API
A versioned REST API behind everything you see — the same endpoints the app itself uses.
Design principles
- •Versioned under /api/v1 — breaking changes land in a new version, never silently
- •Consistent envelope: success returns { data }, errors return { error: { code, message } }
- •Auth via an HttpOnly session cookie, or the documented token flow for server-to-server
- •Rate-limited per IP and resource
What you can build
- •Pull your journal and analytics to sync with external tools
- •Read the published blog and public community content
- •Build integrations on top of the provider-gated market data and calendar endpoints
Auth & security
Personal data endpoints require authentication and are scoped to your user. Admin endpoints enforce RBAC server-side. Every API action is audit-logged.
Read the docs
Full endpoint reference, examples and error codes live on the docs subdomain.