API Reference

The PAPI REST API provides authenticated access to prediction market data and trading across Polymarket and Kalshi. All exchange responses are normalized into unified types.

Base URL

https://papi.tylerthebuildor.com

Authentication

All endpoints (except /health and /auth/*) require a Bearer token in the Authorization header:

curl https://papi.tylerthebuildor.com/polymarket/markets \
  -H "Authorization: Bearer papi_sk_live_a1b2c3d4e5f6..."

Two token types are supported:

API keys (papi_sk_*) -- For SDK and programmatic access. Scoped to read, trade, or admin.
JWT tokens -- For dashboard sessions. Issued via /auth/login or OAuth callbacks.

See Authentication for details.

Endpoint Reference

Public

Method	Endpoint	Description
`GET`	`/health`	Health check (no auth required)

Auth (public)

Method	Endpoint	Description
`POST`	`/auth/signup`	Create a new account
`POST`	`/auth/login`	Sign in with email/password
`POST`	`/auth/verify-email`	Verify email address
`POST`	`/auth/forgot-password`	Request password reset
`POST`	`/auth/reset-password`	Reset password with token
`POST`	`/auth/google/callback`	Google OAuth callback
`POST`	`/auth/github/callback`	GitHub OAuth callback
`POST`	`/auth/refresh`	Refresh JWT (reads cookie)
`POST`	`/auth/logout`	Sign out (clears cookie, requires auth)

Identity

Method	Endpoint	Scope	Description
`GET`	`/me`	any	Current user info and scopes

Polymarket -- Market Data

Method	Endpoint	Scope	Description
`GET`	`/polymarket/markets`	`read`	List markets
`GET`	`/polymarket/markets/{id}`	`read`	Get a single market
`GET`	`/polymarket/events`	`read`	List events
`GET`	`/polymarket/orderbooks`	`read`	Get order book for a token
`GET`	`/polymarket/trades`	`read`	Get trades for a token
`GET`	`/polymarket/candlesticks`	`read`	Get OHLCV candles
`GET`	`/polymarket/wallet`	`read`	Get wallet info
`GET`	`/polymarket/wallet/pnl/{address}`	`read`	Get wallet PnL

Polymarket -- Trading

Method	Endpoint	Scope	Description
`POST`	`/polymarket/orders`	`trade`	Create an order
`GET`	`/polymarket/orders`	`trade`	List open orders
`GET`	`/polymarket/orders/{order_id}`	`trade`	Get a single order
`DELETE`	`/polymarket/orders/{order_id}`	`trade`	Cancel an order
`GET`	`/polymarket/positions`	`trade`	Get positions
`GET`	`/polymarket/balance`	`trade`	Get balance

Kalshi -- Market Data

Method	Endpoint	Scope	Description
`GET`	`/kalshi/markets`	`read`	List markets
`GET`	`/kalshi/markets/{ticker}`	`read`	Get a single market
`GET`	`/kalshi/events`	`read`	List events
`GET`	`/kalshi/orderbooks`	`read`	Get order book for a ticker
`GET`	`/kalshi/trades`	`read`	Get trades for a ticker
`GET`	`/kalshi/candlesticks`	`read`	Get OHLCV candles

Kalshi -- Trading

Method	Endpoint	Scope	Description
`POST`	`/kalshi/orders`	`trade`	Create an order
`GET`	`/kalshi/orders`	`trade`	List open orders
`GET`	`/kalshi/orders/{order_id}`	`trade`	Get a single order
`DELETE`	`/kalshi/orders/{order_id}`	`trade`	Cancel an order
`GET`	`/kalshi/positions`	`trade`	Get positions
`GET`	`/kalshi/balance`	`trade`	Get balance
`GET`	`/kalshi/trades/me`	`trade`	Get your fills/trades

Cross-Exchange

Method	Endpoint	Scope	Description
`GET`	`/matching-markets`	`read`	Find matching markets across exchanges

Account (JWT-protected)

Method	Endpoint	Description
`GET`	`/account/profile`	Get account profile
`PATCH`	`/account/profile`	Update profile
`GET`	`/account/api-keys`	List API keys
`POST`	`/account/api-keys`	Create an API key (limit: 1 per user)
`DELETE`	`/account/api-keys/{key_prefix}`	Revoke an API key
`GET`	`/account/credentials`	Check credential status
`PUT`	`/account/credentials/polymarket`	Store Polymarket credentials
`PUT`	`/account/credentials/kalshi`	Store Kalshi credentials
`DELETE`	`/account/credentials/{exchange}`	Remove exchange credentials

Admin (JWT + admin role)

Method	Endpoint	Description
`GET`	`/admin/access/mode`	Get current access mode
`PUT`	`/admin/access/mode`	Set access mode
`GET`	`/admin/access/rules`	List access rules
`POST`	`/admin/access/rules`	Create access rule
`DELETE`	`/admin/access/rules/{id}`	Delete access rule
`GET`	`/admin/users`	List all users
`PUT`	`/admin/users/{id}/status`	Update user status

Response Format

Successful responses return data directly. Market list endpoints return raw arrays, not wrapped objects.

Error responses use a consistent format:

{
  "error": {
    "code": "unauthorized",
    "message": "Invalid or expired API key"
  }
}

Financial Values

All financial values (prices, volumes, balances) are serialized as strings to preserve decimal precision. Kalshi prices are converted from cents to decimals (e.g., 62 cents becomes "0.62").

All authenticated endpoints are rate limited to 60 requests per minute per API key. Response headers include X-RateLimit-Limit, X-RateLimit-Remaining, and X-RateLimit-Reset. See Errors for details.

API Overview