API reference.

A curated reference for the public-facing Quintarthai API. All endpoints are versioned at /api/v1. Authentication is via the HttpOnly quintarth_session cookie (set after login).

OpenAPI schema: the curated public spec (including the Developer Data API below) is at /api/v1/public/openapi.json, with a browsable Swagger UI at /api/v1/public/docs. For anything beyond the curated surface, email engineering@quintessentianetwork.com.

Developer Data API API key · commercial use permitted

Filings-grade data with re-verifiable receipts, served from public SEC EDGAR sources and Quintarthai-compiled reference tables — no third-party market-data license restrictions, so commercial use is permitted on every tier. Auth: Authorization: Bearer qt_live_… header (preferred) or ?apikey= query fallback for spreadsheet clients. Add ?format=excel to any GET for TSV (Google Sheets / Excel). Get a key →

GET
/api/v1/data/filings/search?ticker=AAPL&form=10-K
SEC EDGAR filings for a ticker: form, filed date, accession number, deep links.
API key
GET
/api/v1/data/filings/s1/{ticker}
IPO S-1/F-1/F-10 extraction: use-of-proceeds + pre-IPO financials with accession.
API key
GET
/api/v1/data/filing-diff/{ticker}?form=10-K
Risk-factor diff between the two latest filings — new / removed / modified factors.
API key
GET
/api/v1/data/form4?ticker=NVDA&since=2026-01-01
Form 4 insider transactions; per-ticker requests fetch live from SEC EDGAR.
API key
GET
/api/v1/data/13f/managers · /13f/manager/{cik} · /13f/issuer/{query}
13F-HR institutional holdings: tracked managers, per-manager positions, who-holds-an-issuer.
API key
GET
/api/v1/data/activist-13d · /api/v1/data/passive-13g
Tickers with SCHEDULE 13D (activist) / 13G (passive >5%) filings in the last ~21 days.
API key
GET
/api/v1/data/receipts/{receipt_id}/verify
Re-verify an ed25519-signed Quintarthai research receipt (also keyless at /api/v1/lineage/verify/{id}).
API key
GET
/api/v1/data/withholding?issuer_country=US&account_type=TFSA
Canada↔US dividend withholding by account type, with treaty citations.
API key
GET
/api/v1/data/dual-listings
Curated TSX↔US dual-listing (MJDS) symbology pairs.
API key
POST
/api/v1/data/drill/interpret
Deterministic NI 43-101 drill-result interpreter: grades, widths, AuEq, anomaly flags.
API key
GET
/api/v1/data/catalog · /api/v1/data/health
Self-documenting endpoint index + key health/permissions echo.
API key

Quickstart

# cURL — header auth (preferred; keys never leak into logs)
curl "https://quintarthai.com/api/v1/data/filings/search?ticker=AAPL&form=10-K" \
  -H "Authorization: Bearer qt_live_YOUR_KEY"

# Google Sheets — paste in a cell (TSV via format=excel; apikey fallback since
# IMPORTDATA cannot send headers — treat sheet-embedded keys as semi-public, scope + revoke freely)
=IMPORTDATA("https://quintarthai.com/api/v1/data/dual-listings?format=excel&apikey=qt_live_YOUR_KEY")

# Python
import requests
r = requests.get("https://quintarthai.com/api/v1/data/form4",
                 params={"ticker": "NVDA"},
                 headers={"Authorization": "Bearer qt_live_YOUR_KEY"})
print(r.json()["transactions"][0])

# Node.js (18+)
const r = await fetch("https://quintarthai.com/api/v1/data/13f/manager/1067983",
  { headers: { Authorization: "Bearer qt_live_YOUR_KEY" } });
console.log((await r.json()).holdings_count);

Developer Data API outputs are published research data — identical for every caller requesting the same security, not tailored to you, and not investment advice. Quintessentia Network Inc. and its directors and officers hold no position in, and receive no compensation from, any issuer analyzed; should any such interest ever arise, a specific disclosure will be presented alongside the affected analysis. Data is derived from public SEC EDGAR sources and Quintarthai-compiled reference tables; cite the source filing (accession number) when republishing figures. See Disclosures.

