Developer documentation

OracleIQ API quickstart

Create a revocable key in the Developer console. Send it as a bearer token to the versioned API.

Authentication

Authorization: Bearer oracle_live_… Keys are displayed once and can be revoked at any time. Free profiles receive 30 requests per minute; higher limits are available on approved Pro and Team plans.

Signal performance

GET https://oracle-backend-production-d43c.up.railway.app/api/v1/signal-performance returns measured 5m, 1h, 6h, 24h, and 7d outcomes, win rates, sample counts, and methodology.

Private watchlist

GET https://oracle-backend-production-d43c.up.railway.app/api/v1/watchlist returns the watchlist belonging to the API key’s profile. Never expose this key in browser code.

Embeddable risk card

GET /api/embed/risk/{chain}/{tokenAddress}.svg returns a cacheable, CSP-restricted OracleIQ report card. Link the image to the full public token report and preserve the generated timestamp.

Webhook verification

Read X-Oracle-Timestamp and X-Oracle-Signature. Compute HMAC-SHA256(secret, timestamp + "." + rawRequestBody) and compare against the sha256= value using a timing-safe comparison. Reject stale timestamps.

Errors and limits

401 indicates an invalid/revoked key, 429 indicates a one-minute rate-limit window, and 5xx indicates a transient backend/provider error. Respect Retry-After behavior and use exponential backoff.