All requests go to
https://api.openagent.to. Every path in this reference is versioned under
/api/v1.What you can do
Investors
Look up investor records and the securities each one holds.
Securities & issuers
Read the security master and the issuers behind it.
Transactions
The journal ledger, transfers, holder positions and registrar journal.
Reports
Control book, MSHF and turnaround reports, including the monthly roll-up.
Before you start
1
Get credentials
Staff and customer integrations authenticate with a JWT. Server-to-server callers use an issuer
API key. See Authentication.
2
Learn the envelope
Every response — success or failure — is wrapped in a standard envelope, and every list endpoint
pages the same way. See Conventions.
3
Make a call
GET /api/v1/health needs no credentials and confirms you can reach the API.Receiving events
The issuer platform pushes reconciliation events toPOST /api/v1/webhook/sync. That endpoint is
signed with an HMAC and rejects replayed requests — read Webhooks before integrating
against it.
Keeping up
Behaviour changes are published in the changelog, which has an RSS feed at/rss.xml.
