.204Z",
  "unit": "mills",
  "items": [
    {
      "item_id": 2457,
      "market_hash_name": "Hellforged Vest",
      "name": "Hellforged Vest",
      "icon": "https://\u2026",
      "category": "clothing",
      "bid_mills": 891,
      "bid_qty": 19,
      "ask_mills": 941,
      "ask_qty": 23
    }
  ]
}

{
  "steamid": "76561198000000042",
  "items": [
    {
      "id": 2457,
      "name": "Hellforged Vest",
      "icon": "https://\u2026",
      "category": "clothing",
      "fair": 905,
      "weekly_sales": 79,
      "ask": 941,
      "ask_qty": 23,
      "bid": 891,
      "bid_qty": 19,
      "buy_shown": 941,
      "sell_shown": 891,
      "market_hash_name": "Hellforged Vest",
      "qty": 2,
      "instant_sell_mills": 891,
      "instant_sell_depth": 19
    }
  ],
  "untracked": 3,
  "total_instant_sell_mills": 1782,
  "fetched_at": 1762697000,
  "refreshed": false,
  "retry_in": 0
}

{
  "user_ref": "u_381",
  "steamid": "76561198000000042",
  "items": [
    {
      "id": 2457,
      "name": "Hellforged Vest",
      "icon": "https://\u2026",
      "category": "clothing",
      "fair": 905,
      "weekly_sales": 79,
      "ask": 941,
      "ask_qty": 23,
      "bid": 891,
      "bid_qty": 19,
      "buy_shown": 941,
      "sell_shown": 891,
      "market_hash_name": "Hellforged Vest",
      "qty": 2,
      "instant_sell_mills": 891,
      "instant_sell_depth": 19
    }
  ],
  "untracked": 3,
  "total_instant_sell_mills": 1782,
  "fetched_at": 1762697000,
  "refreshed": false,
  "retry_in": 0
}

Copy{
  "side": "sell",
  "items": [
    [
      2457,
      2
    ]
  ]
}

{
  "side": "sell",
  "lines": [
    {
      "item_id": 2457,
      "name": "Hellforged Vest",
      "qty": 2,
      "fillable": 2,
      "total_mills": 1782,
      "unit_mills": 891,
      "best_mills": 891,
      "worst_mills": 891
    }
  ],
  "total_mills": 1782,
  "fillable": true
}

Skins orders

Buying skins from your users and selling skins to them.

Copy{
  "ref": "sale-1042",
  "user_ref": "u_381",
  "items": [
    [
      2457,
      2
    ]
  ],
  "min_net_mills": 1760,
  "on_fail": "return"
}

{
  "order": {
    "ref": "sale-1042",
    "id": 17,
    "side": "sell",
    "status": "offer_sent",
    "user_ref": "u_381",
    "steamid": "76561198000000042",
    "items": [
      {
        "item_id": 2457,
        "name": "Hellforged Vest",
        "market_hash_name": "Hellforged Vest",
        "icon": "https://files.facepunch.com/rust/icons/inventory/rust/70010_small.png",
        "qty": 2
      }
    ],
    "min_net_mills": 1760,
    "received_mills": null,
    "fills": null,
    "trade_offer": {
      "id": 311,
      "status": "sent",
      "steam_offer_id": "7712345678",
      "url": "https://steamcommunity.com/tradeoffer/7712345678/",
      "expires_at": "2026-11-09T14:13:11.204Z",
      "reason": null
    },
    "reason": null,
    "created_at": "2026-11-09T14:03:11.204Z",
    "updated_at": "2026-11-09T14:03:11.204Z",
    "on_fail": "return",
    "return_offer": null
  },
  "created": true
}

Copy{
  "ref": "order-5521",
  "user_ref": "u_381",
  "items": [
    {
      "market_hash_name": "Hellforged Vest",
      "qty": 1
    }
  ],
  "max_cost_mills": 1000
}