System health

GET
/health
Liveness check. Returns JSON status. Used by uptime monitors.
Public
GET
/healthz
Kubernetes-convention alias for /health.
Public
GET
/ping
Minimal text "pong" response.
Public

Authentication

POST
/api/v1/auth/login
Body: {email, password}. Returns HttpOnly session cookie.
Public
POST
/api/v1/auth/signup
Body: {email, password, full_name}. Sends verification email.
Public
POST
/api/v1/auth/logout
Clears session cookie.
Session

Quinn AI

POST
/api/v1/chat/send
Body: {content, session_id?}. Returns Quinn response + envelope.
Session
GET
/api/v1/chat/stream-thinking
SSE: streams Quinn's tool calls + final response in real time.
Session

Market data

GET
/api/v1/quote/{symbol}
Real-time quote for ticker. institutional-grade market-data backed.
Session
GET
/api/v1/chart/{symbol}?timeframe=6mo
Price history. Timeframe: 1d, 5d, 1mo, 3mo, 6mo, 1y, 2y, 5y, 10y, 20y, max.
Session
GET
/api/v1/stock/analyst-recs/{symbol}
Analyst consensus distribution + price targets.
Session

Sharia screening

GET
/api/v1/sharia/screen-all/{symbol}
Returns verdict across AAOIFI / DJIM / MSCI / FTSE Yasaar / S&P Shariah standards.
Session

Cross-border arbitrage

GET
/api/v1/arb/{toronto_sym}/{us_sym}
Live MJDS spread between two cross-listed pairs.
Session
GET
/api/v1/arb/pairs
List all 59 dual-listed pairs we track.
Session

Discovery

GET
/api/v1/themes
14 curated themes (Canadian Gold, TSXV Lithium, Sharia ETFs, etc).
Public

GDPR / PIPEDA / Law 25 (DSAR)

GET
/api/v1/gdpr/policy
Public data processing policy: controller, lawful basis, retention, your rights, subprocessors.
Public
GET
/api/v1/user/export
Article 15: machine-readable JSON export of all your data.
Session
GET
/api/v1/gdpr/export
Alias of /user/export.
Session
POST
/api/v1/user/delete
Article 17: queue account erasure (30-day grace period). Body: {confirm: true, reason?}.
Session
POST
/api/v1/consent/record
Record explicit consent for a category. Body: {consent_type, action}.
Public
GET
/api/v1/consent/my-history
Your full consent audit trail.
Session

Observability

POST
/api/v1/csp-report
CSP violation reports (sent automatically by browsers via report-uri).
Public
POST
/api/v1/metrics/vitals
Web Vitals beacon: LCP, FID, CLS, INP.
Public

Authentication example

# 1. Sign in (sets HttpOnly session cookie)
curl -X POST https://quintarthai.com/api/v1/auth/login \
  -H "Content-Type: application/json" \
  -d '{"email":"you@example.com","password":"..."}' \
  -c cookies.txt

# 2. Use the cookie for subsequent requests
curl https://quintarthai.com/api/v1/quote/SHOP.TO \
  -b cookies.txt

# 3. Export your data (GDPR Article 15)
curl https://quintarthai.com/api/v1/user/export \
  -b cookies.txt \
  -o my-data.json

Rate limits

Per-tier Quinn query caps: Free 10/day · Trader 50/day · Alpha 100/day · Apex 500/day · Prime 1000/day. Enforced via Redis INCR. Read endpoints (quotes, charts) have a separate per-IP rate limit.

Errors

All errors return JSON: {"detail": "human-readable message"}. Standard HTTP status codes. 401 = authentication required · 403 = authorized but lacking permission/tier · 404 = not found · 429 = rate limited (check Retry-After header) · 500 = server error (alerts internal Sentry).

Contact

Engineering: engineering@quintessentianetwork.com · Privacy/DSAR: privacy@quintarthai.com · Security disclosure: security@quintarthai.com