Version: 10.40.0

UTM Platform API

Universal Trade Manager (UTM) Platform API provides endpoints for:

• Authentication and user management
• Broker connections (TradeStation and Alpaca)
• Trading accounts, positions, orders, and trades
• Connected app tokens

Authentication

Most endpoints require JWT authentication:

Authorization: Bearer <access_token>

Connected apps use device tokens:

Authorization: Bearer dt_<device_token>

Rate Limits

Endpoint	Limit
/api/auth/login, /register, /forgot-password, /reset-password	10 requests per 15 minutes
/api/auth/refresh	100 requests per 15 minutes
/api/auth/password	3 requests per hour
All other endpoints	No rate limit configured

Authentication

HTTP: Bearer Auth

JWT access token

Security Scheme Type:	http
HTTP Authorization Scheme:	bearer
Bearer format:	JWT

HTTP: Bearer Auth

Device token (dt_*) for connected app authentication

Security Scheme Type:	http
HTTP Authorization Scheme:	bearer
Bearer format:	DeviceToken

API Key: apiKeyAuth

API key for webhook/signal ingestion

Security Scheme Type:	apiKey
Header parameter name:	X-API-Key

HTTP: Bearer Auth

Static METRICS_BEARER_TOKEN scrape token, not a JWT

Security Scheme Type:	http
HTTP Authorization Scheme:	bearer
Bearer format:	Opaque

Contact

UTM Platform Team:

URL: https://github.com/josephdaw/utm-platform

License

MIT