Skip to main content
The app is a client of a public read API served by the manager (the off-chain side of the agent). It exists so the app — and anyone building a dashboard or integration — can read indexed vault state without running their own indexer.
The API is read-only for vault data. It cannot act on any vault: all actions are wallet signatures, and the agent’s own decision endpoints are not public. Base URL is published at launch.

​
Principles

  • Vault-scoped, always. Every per-vault endpoint answers for exactly the vault in the path. Unknown vaults return empty shapes, never aggregates. This is what makes shareable observer links safe.
  • Derived from chain events. The API serves the indexed form of the contract events plus manager-side context (scheduler state, status derivation). Anything important is verifiable against the chain.
  • Honest nulls. Figures without a ratified data source (e.g. live APR early on) are null, rendered as ”—” in the app. The API does not fabricate numbers.
  • USD as floats, timestamps as unix seconds.

​
Endpoint groups

​
Authentication

Reads are public. The single write surface (settings) is owner-authenticated by wallet signature — a signed session proves you control the vault’s owner address. Observer links carry no session and therefore can never act.