{
  "order": {
    "ref": "order-5521",
    "id": 18,
    "side": "buy",
    "status": "offer_sent",
    "user_ref": "u_381",
    "steamid": "76561198000000042",
    "items": [
      {
        "item_id": 2457,
        "name": "Hellforged Vest",
        "market_hash_name": "Hellforged Vest",
        "icon": "https://files.facepunch.com/rust/icons/inventory/rust/70010_small.png",
        "qty": 1
      }
    ],
    "max_cost_mills": 1000,
    "paid_mills": 941,
    "fills": [
      {
        "item_id": 2457,
        "name": "Hellforged Vest",
        "side": "buy",
        "qty": 1,
        "total": 941,
        "avg_shown": 941
      }
    ],
    "trade_offer": {
      "id": 312,
      "status": "sent",
      "steam_offer_id": "7712345701",
      "url": "https://steamcommunity.com/tradeoffer/7712345701/",
      "expires_at": "2026-11-09T14:13:11.204Z",
      "reason": null
    },
    "reason": null,
    "created_at": "2026-11-09T14:03:11.204Z",
    "updated_at": "2026-11-09T14:03:11.204Z"
  },
  "created": true
}

{
  "orders": [
    {
      "ref": "sale-1042",
      "id": 17,
      "side": "sell",
      "status": "completed",
      "user_ref": "u_381",
      "steamid": "76561198000000042",
      "items": [
        {
          "item_id": 2457,
          "name": "Hellforged Vest",
          "market_hash_name": "Hellforged Vest",
          "icon": "https://files.facepunch.com/rust/icons/inventory/rust/70010_small.png",
          "qty": 2
        }
      ],
      "min_net_mills": 1760,
      "received_mills": 1782,
      "fills": [
        {
          "item_id": 2457,
          "name": "Hellforged Vest",
          "side": "sell",
          "qty": 2,
          "total": 1782,
          "avg_shown": 891
        }
      ],
      "trade_offer": {
        "id": 311,
        "status": "completed",
        "steam_offer_id": "7712345678",
        "url": "https://steamcommunity.com/tradeoffer/7712345678/",
        "expires_at": "2026-11-09T14:13:11.204Z",
        "reason": null
      },
      "reason": null,
      "created_at": "2026-11-09T14:03:11.204Z",
      "updated_at": "2026-11-09T14:03:11.204Z",
      "on_fail": "return",
      "return_offer": null
    }
  ],
  "next": null
}

{
  "order": {
    "ref": "sale-1042",
    "id": 17,
    "side": "sell",
    "status": "completed",
    "user_ref": "u_381",
    "steamid": "76561198000000042",
    "items": [
      {
        "item_id": 2457,
        "name": "Hellforged Vest",
        "market_hash_name": "Hellforged Vest",
        "icon": "https://files.facepunch.com/rust/icons/inventory/rust/70010_small.png",
        "qty": 2
      }
    ],
    "min_net_mills": 1760,
    "received_mills": 1782,
    "fills": [
      {
        "item_id": 2457,
        "name": "Hellforged Vest",
        "side": "sell",
        "qty": 2,
        "total": 1782,
        "avg_shown": 891
      }
    ],
    "trade_offer": {
      "id": 311,
      "status": "completed",
      "steam_offer_id": "7712345678",
      "url": "https://steamcommunity.com/tradeoffer/7712345678/",
      "expires_at": "2026-11-09T14:13:11.204Z",
      "reason": null
    },
    "reason": null,
    "created_at": "2026-11-09T14:03:11.204Z",
    "updated_at": "2026-11-09T14:03:11.204Z",
    "on_fail": "return",
    "return_offer": null
  }
}

{
  "order": {
    "ref": "sale-1042",
    "id": 17,
    "side": "sell",
    "status": "cancelled",
    "user_ref": "u_381",
    "steamid": "76561198000000042",
    "items": [
      {
        "item_id": 2457,
        "name": "Hellforged Vest",
        "market_hash_name": "Hellforged Vest",
        "icon": "https://files.facepunch.com/rust/icons/inventory/rust/70010_small.png",
        "qty": 2
      }
    ],
    "min_net_mills": 1760,
    "received_mills": null,
    "fills": null,
    "trade_offer": {
      "id": 311,
      "status": "sent",
      "steam_offer_id": "7712345678",
      "url": "https://steamcommunity.com/tradeoffer/7712345678/",
      "expires_at": "2026-11-09T14:13:11.204Z",
      "reason": null
    },
    "reason": null,
    "created_at": "2026-11-09T14:03:11.204Z",
    "updated_at": "2026-11-09T14:03:11.204Z",
    "on_fail": "return",
    "return_offer": null
  }
}

Copy{
  "trade_url": "https://steamcommunity.com/tradeoffer/new/?partner=39734314\u0026token=NewTok12"
}

