Skip to main content
The API is plain HTTPS + JSON. Anything that speaks both can call it.

List yield opportunities

Get a single opportunity

Analyze a portfolio (POST with body)

Subscribe to a webhook

The signing secret is server-generated — you cannot supply it in the request body. It is returned once in the 201 response as data.signing_secret (prefixed whsec_). Store it then; rotate later via POST /v2/webhooks/{id}/rotate-secret.

Read a rate-limit window