Developers | Standard Online

API contract preview · sandbox available on request

Developer API

Standard is built for integration. The endpoints, webhook events, and authentication model documented below are the contract your engineering team can review before any commitment. Public docs and a self-serve sandbox land alongside the first design-partner activations — until then, integration credentials and a live sandbox are issued by request to integrations@standard.online.

Connects to your existing stack: no migration, no vendor lock-in. Activation in 48 hours once the tier is provisioned.

Architecture

System Architecture

Orchestration Layer.

Single-stack Next.js application on a managed runtime, with typed tRPC procedures handling content generation, behavioral signal processing, and allocation automation. Swarm intelligence runs as a governed in-process subsystem co-located with the audit log that timestamps every decision — not a fleet of microservices, by deliberate design.

API-First Design.

RESTful endpoints for data retrieval, allocation governance, and reporting integration. JSON request/response format. Rate limits tiered by deployment level. Versioned pathing ensures backward compatibility across releases. Base URL: https://api.standard.online/v1

Webhook System.

Real-time event streaming for trial behavior, conversion events, and system alerts. Subscribers define event filters. Payloads include full context. Delivery confirmations tracked per endpoint. Retry logic with exponential backoff for failed deliveries.

Authentication.

OAuth 2.0 + API key management. Role-based access control. Token rotation enforced. Permission scopes map to operational functions. Two methods: Bearer token (OAuth) for user-level access, API key for server-to-server integration.

Data Isolation.

Postgres 16 with row-level security policies enforcing tenant scope on every tenant-bearing table. Every query filters by terminal.current_tenant_id(); tenant-facing code cannot read across tenants. Staff scope uses an explicit withStaffScope() helper that bypasses RLS and logs every call to the audit log.

GDPR-Compliant.

European data residency options. Automated data handling protocols. Standard Online LLC maintains full compliance documentation for assessment readiness.

Integrations

Integration Capabilities

CRM Systems.

HubSpot, Salesforce, Pipedrive. Custom CRM connections via REST API. Bidirectional sync for lead data and conversion events. Contact lifecycle status maps to trial-to-funded conversion stages.

Ad Platforms.

Meta Ads, Google Ads, TikTok Ads, native trading ad networks. Campaign data flows into unified reporting. Attribution signals feed back to the AI orchestration layer for bid governance.

Email Service Providers.

SendGrid, Mailgun, ActiveCampaign, Klaviyo. Triggered sequences deploy through your existing ESP infrastructure.

Analytics.

Google Analytics 4, Mixpanel, Amplitude, custom event tracking. Trading-native KPIs flow to your preferred visualization layer.

Communication.

Slack notifications, webhook alerts, email digests. System status pushed to your team's existing channels.

Custom Integrations.

Assessed per deployment tier. Engineering review included in System Assessment.

Code

Code Examples

Authentication — Python

import requests

API_KEY = "sk_live_your_api_key"
BASE_URL = "https://api.standard.online/v1"

headers = {
    "Authorization": f"Bearer {API_KEY}",
    "Content-Type": "application/json",
}

response = requests.get(
    f"{BASE_URL}/campaigns",
    headers=headers,
    params={"channel": "meta", "period": "30d"},
)
print(response.json())

Webhook Handler — Node.js

const crypto = require('crypto');
const express = require('express');
const app = express();

app.post('/webhook', express.raw({ type: '*/*' }), (req, res) => {
  const sig = req.headers['x-standard-signature'];
  const expected = crypto
    .createHmac('sha256', process.env.WEBHOOK_SECRET)
    .update(req.body)
    .digest('hex');

  if (sig !== `sha256=${expected}`) return res.sendStatus(401);

  const { event, data } = JSON.parse(req.body.toString());
  // Trigger your internal trial completion workflow
  console.log(event, data);
  res.sendStatus(200);
});

Trial Event Tracking — Python

from datetime import datetime, timezone

def track_event(event_type, trader_id, **metadata):
    # trial.started | trial.completed
    # evaluation.purchased | funded.activated
    return requests.post(
        f"{BASE_URL}/events",
        headers=headers,
        json={
            "event": event_type,
            "trader_id": trader_id,
            "timestamp": datetime.now(timezone.utc).isoformat(),
            **metadata,
        },
    )

track_event("funded.activated", "tr_abc123", plan="sovereign")

Endpoints

API Endpoint Overview

GET	/v1/campaigns	Retrieve all active allocations with performance metrics including spend, impressions, clicks, and attributed trial signups. Filter by channel, date range, or allocation status.
POST	/v1/events	Submit custom conversion events for trial behavior tracking. Supports trial.started, trial.completed, evaluation.purchased, and funded.activated event types.
GET	/v1/kpis	Retrieve current trading-native KPIs snapshot including cost per funded trader, trial-to-funded conversion rate, and creative win rate. Filter by channel and time period.
POST	/v1/webhooks	Register webhook endpoints for real-time event streaming. Supports event filtering and custom payload configuration.

Resources

Developer Resources

API Documentation.

Complete endpoint reference with request/response examples. Authentication flows. Error code reference. Rate limit specifications.

Sandbox Environment.

Test integration before production deployment. Mock data sets provided. Webhook simulation enabled. Full parity with production endpoints.

Webhook Debugger.

Inspect and validate event payloads in real-time. Delivery history. Retry logic visualization. Endpoint health monitoring.

SDK Availability.

Python and Node.js wrappers for common operations. Reduces boilerplate. Accelerates integration timelines.

Status Page.

Real-time system status and incident reporting. Subscribed teams receive automated alerts on service events.

Provision Access

Review the complete API documentation: endpoint reference, authentication guides, code examples, and request samples. Your engineering team evaluates the system before any commitment.

Provision Access

Inspect Architecture

Request integration access through the developer provisioning form. API credentials provisioned within 24 hours. Sandbox access included. Engineering assessment starts immediately.

Inspect Architecture

Firms with integrated acquisition systems reduce acquisition latency by eliminating data silos. Disconnected tools fragment signal. Unified infrastructure compounds throughput. The system is immutable. Deploy now.

Standard Online LLC · Wyoming LLC · Remote-first operations. Operated by Matheus Moreira (human) + Standard Brain (AI).