PUBLIC API · REST

ULTRA

Your data. Your build.

Trades, accounts, journal entries, and market datafeeds over plain REST with JSON responses. Create a key, make a request, ship whatever the journal doesn’t do for you.

READ-ONLY BY DESIGN365-DAY TOKENSEVERY REQUEST LOGGED

IN MOTION

Watch it work.

Public API0:25

HOW IT HELPS

Create a key. Scope it. Ship.

The whole API in three steps — no ceremony, no write access, ever.

  1. /01Create a keyGenerate a key from settings — ready the moment you save it.
  2. /02Scope itPick only the read scopes the integration needs; a key never gets more than it asked for.
  3. /03ShipTrades, journal, accounts, and market data over plain REST — the same JSON your own dashboard renders.
  • Read-only by design
  • Scope ceiling on the token
  • Least privilege by default

It can read. It can never trade.

The scope ceiling is enforced at the token, not in your code — least privilege by default.

5ENDPOINTS

Five endpoints, no ceremony

Account, broker accounts, trades, journal, and datafeed — the same data your journal pages render.

REFRESH365 DAYS
ACCESS1 HOUR

Long-lived tokens

365-day refresh tokens with 1-hour access tokens, so an integration set up once keeps running for a year.

Every request logged

A per-key request log and usage dashboard show exactly what ran and when. Revoke any key instantly.

ENDPOINTS

Five endpoints, no ceremony.

Plain REST, JSON in and out, cursor pagination where lists get long. The same data your journal pages render — nothing watered down.

GET/v1/accountYour profile, plan, and account settings.
GET/v1/broker-accountsEvery connected broker account with its sync status.
GET/v1/tradesYour full trade history — fills, tags, ratings, and exact-cent P&L.
GET/v1/journalTrade notes and day notes, ready for your own tooling.
GET/v1/datafeedMarket data for the instruments you trade.

API docs are viewable on every plan — keys, the usage dashboard, and request logs ship with Ultra.

RATE LIMITS

Two requests a second, per key.

Steady and predictable, with the numbers in every response so your code never has to guess. Hit the limit and you get a 429 with Retry-After, not a dropped connection.

Per key: 2 requests per secondEvery key gets its own budget — one request every 500 ms, with bursts of two. Keys never slow each other down.
Market data shares a feed budgetPrice and candle endpoints also draw from a shared data-provider budget: futures at 50 requests a minute, every other market at 2 a second across the platform.
Headers on every responseX-RateLimit-Limit, X-RateLimit-Remaining and X-RateLimit-Reset tell you where you stand. A 429 adds Retry-After with the seconds to wait.
Before a key is checkedUnauthenticated traffic is capped at 20 requests a second per IP, so a leaked or mistyped key can never be brute-forced against the API.

Need more throughput for a specific integration? Talk to us.

SECURITY

It can read. It can never trade.

The scope ceiling is enforced at the token, not in your code. Whatever a key requests, it is granted at most the four read scopes.

Standards-based OAuth2RFC 6749 grants, RFC 7009 revocation, and clean documented error codes — your OAuth library already speaks it.
Long-lived tokens365-day refresh tokens with 1-hour access tokens, so an integration set up once keeps running for a year.
Every request loggedA request log and usage dashboard in settings show exactly what each key did, and when. Revoke any key instantly.
Least privilege by defaultTokens are always granted the minimum of what was requested and what is allowed — never more.

THE FACTS

Built like the rest of the platform.

/01

Keys with scopes

Create keys in settings, each carrying only the read scopes you pick. Rotate or revoke without touching the others.

/02

Honest numbers

P&L comes back in exact cents from the same engine your journal uses — your dashboard and your build can never disagree.

/03

Everything logged

Per-key request logs and a usage dashboard, so a misbehaving script is a five-second diagnosis instead of a mystery.

WHAT PEOPLE BUILD

Custom analytics dashboardsAutomated trade reportsWorkflow integrationsDiscord P&L botsSpreadsheet pipelines

First request in under a minute.

Create a key in settings and start pulling your own data — read-only, logged, and standards-based.

Get startedCompare plans

Public API keys are an Ultra feature · Ultra $89/mo · Docs viewable on every plan