API documentation

// Response (the secret is shown ONCE — store it securely)
{
  "app": {
    "app_id": "08123456",          // your public client id
    "name": "My Trading App",
    "redirect_uris": ["https://myapp.com/callback"],
    "scopes": ["read", "trade"],
    "verified": false,
    "created_at": "2026-08-07T..."
  },
  "app_secret": "mps_xxxxxxxx"     // shown once; not needed for the PKCE flow
}

function base64url(bytes) {
  return btoa(String.fromCharCode(...new Uint8Array(bytes)))
    .replace(/\+/g, "-").replace(/\//g, "_").replace(/=+$/, "");
}
const verifier  = base64url(crypto.getRandomValues(new Uint8Array(32)));
const challenge = base64url(
  await crypto.subtle.digest("SHA-256", new TextEncoder().encode(verifier))
);
// keep 'verifier' for the token exchange; send 'challenge' now

https://api.miletrades.site/api/v1/oauth/authorize
  ?app_id=YOUR_APP_ID
  &redirect_uri=https://myapp.com/callback   // must exactly match a registered URI
  &response_type=code
  &scope=read trade                          // space- or comma-separated; subset of your app's scopes
  &state=RANDOM_ANTI_CSRF
  &code_challenge=CHALLENGE
  &code_challenge_method=S256

curl -X POST https://api.miletrades.site/api/v1/oauth/token \
  -d grant_type=authorization_code \
  -d code=mpc_xxxxxxxx \
  -d redirect_uri=https://myapp.com/callback \
  -d code_verifier=YOUR_VERIFIER \
  -d app_id=YOUR_APP_ID

// 200 OK
{
  "access_token": "mp_xxxxxxxx",  // a scoped, app-bound token (does not expire)
  "token_type":   "bearer",
  "scope":        "read trade",
  "app_id":       "08123456"
}

const ws = new WebSocket("wss://api.miletrades.site/ws/v1?app_id=YOUR_APP_ID");

ws.onopen = () => ws.send(JSON.stringify({ authorize: "mp_USER_TOKEN" }));

ws.onmessage = (ev) => {
  const msg = JSON.parse(ev.data);
  if (msg.error) return console.error(msg.error.code, msg.error.message);

  switch (msg.msg_type) {
    case "authorize":
      // Ask for a price: "digit over 1" on Volatility 100, $1 stake.
      ws.send(JSON.stringify({
        proposal: 1, req_id: 1,
        contract_type: "DIGITOVER",   // OVER/UNDER/MATCH/DIFFER/EVEN/ODD
        symbol: "volatility_100",     // call active_symbols to list markets
        amount: 1.0,                  // stake in the account's currency
        barrier: 1                    // 0-9 for over/under & match/differ; omit for even/odd
      }));
      break;

    case "proposal":
      // Buy at (up to) the quoted ask price.
      ws.send(JSON.stringify({
        buy: msg.proposal.id, price: msg.proposal.ask_price, req_id: 2
      }));
      break;

    case "buy":
      console.log("Bought", msg.buy.contract_id, "for", msg.buy.buy_price);
      // Subscribe to follow it to settlement (~5 ticks later).
      ws.send(JSON.stringify({
        proposal_open_contract: msg.buy.contract_id, subscribe: 1, req_id: 3
      }));
      break;

    case "proposal_open_contract": {
      const c = msg.proposal_open_contract;
      if (c.is_sold) console.log("Settled:", c.status, "profit", c.profit);
      break;
    }
  }
};

curl -X POST https://api.miletrades.site/api/v1/contracts \
  -H "Authorization: Bearer mp_USER_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{
    "symbol": "volatility_100",
    "contract_type": "over",        // even|odd|match|differ|over|under
    "stake_cents": 100,             // minor units of the wallet currency
    "wallet_kind": "real",          // "real" | "demo"
    "params": { "threshold": 1 }    // over/under -> threshold 0-9; match/differ -> digit 0-9; even/odd -> none
  }'

// 200 OK
{ "contract": { "id": "...", "status": "pending", "payout_multiplier_bp": 12375, ... },
  "new_balance_cents": 41500 }

GET https://api.miletrades.site/api/v1/apps/earnings   // Authorization: Bearer <your session or admin token>
{
  "apps": [
    { "app_id":"08123456", "name":"My Trading App",
      "ngr_cents":124500, "commission_cents":12450, "users":42 }  // 10% of NGR
  ]
}