{
  "order": {
    "ref": "order-5521",
    "id": 18,
    "side": "buy",
    "status": "offer_sent",
    "user_ref": "u_381",
    "steamid": "76561198000000042",
    "items": [
      {
        "item_id": 2457,
        "name": "Hellforged Vest",
        "market_hash_name": "Hellforged Vest",
        "icon": "https://files.facepunch.com/rust/icons/inventory/rust/70010_small.png",
        "qty": 1
      }
    ],
    "max_cost_mills": 1000,
    "paid_mills": 941,
    "fills": [
      {
        "item_id": 2457,
        "name": "Hellforged Vest",
        "side": "buy",
        "qty": 1,
        "total": 941,
        "avg_shown": 941
      }
    ],
    "trade_offer": {
      "id": 312,
      "status": "sent",
      "steam_offer_id": "7712345701",
      "url": "https://steamcommunity.com/tradeoffer/7712345701/",
      "expires_at": "2026-11-09T14:13:11.204Z",
      "reason": null
    },
    "reason": null,
    "created_at": "2026-11-09T14:03:11.204Z",
    "updated_at": "2026-11-09T14:03:11.204Z"
  }
}

Copy{
  "trade_url": null
}

{
  "order": {
    "ref": "sale-1042",
    "id": 17,
    "side": "sell",
    "status": "returning",
    "user_ref": "u_381",
    "steamid": "76561198000000042",
    "items": [
      {
        "item_id": 2457,
        "name": "Hellforged Vest",
        "market_hash_name": "Hellforged Vest",
        "icon": "https://files.facepunch.com/rust/icons/inventory/rust/70010_small.png",
        "qty": 2
      }
    ],
    "min_net_mills": 1760,
    "received_mills": null,
    "fills": null,
    "trade_offer": {
      "id": 311,
      "status": "sent",
      "steam_offer_id": "7712345678",
      "url": "https://steamcommunity.com/tradeoffer/7712345678/",
      "expires_at": "2026-11-09T14:13:11.204Z",
      "reason": null
    },
    "reason": null,
    "created_at": "2026-11-09T14:03:11.204Z",
    "updated_at": "2026-11-09T14:03:11.204Z",
    "on_fail": "return",
    "return_offer": null
  }
}

Your users

The directory we keep for you, and Hosted Connect.

Copy{
  "steamid": "76561198000000042",
  "trade_url": "https://steamcommunity.com/tradeoffer/new/?partner=39734314\u0026token=AbCd1234",
  "metadata": {
    "tier": "gold"
  }
}

{
  "user": {
    "user_ref": "u_381",
    "steamid": "76561198000000042",
    "trade_url": "https://steamcommunity.com/tradeoffer/new/?partner=39734314\u0026token=AbCd1234",
    "name": "rustlord",
    "avatar": "https://avatars.steamstatic.com/\u2026_medium.jpg",
    "profile": {
      "persona": "rustlord",
      "profile_url": "https://steamcommunity.com/profiles/76561198000000042",
      "custom_url": null,
      "avatar": "https://avatars.steamstatic.com/\u2026_medium.jpg",
      "avatar_full": "https://avatars.steamstatic.com/\u2026_full.jpg",
      "avatar_small": "https://avatars.steamstatic.com/\u2026.jpg",
      "visibility": "public",
      "limited_account": false,
      "vac_banned": false,
      "trade_ban": "None",
      "member_since": "March 3, 2015",
      "location": null,
      "online_state": "offline"
    },
    "profile_fetched_at": "2026-11-09T14:03:11.204Z",
    "metadata": {
      "tier": "gold"
    },
    "connected_at": "2026-11-09T14:03:11.204Z",
    "created_at": "2026-11-09T14:03:11.204Z",
    "updated_at": "2026-11-09T14:03:11.204Z",
    "last_seen_at": "2026-11-09T14:03:11.204Z"
  },
  "created": true
}

