Payments API
v1.0.0Payments REST plus payment-domain operations through the federated GraphQL gateway.
27 operationsGraphQL:
https://api.yieldfabric.com · REST: https://pay.test.yieldfabric.comOpenAPI JSONQueries
Read-only queries: payments, contracts, swaps, positions, entities, plus the dealFlow.* family.
Messages (REST)
Status, polling, signing, cancellation, and canonical failed-message redrive for queued operations. See `paths/messages.yaml`.
- getGet user messages with filtering
/api/users/{user_id}/messages - getGet specific message
/api/users/{user_id}/messages/{message_id} - getCheck whether an MQ message can be canceled off-chain
/api/users/{user_id}/messages/{message_id}/can-cancel - postCancel eligible pre-execution MQ work
/api/users/{user_id}/messages/{message_id}/cancel - postRedrive a failed canonical payment retrieval
/api/users/{user_id}/messages/{message_id}/retry - postSign the current transaction with the server-side vault
/api/users/{user_id}/messages/{message_id}/sign - postSubmit an attempt-bound manual signature
/api/users/{user_id}/messages/{message_id}/submit-signed-message - getGet the current manual-signature transaction
/api/users/{user_id}/messages/{message_id}/unsigned-transaction - getGet message history
/api/users/{user_id}/messages/history - getGet messages by status
/api/users/{user_id}/messages/status/{status} - getGet message summary
/api/users/{user_id}/messages/summary - getGet messages by type
/api/users/{user_id}/messages/type/{message_type}
Sister-service REST
JWT-gated chain reads and MQ submission used by sister services (auth, ops tooling). See [authentication guide](guides/authentication.md) for service-token shape.
MCP
Model Context Protocol surfaces: the standard `POST /mcp` (JSON-RPC 2.0, connector credentials only, 14 read-only tools) with its OAuth discovery documents, and the bespoke `/api/mcp/*` REST envelope. See `paths/mcp.yaml`.
- getAuthorization-server metadata shim (pre-RFC-9728 clients)
/.well-known/oauth-authorization-server - getPath-suffixed form of the authorization-server metadata shim
/.well-known/oauth-authorization-server/mcp - getRFC 9728 protected-resource metadata for /mcp
/.well-known/oauth-protected-resource - getRFC 9728 path-suffixed form of the protected-resource metadata
/.well-known/oauth-protected-resource/mcp - postBespoke REST — execute one tool by slash name or public name
/api/mcp/tools/call - getBespoke REST — the tool catalog under its historical slash names
/api/mcp/tools/list - getNot available — stateless server
/mcp - postStandard MCP endpoint (JSON-RPC 2.0, stateless Streamable HTTP)
/mcp