One API. Everything below.

Base URL

# Production
https://api.aether.network/v1
grpc ://api.aether.network:443
wss  ://events.aether.network/v1

# Sandbox
https://api.sandbox.aether.network/v1

Authentication

All requests are authenticated with an HSM-issued client certificate plus a short-lived bearer token. Identity-bound operations additionally require a ZK proof signed by the user.

$ curl https://api.aether.network/v1/identity/whoami \
    --cert ./client.pem --key ./client.key \
    -H "Authorization: Bearer $AETHER_TOKEN"

{ "did": "did:aether:0x4f1…b29", "tier": 3, "jurisdiction": "SG" }

Resources

Conventions

• Idempotency. Every mutating request takes an Idempotency-Key header. Replays return the original response.
• Versioning. URL-versioned (/v1). Backwards-compatible changes are additive; breaking changes ship as /v2 with overlap.
• Pagination. Cursor-based. ?cursor=…&limit=…; next and prev returned in the envelope.
• Errors. RFC 7807 problem+json. Stable code values; human title and detail for UI surfaces.
• Timestamps. RFC 3339 UTC. All currency amounts are integer minor units.

GraphQL

The same surface is exposed as a typed GraphQL schema, served at /v1/graphql. Subscriptions stream the same events as the WebSocket channel.

query Position {
  treasury {
    positions(entity: "EU-BANK-01") {
      currency
      cash
      tokenized
      exposureUSD
    }
  }
}