{
  "users": [
    {
      "user_ref": "u_381",
      "steamid": "76561198000000042",
      "trade_url": "https://steamcommunity.com/tradeoffer/new/?partner=39734314\u0026token=AbCd1234",
      "name": "rustlord",
      "avatar": "https://avatars.steamstatic.com/\u2026_medium.jpg",
      "profile": {
        "persona": "rustlord",
        "profile_url": "https://steamcommunity.com/profiles/76561198000000042",
        "custom_url": null,
        "avatar": "https://avatars.steamstatic.com/\u2026_medium.jpg",
        "avatar_full": "https://avatars.steamstatic.com/\u2026_full.jpg",
        "avatar_small": "https://avatars.steamstatic.com/\u2026.jpg",
        "visibility": "public",
        "limited_account": false,
        "vac_banned": false,
        "trade_ban": "None",
        "member_since": "March 3, 2015",
        "location": null,
        "online_state": "offline"
      },
      "profile_fetched_at": "2026-11-09T14:03:11.204Z",
      "metadata": {
        "tier": "gold"
      },
      "connected_at": "2026-11-09T14:03:11.204Z",
      "created_at": "2026-11-09T14:03:11.204Z",
      "updated_at": "2026-11-09T14:03:11.204Z",
      "last_seen_at": "2026-11-09T14:03:11.204Z"
    }
  ],
  "total": 1,
  "next": null
}

{
  "users": [
    {
      "user_ref": "u_381",
      "steamid": "76561198000000042",
      "trade_url": "https://steamcommunity.com/tradeoffer/new/?partner=39734314\u0026token=AbCd1234",
      "name": "rustlord",
      "avatar": "https://avatars.steamstatic.com/\u2026_medium.jpg",
      "profile": {
        "persona": "rustlord",
        "profile_url": "https://steamcommunity.com/profiles/76561198000000042",
        "custom_url": null,
        "avatar": "https://avatars.steamstatic.com/\u2026_medium.jpg",
        "avatar_full": "https://avatars.steamstatic.com/\u2026_full.jpg",
        "avatar_small": "https://avatars.steamstatic.com/\u2026.jpg",
        "visibility": "public",
        "limited_account": false,
        "vac_banned": false,
        "trade_ban": "None",
        "member_since": "March 3, 2015",
        "location": null,
        "online_state": "offline"
      },
      "profile_fetched_at": "2026-11-09T14:03:11.204Z",
      "metadata": {
        "tier": "gold"
      },
      "connected_at": "2026-11-09T14:03:11.204Z",
      "created_at": "2026-11-09T14:03:11.204Z",
      "updated_at": "2026-11-09T14:03:11.204Z",
      "last_seen_at": "2026-11-09T14:03:11.204Z"
    }
  ]
}

{
  "user": {
    "user_ref": "u_381",
    "steamid": "76561198000000042",
    "trade_url": "https://steamcommunity.com/tradeoffer/new/?partner=39734314\u0026token=AbCd1234",
    "name": "rustlord",
    "avatar": "https://avatars.steamstatic.com/\u2026_medium.jpg",
    "profile": {
      "persona": "rustlord",
      "profile_url": "https://steamcommunity.com/profiles/76561198000000042",
      "custom_url": null,
      "avatar": "https://avatars.steamstatic.com/\u2026_medium.jpg",
      "avatar_full": "https://avatars.steamstatic.com/\u2026_full.jpg",
      "avatar_small": "https://avatars.steamstatic.com/\u2026.jpg",
      "visibility": "public",
      "limited_account": false,
      "vac_banned": false,
      "trade_ban": "None",
      "member_since": "March 3, 2015",
      "location": null,
      "online_state": "offline"
    },
    "profile_fetched_at": "2026-11-09T14:03:11.204Z",
    "metadata": {
      "tier": "gold"
    },
    "connected_at": "2026-11-09T14:03:11.204Z",
    "created_at": "2026-11-09T14:03:11.204Z",
    "updated_at": "2026-11-09T14:03:11.204Z",
    "last_seen_at": "2026-11-09T14:03:11.204Z"
  }
}

