API Overview
Read Operations
Use /query endpoint for all read-only
operations like listing accounts and getting profile
details
Write Operations
Use /command endpoint for all write/mutate
operations like creating investments and updating profiles
Secure Authentication
All requests require Bearer token with a signature generated by a private key that MUST never leave your infrastructure.
Authentication
API Key Setup
- Login to the portal
- Navigate to Settings → API Keys
- Create a new API key by providing a Certificate Signing Request (CSR)
- Supported algorithms: Elliptic Curve P-256 RSA-4096
Generate CSR
mkdir -p .key
openssl ecparam -name prime256v1 -genkey -noout -out .key/ec_private_key.pem
openssl req -new -key .key/ec_private_key.pem -out .key/ec_csr.pem -sha256 \
-subj "/C=MY/ST=State/L=City/O=Organization/OU=Unit/CN=example.com"
mkdir -p .key
openssl req -new -newkey rsa:4096 -nodes -keyout .key/rsa_private_key.pem -out .key/rsa_csr.pem \
-subj "/C=MY/ST=State/L=City/O=Organization/OU=Unit/CN=example.com"
API Endpoints
Execute read-only operations to retrieve data from the API
Request payload
Response body
Successful Response
Error Responses
Execute write/mutate operations to modify data in the API
Request payload
Response body
Successful Response
Error Responses