Platform

The data gateway

/api/data/* — single backend route for every upstream provider, edge-cached at Cloudflare.

Every market-data fetch the client makes goes through /api/data/<provider>/<endpoint>, which is a single Cloudflare Worker route that dispatches to a typed fetcher in lib/server/providers/. The Worker emits Cache-Control headers so the Cloudflare CDN dedupes calls across all users — most reads never hit the upstream provider at all.

TTLs by endpoint class

price / ticker245 s — needs to feel live.

funding / overview / news30–120 s.

exchange info / SEC submissions+facts1 h — slowly-changing.

sec/tickers, sec/companies24 h — full registry, ~600 KB.

Rate limiting

Per-IP rate limits via Cloudflare's Workers Rate Limiting binding, four tiers (hot / default / heavy / bulk). Heavy and bulk additionally have a per-isolate burst cap to plug the eventual-consistency gap on short bursts. 429s come back as JSON with a Retry-After header.

infoThe gateway also fronts /api/extract (article reader) and /api/fetch-html (generic fetch). Both have an SSRF guard that rejects loopback / private / link-local / cloud-metadata IPs.