> ## Documentation Index
> Fetch the complete documentation index at: https://docs.mpcvault.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Deposit & Sweep

> Give every user a dedicated deposit address, get notified in real time, and let MPCVault collect the funds for you.

Sweep is a deposit solution for platforms that accept crypto payments from many end users - exchanges, payment processors, gaming platforms, and marketplaces.

Each of your users gets a dedicated on-chain deposit address. When a transfer lands on it, MPCVault notifies your server in real time; USDC/USDT deposits are then swept automatically into a single address you control.

**Why use it:**

* **Dedicated Addresses** - Create one or more addresses per user; deposits are attributed by address, so there are no memos or order IDs for users to forget, and no misattributed funds
* **No Wallet Infrastructure** - You manage no private keys, hot wallets, or address pools
* **Automatic Sweeping** - No manual collection, and you never handle Gas across thousands of small addresses
* **Built-in Risk Controls** - Two-stage confirmation thresholds (credit vs. release) plus reorg notifications

Supported networks: EVM (Ethereum, Arbitrum, Base, Polygon, BSC) and Solana.

## How It Works

1. Your server requests one or more deposit addresses for a user via the API.
2. The user deposits to the address - any time, any amount, as many times as they like.
3. MPCVault sends a signed webhook to your webhook URL in real time for each transfer, and you credit the user's account.
4. USDC/USDT deposits are transferred to your configured sweep address per the sweep policy, net of a small network fee.

Crediting users is driven entirely by webhooks - it does not wait for sweeping.

## Security

The design closes off several common attack paths:

* **Address Poisoning** - Sweeping sends funds to your pre-configured sweep address; no address is ever copied per transfer, so poisoned history has nothing to exploit
* **Fake Deposit Notifications** - Every webhook is Ed25519-signed; forged callbacks fail verification
* **Counterfeit Tokens** - Webhooks identify tokens by contract address (`mint_address`), never by symbol, so fake "USDT" contracts can't be credited
* **Chain Reorgs** - Two-stage confirmations prevent crediting funds that get rolled back; EVM reorgs are delivered as `REVERTED` notifications

## TRON Watch Address

Alongside Sweep, the same API token also lets you register TRON addresses for monitoring - built for wallets you run yourself. MPCVault sends a signed webhook whenever a registered address sends or receives TRX or USDT - notification only, no wallet is created and no assets are moved.

## Getting Started

Sweep is enabled per account: the API token is issued by MPCVault, and your sweep address and webhook URL are configured with your account manager. Contact your MPCVault account manager to begin.

Once enabled, head to the API documentation:

<CardGroup cols={2}>
  <Card title="Sweep API" icon="arrow-down-to-bracket" href="/api-reference/sweep/overview">
    Create deposit wallets, handle webhooks, and review sweep rules and fees.
  </Card>

  <Card title="TRON Watch Address API" icon="eye" href="/api-reference/sweep/tron-watch-address">
    Register TRON addresses and receive transfer notifications.
  </Card>
</CardGroup>
