Developer API

Build against the paper boundary.

Current endpoints support health, authenticated identity, persistent paper portfolio reads, and guarded simulated orders.

GET/health

Public service state and paper-safety boundary.

GET/auth/me

Authenticated profile associated with the current signed session.

GET/portfolio

Persistent simulated cash, positions, and paper fills.

POST/orders

Guarded paper execution for supported USD products.

Example request

POST /orders
Content-Type: application/json

{
  "product_id": "BTC-USD",
  "side": "buy",
  "quote_amount_usd": 100
}

Authentication
The browser API uses the signed ThorAlpha session. Never place session cookies or future API secrets in client-side public code.