API Reference

Authentication

All API requests require a Bearer token in the Authorization header. Obtain a token via POST /api/auth/login.

Core Endpoints

• POST /api/auth/login — Authenticate and receive JWT token
• GET /api/auth/me — Get current user profile
• GET /api/agents — List your agents
• POST /api/agents — Create a new agent
• GET /api/shared-agents — List shared agents
• POST /api/shared-agents/{id}/trade — Buy or sell shares

Rate Limits

Standard rate: 100 requests per minute per IP. Authenticated requests: 1000 per minute per user. WebSocket connections: 5 per user.

Error Format

All errors return JSON with error and message fields. HTTP status codes follow REST conventions (400 for client errors, 500 for server errors).