{
  "user": {
    "user_ref": "u_381",
    "steamid": "76561198000000042",
    "trade_url": "https://steamcommunity.com/tradeoffer/new/?partner=39734314\u0026token=AbCd1234",
    "name": "rustlord",
    "avatar": "https://avatars.steamstatic.com/\u2026_medium.jpg",
    "profile": {
      "persona": "rustlord",
      "profile_url": "https://steamcommunity.com/profiles/76561198000000042",
      "custom_url": null,
      "avatar": "https://avatars.steamstatic.com/\u2026_medium.jpg",
      "avatar_full": "https://avatars.steamstatic.com/\u2026_full.jpg",
      "avatar_small": "https://avatars.steamstatic.com/\u2026.jpg",
      "visibility": "public",
      "limited_account": false,
      "vac_banned": false,
      "trade_ban": "None",
      "member_since": "March 3, 2015",
      "location": null,
      "online_state": "offline"
    },
    "profile_fetched_at": "2026-11-09T14:03:11.204Z",
    "metadata": {
      "tier": "gold"
    },
    "connected_at": "2026-11-09T14:03:11.204Z",
    "created_at": "2026-11-09T14:03:11.204Z",
    "updated_at": "2026-11-09T14:03:11.204Z",
    "last_seen_at": "2026-11-09T14:03:11.204Z"
  }
}

{
  "user_ref": "u_381",
  "totals": {
    "sold_mills": 1782,
    "bought_mills": 941,
    "deposited_mills": 25000,
    "withdrawn_mills": 0,
    "net_mills": 25841
  },
  "orders": [
    {
      "ref": "sale-1042",
      "id": 17,
      "side": "sell",
      "status": "completed",
      "user_ref": "u_381",
      "steamid": "76561198000000042",
      "items": [
        {
          "item_id": 2457,
          "name": "Hellforged Vest",
          "market_hash_name": "Hellforged Vest",
          "icon": "https://files.facepunch.com/rust/icons/inventory/rust/70010_small.png",
          "qty": 2
        }
      ],
      "min_net_mills": 1760,
      "received_mills": 1782,
      "fills": [
        {
          "item_id": 2457,
          "name": "Hellforged Vest",
          "side": "sell",
          "qty": 2,
          "total": 1782,
          "avg_shown": 891
        }
      ],
      "trade_offer": {
        "id": 311,
        "status": "completed",
        "steam_offer_id": "7712345678",
        "url": "https://steamcommunity.com/tradeoffer/7712345678/",
        "expires_at": "2026-11-09T14:13:11.204Z",
        "reason": null
      },
      "reason": null,
      "created_at": "2026-11-09T14:03:11.204Z",
      "updated_at": "2026-11-09T14:03:11.204Z",
      "on_fail": "return",
      "return_offer": null
    }
  ],
  "crypto": [
    {
      "id": 904,
      "direction": "deposit",
      "user_ref": "u_381",
      "coin": "usdtsol",
      "status": "finished",
      "address": "7Xf3\u2026q9Z",
      "extra_id": null,
      "amount_crypto": null,
      "created_at": "2026-11-09T14:03:11.204Z",
      "updated_at": "2026-11-09T14:03:11.204Z",
      "credited_mills": 25000,
      "paid_crypto": "25.01"
    }
  ]
}

{
  "ok": true,
  "erased": "u_381"
}

Copy{
  "user_ref": "u_381",
  "return_url": "https://rustdrop.gg/account/steam-connected"
}

{
  "url": "https://traderust.com/connect?b=b_3f9a1c2d7e4b\u0026user_ref=u_381\u0026return=https%3A%2F%2Frustdrop.gg%2F\u2026\u0026ts=1762697000\u0026sig=9c1e\u2026",
  "expires_at": "2026-11-09T14:33:20Z"
}

Crypto

Deposit addresses for your users, and payouts to them.

{
  "coins": [
    {
      "coin": "usdtsol",
      "name": "USDT on Solana",
      "network_fee_mills": 260,
      "min_deposit_usd": 5.0
    }
  ],
  "withdraw_fee_percent": 2.0,
  "min_withdraw_mills": 5000
}

Copy{
  "user_ref": "u_381",
  "coin": "usdtsol"
}

{
  "address": {
    "user_ref": "u_381",
    "coin": "usdtsol",
    "address": "7Xf3\u2026q9Z",
    "extra_id": null,
    "min_deposit_usd": 5.0,
    "created_at": "2026-11-09T14:03:11.204Z"
  }
}

Copy{
  "ref": "payout-77",
  "user_ref": "u_381",
  "coin": "usdtsol",
  "address": "9Qm1\u2026Lk2",
  "usd_mills": 50000
}

{
  "withdrawal": {
    "id": 905,
    "direction": "withdraw",
    "user_ref": "u_381",
    "coin": "usdtsol",
    "status": "queued",
    "address": "9Qm1\u2026Lk2",
    "extra_id": null,
    "amount_crypto": null,
    "created_at": "2026-11-09T14:03:11.204Z",
    "updated_at": "2026-11-09T14:03:11.204Z",
    "ref": "payout-77",
    "debited_mills": 50000,
    "fee_mills": 1260,
    "payout_mills": 48740,
    "tx_hash": null
  },
  "created": true
}

