Download OpenAPI specification:
Public API for managing DVPs. Public routes are GET /, GET /openapi.json, and GET /health. Protected routes are authorized by a dedicated Lambda authorizer that forwards AUTH_TOKEN to GET /me on the stage-appropriate Auth API and validates returned effectiveScopes. Preprod uses https://preprod-auth.pbg.io/me and mainnet uses https://auth.pbg.io/me. GET /portfolios/{portfolio-id} requires portfolios:#read. POST /portfolios requires portfolios:#manage.