Build on the engine.

What you can build

Endpoint reference

Document reads return an ETag and answer 304 to If-None-Match. Headers X-Readmodel-Version and, when the data is old, X-Readmodel-Stale: 1 come with them.

Live stream

GET /engine/stream keeps one connection open and sends a frame whenever your projection changes. Resume with the Last-Event-ID header or the last_event_id query parameter.

Webhooks

Alerts can post to your own https endpoint. Create one with the API or on the Alerts page, keep the secret it shows once, and verify every request before you trust it.

curl -s https://priceisall.com/api/v1/alerts/webhooks \
  -H "Authorization: Bearer $ACCESS_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{"url":"https://hooks.example.com/priceisall"}'
# The reply includes the signing secret once. Then send a test:
#   curl -s -X POST https://priceisall.com/api/v1/alerts/webhooks/$ID/test \
#     -H "Authorization: Bearer $ACCESS_TOKEN"

{
  "api_version": "pia-webhook/1",
  "delivery_id": "ping_0f3a9c2e...",
  "sent_at": "2026-10-17T09:30:00Z",
  "type": "ping"
}

{
  "api_version": "pia-webhook/1",
  "data": { ... },
  "delivery_id": "...",
  "read_id": "...",
  "recorded_at": "2026-10-17T09:30:00.123Z",
  "type": "alert.post_read"
}

import { createHmac, timingSafeEqual } from "node:crypto";

// rawBody: the request body as a string, exactly as received.
export function verify(secret, header, rawBody, toleranceSec = 300) {
  const parts = Object.fromEntries(header.split(",").map((p) => p.split("=")));
  const t = Number(parts.t);
  if (!t || Math.abs(Date.now() / 1000 - t) > toleranceSec) return false;
  const want = createHmac("sha256", secret).update(`${t}.${rawBody}`).digest("hex");
  const got = Buffer.from(parts.v1 ?? "", "hex");
  const exp = Buffer.from(want, "hex");
  return got.length === exp.length && timingSafeEqual(got, exp);
}
// Read the header from "PriceIsAll-Signature".

import hashlib, hmac, time

def verify(secret: str, header: str, raw_body: bytes, tolerance: int = 300) -> bool:
    parts = dict(p.split("=", 1) for p in header.split(","))
    t = int(parts.get("t", "0"))
    if not t or abs(time.time() - t) > tolerance:
        return False
    signed = f"{t}.".encode() + raw_body
    want = hmac.new(secret.encode(), signed, hashlib.sha256).hexdigest()
    return hmac.compare_digest(want, parts.get("v1", ""))
# Read the header from "PriceIsAll-Signature".

MCP for AI assistants

A read-only MCP server for assistants that support remote MCP connectors, such as Claude or ChatGPT style clients. The assistant signs you in through OAuth, you approve what it may read on a consent screen, and you can revoke it from your account at any time. It has no tool that places a trade or spends your balance.

For client authors

Desktop agents

Claude Desktop, Claude Code and Cursor reach the same MCP connector directly. Nothing else needs to be installed. The connector is read-only for every client. It has no tool that places a trade, spends a balance or changes your account, and you can revoke any app from Connections.

claude mcp add --transport http \
  --client-id pia-cursor --callback-port 8080 \
  priceisall https://mcp.priceisall.com/mcp

{
  "mcpServers": {
    "priceisall": {
      "url": "https://mcp.priceisall.com/mcp",
      "auth": { "CLIENT_ID": "pia-cursor" }
    }
  }
}

What each plan sees

What each plan includes

The server only removes fields. It never rounds, reorders or recomputes a value, and a field outside your plan is absent, not null. Your own entitlements are listed in the GET /engine manifest.

Limits

Errors

{
  "error": {
    "code": "unauthorized",
    "message": "Authentication is required."
  }
}

Embeddable widgets

No code needed for the public data. Pick a widget, preview it and copy the embed snippet from the widgets gallery. Embeds carry only data that is already public and a link back to PriceIsAll.