{
  "withdrawal": {
    "id": 905,
    "direction": "withdraw",
    "user_ref": "u_381",
    "coin": "usdtsol",
    "status": "finished",
    "address": "9Qm1\u2026Lk2",
    "extra_id": null,
    "amount_crypto": null,
    "created_at": "2026-11-09T14:03:11.204Z",
    "updated_at": "2026-11-09T14:03:11.204Z",
    "ref": "payout-77",
    "debited_mills": 50000,
    "fee_mills": 1260,
    "payout_mills": 48740,
    "tx_hash": "4Nc2\u2026"
  }
}

{
  "transfers": [
    {
      "id": 904,
      "direction": "deposit",
      "user_ref": "u_381",
      "coin": "usdtsol",
      "status": "finished",
      "address": "7Xf3\u2026q9Z",
      "extra_id": null,
      "amount_crypto": null,
      "created_at": "2026-11-09T14:03:11.204Z",
      "updated_at": "2026-11-09T14:03:11.204Z",
      "credited_mills": 25000,
      "paid_crypto": "25.01"
    },
    {
      "id": 905,
      "direction": "withdraw",
      "user_ref": "u_381",
      "coin": "usdtsol",
      "status": "queued",
      "address": "9Qm1\u2026Lk2",
      "extra_id": null,
      "amount_crypto": null,
      "created_at": "2026-11-09T14:03:11.204Z",
      "updated_at": "2026-11-09T14:03:11.204Z",
      "ref": "payout-77",
      "debited_mills": 50000,
      "fee_mills": 1260,
      "payout_mills": 48740,
      "tx_hash": null
    }
  ],
  "next": null
}

Events & webhooks

Everything that happened, as signed webhooks or a feed you can page through.

{
  "events": [
    {
      "id": 1201,
      "type": "sell.completed",
      "created_at": "2026-11-09T14:03:11.204Z",
      "data": {
        "ref": "sale-1042",
        "id": 17,
        "side": "sell",
        "status": "completed",
        "user_ref": "u_381",
        "steamid": "76561198000000042",
        "items": [
          {
            "item_id": 2457,
            "name": "Hellforged Vest",
            "market_hash_name": "Hellforged Vest",
            "icon": "https://files.facepunch.com/rust/icons/inventory/rust/70010_small.png",
            "qty": 2
          }
        ],
        "min_net_mills": 1760,
        "received_mills": 1782,
        "fills": [
          {
            "item_id": 2457,
            "name": "Hellforged Vest",
            "side": "sell",
            "qty": 2,
            "total": 1782,
            "avg_shown": 891
          }
        ],
        "trade_offer": {
          "id": 311,
          "status": "completed",
          "steam_offer_id": "7712345678",
          "url": "https://steamcommunity.com/tradeoffer/7712345678/",
          "expires_at": "2026-11-09T14:13:11.204Z",
          "reason": null
        },
        "reason": null,
        "created_at": "2026-11-09T14:03:11.204Z",
        "updated_at": "2026-11-09T14:03:11.204Z",
        "on_fail": "return",
        "return_offer": null
      },
      "delivery": {
        "delivered_at": "2026-11-09T14:03:11.204Z",
        "attempts": 1,
        "last_error": null,
        "next_attempt_at": null
      }
    }
  ],
  "next": null
}

{
  "event_id": 1202,
  "ok": true,
  "status": 200,
  "error": null,
  "ms": 143
}

Errors

{"error": "The book pays $1.700 for this right now - less than min_net_mills.", "code": "price_changed", "quote": {…}}

Client code

No SDK to install - the API is small. These are complete minimal clients:

