Private Send · Direct-to-leader

Reduced exposure toMEV.

Standard transaction submission goes through an RPC operator. That operator can read your transaction before it lands — and some forward pending transactions to MEV searchers who front-run or sandwich you. Private send skips the RPC layer entirely: your signed transaction goes straight to the current slot leader. RPC operators never see it, so they can't leak it.

Direct-to-leader submission — also known as TPU send — has been an option for advanced Solana clients for a while. Private send packages it as a one-flag option on a hosted endpoint.

How it works

One flag. Different path.

// Sign the transaction with your wallet — same as always.
const signed = wallet.sign(tx);

// POST to /v1/send with one extra header.
const res = await fetch('https://api.venum.dev/v1/send', {
  method: 'POST',
  headers: {
    'X-API-Key':  process.env.VENUM_API_KEY,
    'X-Senders':  'tpu',          //  ← skip every channel except direct-to-leader
    'Content-Type': 'application/json',
  },
  body: JSON.stringify({ transaction: signed.toBase64() }),
});

const { signature } = await res.json();
// Track exactly like a normal send — same lifecycle stream.

// Or use exclusion form for "everything except RPC operators":
//   X-Senders: -rpc
// Channels: tpu, jito, secondary, rpc. Empty header = all (default fan-out).
The exposure path

What gets closed off.

01 · YOU SIGN
Locally, never leaves your wallet

You build and sign your transaction with your own keys. Same as any Solana flow — no key custody, no signing service.

02 · DIRECT TO LEADER
Skip the RPC layer

The signed bytes go straight to the current slot leader's submission port. RPC operators are not on the path — they never receive a copy of your transaction.

03 · LEADER INCLUDES
Standard block production

The leader includes your transaction in the next block they produce, exactly like any other transaction. From the chain's perspective, the result is identical.

04 · YOU TRACK
Same lifecycle stream

Track confirmation through /v1/stream/tx or /v1/tx/:signature — same surface as Fast Send. The only difference is the submission channel.

What private send is and isn't

No overclaims.

◆ NO RPC FORWARD
Operators can't leak what they don't see

A standard RPC operator can choose to forward pending transactions to MEV searchers. Private send removes the operator from the path entirely — there is nothing for them to leak.

◆ NO PUBLIC POOL
No mempool to scrape

Solana doesn't expose a public mempool, but RPC operators effectively act as one. Direct-to-leader skips that quasi-public surface.

◆ ONE FLAG
Drop-in on /v1/send

Same endpoint, same wire format. Add an X-Senders: tpu header and the submission channel changes — no SDK swap, no separate URL.

Private Send vs Fast Send

Same endpoint. Different trade-off.

DimensionPrivate send · X-Senders: tpuFast Send · /v1/send
Path to leaderDirect submission to slot leaderThrough RPC operator first
Operator visibilityOperator not on the pathOperator can read pending tx
Searcher front-run via RPCClosed offPossible if operator forwards
In-block reorder protectionNot provided (use bundles for that)Not provided
Atomic multi-leg semanticsNot provided (use bundles)Not provided
Fallback if leader missesNo fallback (single channel)Multi-RPC retry standard
Tip requiredNoNo
Use caseSingle-tx submissions where RPC-layer leakage is the main concernHigh-availability landing across many channels

Use Private Send when RPC-layer leakage is the dominant concern (most retail-side MEV). Use Fast Send when landing rate is the dominant concern (high-availability flows). Both run through /v1/send — the X-Senders header is the only difference.

FAQ

Common questions.

How does private send actually reduce MEV exposure?
When you broadcast through a normal RPC, the operator can read your transaction before it lands. Some operators forward pending transactions to MEV searchers, who then front-run or sandwich you. Private send skips the RPC layer entirely — your signed transaction goes straight to the current slot leader's submission port (also known as TPU). RPC operators never see it, so they can't leak it.
Is this the same as a Jito bundle?
No. Bundles are atomic, ordered, and tip-gated — useful when you need multi-instruction safety or front-of-block placement. Private send is for the much more common case: ship a single transaction without it being seen by an RPC operator first. They are complementary; bundles solve in-block ordering, private send solves pre-block visibility.
Does it prevent every kind of MEV?
No, and we won't claim that. It eliminates one specific attack vector — RPC-operator-watched transactions being forwarded to searchers. It does not prevent in-block ordering by the slot leader itself, or extraction by validators that observe transactions during block production. Most retail-side sandwich attacks come through the RPC vector that this closes off.
How is the landing rate compared to a standard RPC submission?
When you hit the right leader at the right time, landing is fast. When you don't, there's no fallback — that's the trade-off for not exposing the transaction to other channels. For latency-critical paths where dropped transactions are unacceptable, use the standard `/v1/send` flow which fans out to multiple landing channels.
How do I use it?
POST a signed transaction to /v1/send with the X-Senders: tpu header. Same wire format as the Fast Send call, with one extra header. The response includes the signature you can poll with /v1/tx/:signature or stream with /v1/stream/tx?signature=…
Is private send available on every tier?
Yes — every Venum tier (Free, Starter, Pro) can call /v1/send with the X-Senders: tpu header. Per-minute send caps follow your tier; the channel choice doesn't change that.

Ship it with one flag.

Get a free Venum API key, point your existing /v1/send call at it, and add X-Senders: tpu. Same wire format. Different path.