Allocator API · public, read-only endpoints
public, integrator-grade

Read the desk programmatically.

The same figures the allocator brief ships with — daily-return series, signed manifests, and the chronological memo archive — exposed as a stable, public JSON surface. No auth, no rate limits beyond what your CDN imposes, and the contract is documented here so an integrator can wire it to a portfolio tool in an afternoon.

What this page is

The five public, read-only endpoints an integrator wires to a portfolio tool or a back-of-envelope allocator view: the daily-return series, the signed PnL manifest, the memo archive (and the per-slug envelope), and the per-strategy status surface the institutional diligence pack quotes.

Endpoints

Five read-only surfaces. All unauthenticated; all cached at the CDN for 60 seconds. Start with /api/pnl/series, then /api/pnl/manifest/[date] to HMAC-verify the daily payload the series endpoint serves.

EndpointDescription
GET /api/pnl/seriesLast 90 days of daily-return snapshots per sleeve, with Sharpe, MaxDD, VaR and YTD pre-computed server-side. Falls neatly into a portfolio plotter or a back-of-envelope allocator view.
GET /api/pnl/manifest/[date]The signed daily payload: SHA-256 of the canonical bytes + an HMAC-SHA256 signature. Pull /api/pnl/series for the same date, canonicalise it (sorted keys, no whitespace), and HMAC-verify.
GET /api/memos/allocatorThe full memo archive — the daily research notes the desk publishes — in one envelope. Newest first; the same contract the /memo-archive page fetches.
GET /api/memos/[slug]Single memo by slug. Use this when an integrator wants the full body of a memo, not just the headline + excerpt from the archive envelope.
GET /api/strategies/<slug>/statusPer-sleeve mandate status (currently btc-long-short, eth-long-short, sol, stablecoin-yield). Returns the active mode, last-rebalance timestamp, and the published risk band the sleeve operates inside.

Methodology

How to consume the surface

Same-origin only

Every endpoint lives on this origin — same CSP/connect-src, same cookies, no third-party hops. There is no api.counterfoil.com style; you hit the same /api/... path the dashboard uses.

Verifiable payload

The PnL manifest carries both the SHA-256 hash of the canonical payload and an HMAC-SHA256 signature, so an integrator can re-canonicalise the series bytes and compare byte-for-byte without trusting the route handler.

Wire it into your portfolio tool

Need the full dossier?

The allocator brief bundles today's PnL snapshot, the most recent signed manifest, and the latest three daily memos into a single PDF — sent before any pitch conversation.