Copyimport requests

class TradeRust:
    def __init__(self, key: str, base: str = "https://traderust.com"):
        self.base, self.s = base, requests.Session()
        self.s.headers["Authorization"] = f"Bearer {key}"

    def _call(self, method: str, path: str, **kw):
        r = self.s.request(method, self.base + path, timeout=20, **kw)
        data = r.json()
        if r.status_code >= 400:
            raise RuntimeError(f"{data['code']}: {data['error']}")
        return data

    def inventory(self, user_ref):        return self._call("GET", f"/api/biz/users/{user_ref}/inventory")
    def quote(self, side, items):         return self._call("POST", "/api/biz/quote", json={"side": side, "items": items})
    def sell(self, ref, user_ref, items, min_net_mills, on_fail="return"):
        return self._call("POST", "/api/biz/sell", json={"ref": ref, "user_ref": user_ref, "items": items,
                                                         "min_net_mills": min_net_mills, "on_fail": on_fail})["order"]
    def buy(self, ref, user_ref, items, max_cost_mills):
        return self._call("POST", "/api/biz/buy", json={"ref": ref, "user_ref": user_ref, "items": items,
                                                        "max_cost_mills": max_cost_mills})["order"]
    def put_user(self, user_ref, **fields): return self._call("PUT", f"/api/biz/users/{user_ref}", json=fields)["user"]
    def deposit_address(self, user_ref, coin): return self._call("POST", "/api/biz/crypto/address",
                                                                 json={"user_ref": user_ref, "coin": coin})["address"]
    def payout(self, ref, user_ref, coin, address, usd_mills):
        return self._call("POST", "/api/biz/crypto/withdraw", json={"ref": ref, "user_ref": user_ref, "coin": coin,
                                                                    "address": address, "usd_mills": usd_mills})["withdrawal"]

Copyclass TradeRust {
  constructor(key, base = 'https://traderust.com') { this.key = key; this.base = base; }
  async call(method, path, body) {
    const r = await fetch(this.base + path, {
      method, headers: { Authorization: `Bearer ${this.key}`, 'Content-Type': 'application/json' },
      body: body ? JSON.stringify(body) : undefined,
    });
    const d = await r.json();
    if (!r.ok) throw Object.assign(new Error(d.error), { code: d.code, status: r.status, data: d });
    return d;
  }
  inventory(userRef) { return this.call('GET', `/api/biz/users/${encodeURIComponent(userRef)}/inventory`); }
  quote(side, items) { return this.call('POST', '/api/biz/quote', { side, items }); }
  sell(ref, userRef, items, minNetMills, onFail = 'return') {
    return this.call('POST', '/api/biz/sell', { ref, user_ref: userRef, items, min_net_mills: minNetMills, on_fail: onFail });
  }
  buy(ref, userRef, items, maxCostMills) {
    return this.call('POST', '/api/biz/buy', { ref, user_ref: userRef, items, max_cost_mills: maxCostMills });
  }
  depositAddress(userRef, coin) { return this.call('POST', '/api/biz/crypto/address', { user_ref: userRef, coin }); }
  payout(ref, userRef, coin, address, usdMills) {
    return this.call('POST', '/api/biz/crypto/withdraw', { ref, user_ref: userRef, coin, address, usd_mills: usdMills });
  }
}

Going live checklist

• Everything works end-to-end in the sandbox, including a declined offer, a price change and a failed payout.
• Your webhook handler verifies signatures, dedupes by event id, and answers 2xx fast (do slow work after).
• Every create call sends a ref, and your code retries with the same ref.
• IP allowlist set to your servers; daily limit set to what you really need.
• Key stored as a secret (never in the browser or a repo); a second key ready to rotate.
• Your users see the price before they confirm, and you send it as min_net_mills / max_cost_mills.
• You poll /api/biz/events?after= once on startup to catch anything missed while you were down.

FAQ

Where does the liquidity come from?

TradeRust's order books: every buy and sell order on the site, from traders and other businesses. Your sells fill the best buy orders, your buys the best sell orders. You can add depth yourself - place resting orders with your business key on the regular API.

Can a price change after my user agrees?

Not against them. A sell never executes below min_net_mills and a buy never above max_cost_mills. If the book moves the wrong way, the sell doesn't execute (skins go back or are held) and the buy is refused before anything is paid.

Is there a Steam trade hold?

Rust skins have no Steam trade hold: accepted offers complete at once.

What does my user see?

A Steam trade offer from the TradeRust vault bot, with a message naming your business and the order number. On Hosted Connect, your business name.

Can I see trades in my dashboard?

Yes - Business shows orders, users, crypto and every webhook with its delivery state. Your business account's balance, orders and history also show on the normal pages while you're switched to it.

Support

Support - include your business ID (b_…) and the ref.

Changelog