Auth
Accounts, sessions, API keys, and websocket tickets.
Custody
Deposit addresses, balances, and withdrawals.
RFQ
Quote requests, quotes, and matching.
Core concepts
Requests and quotes. A taker posts a quote request for an asset on a venue (Polymarket, Kalshi, or Limitless). Market makers see the request — without the requester’s identity unless they opted into disclosure — and respond with quotes. The taker accepts a quote to match. Quotes expire; a match against an expired quote is rejected. Custody. Deposits arrive on per-user derived addresses. Balances are tracked per(venue, asset), with USDC held separately. Withdrawals are queued and
processed asynchronously.
Wire formats
Websockets
Market data, user events, and the RFQ stream are served over websockets (/ws/market, /ws/user, /ws/rfq), authenticated with short-lived tickets
minted from POST /auth/ws-ticket. The websocket protocol
is not part of this OpenAPI reference.