curl --request GET \
--url https://api-uat.dimetrades.com/api/notifications \
--header 'Authorization: Bearer <token>' \
--header 'X-API-Key: <api-key>'import requests
url = "https://api-uat.dimetrades.com/api/notifications"
headers = {
"Authorization": "Bearer <token>",
"X-API-Key": "<api-key>"
}
response = requests.get(url, headers=headers)
print(response.text)const options = {
method: 'GET',
headers: {Authorization: 'Bearer <token>', 'X-API-Key': '<api-key>'}
};
fetch('https://api-uat.dimetrades.com/api/notifications', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));<?php
$curl = curl_init();
curl_setopt_array($curl, [
CURLOPT_URL => "https://api-uat.dimetrades.com/api/notifications",
CURLOPT_RETURNTRANSFER => true,
CURLOPT_ENCODING => "",
CURLOPT_MAXREDIRS => 10,
CURLOPT_TIMEOUT => 30,
CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
CURLOPT_CUSTOMREQUEST => "GET",
CURLOPT_HTTPHEADER => [
"Authorization: Bearer <token>",
"X-API-Key: <api-key>"
],
]);
$response = curl_exec($curl);
$err = curl_error($curl);
curl_close($curl);
if ($err) {
echo "cURL Error #:" . $err;
} else {
echo $response;
}package main
import (
"fmt"
"net/http"
"io"
)
func main() {
url := "https://api-uat.dimetrades.com/api/notifications"
req, _ := http.NewRequest("GET", url, nil)
req.Header.Add("Authorization", "Bearer <token>")
req.Header.Add("X-API-Key", "<api-key>")
res, _ := http.DefaultClient.Do(req)
defer res.Body.Close()
body, _ := io.ReadAll(res.Body)
fmt.Println(string(body))
}HttpResponse<String> response = Unirest.get("https://api-uat.dimetrades.com/api/notifications")
.header("Authorization", "Bearer <token>")
.header("X-API-Key", "<api-key>")
.asString();require 'uri'
require 'net/http'
url = URI("https://api-uat.dimetrades.com/api/notifications")
http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true
request = Net::HTTP::Get.new(url)
request["Authorization"] = 'Bearer <token>'
request["X-API-Key"] = '<api-key>'
response = http.request(request)
puts response.read_body{
"data": {
"notifications": [
{
"id": "21def50c-8134-463a-aafa-d1c4cdca7c63",
"type": "trade_executed",
"isDelivered": true,
"isRead": false,
"link": null,
"content": {
"title": "Trade Executed",
"message": "Your YES order was matched. 9 contract(s) at 60¢.",
"tradeId": "019f2cfb-a1b2-733c-9d4e-42a3620ee901",
"orderId": "019f2cfb-9df3-733c-b8af-42a3620ee455",
"marketId": 60497,
"eventId": 5454,
"eventTitle": "Will there be a 6.0+ magnitude earthquake in California in 2026?",
"eventImageUrl": null,
"side": "yes",
"price": 60,
"quantity": 9
},
"createdAt": "2026-07-04T11:55:17.480Z"
},
{
"id": "8a0b71e4-55c9-4f2b-9f31-6d0c2b7e1a44",
"type": "position_size_limit_rejected",
"isDelivered": false,
"isRead": false,
"link": null,
"content": {
"title": "Order Rejected",
"message": "Your order of 1 contract(s) was rejected. Placing it would exceed the position limit of 1 for this market.",
"limit": 1,
"marketId": "60497",
"quantity": 1,
"currentTotal": 9
},
"createdAt": "2026-07-06T10:28:28.100Z"
}
],
"unreadCount": 3
},
"errors": []
}List my notifications
Returns the authenticated user’s in-app notifications, newest first, with an
unread count. Each notification carries a typed content payload whose
shape depends on type.
Use this to backfill a WebSocket gap
Every notification is persisted before it is pushed, so this endpoint is the authoritative record and the WebSocket feed is its low-latency mirror. If a client disconnects, sleeps, or drops frames, call this endpoint on reconnect to recover what was missed — the socket itself does not replay.
A practical reconnect routine:
- Reconnect the WebSocket and start buffering live events.
GET /notifications.- Discard any row whose
idyou have already processed, then merge the rest bycreatedAt. - Flush the buffer.
Deduplicate on id, not on createdAt — a burst of fills can share a
timestamp.
Three behaviours to design around:
- The response returns at most the 50 most recent notifications and is
not paginated — there is no
pageorlimitparameter and nopaginationblock. A client offline long enough to miss more than 50 cannot page back for the remainder; reconcile fromGET /orders,GET /positionsandGET /trades/my/historyinstead. unreadCountcounts all of the user’s unread notifications, so it can legitimately exceed the number of rows returned.isDeliveredrecords whether a push was attempted, not whether your client received it. Do not use it to decide what to backfill — useid.
curl --request GET \
--url https://api-uat.dimetrades.com/api/notifications \
--header 'Authorization: Bearer <token>' \
--header 'X-API-Key: <api-key>'import requests
url = "https://api-uat.dimetrades.com/api/notifications"
headers = {
"Authorization": "Bearer <token>",
"X-API-Key": "<api-key>"
}
response = requests.get(url, headers=headers)
print(response.text)const options = {
method: 'GET',
headers: {Authorization: 'Bearer <token>', 'X-API-Key': '<api-key>'}
};
fetch('https://api-uat.dimetrades.com/api/notifications', options)
.then(res => res.json())
.then(res => console.log(res))
.catch(err => console.error(err));<?php
$curl = curl_init();
curl_setopt_array($curl, [
CURLOPT_URL => "https://api-uat.dimetrades.com/api/notifications",
CURLOPT_RETURNTRANSFER => true,
CURLOPT_ENCODING => "",
CURLOPT_MAXREDIRS => 10,
CURLOPT_TIMEOUT => 30,
CURLOPT_HTTP_VERSION => CURL_HTTP_VERSION_1_1,
CURLOPT_CUSTOMREQUEST => "GET",
CURLOPT_HTTPHEADER => [
"Authorization: Bearer <token>",
"X-API-Key: <api-key>"
],
]);
$response = curl_exec($curl);
$err = curl_error($curl);
curl_close($curl);
if ($err) {
echo "cURL Error #:" . $err;
} else {
echo $response;
}package main
import (
"fmt"
"net/http"
"io"
)
func main() {
url := "https://api-uat.dimetrades.com/api/notifications"
req, _ := http.NewRequest("GET", url, nil)
req.Header.Add("Authorization", "Bearer <token>")
req.Header.Add("X-API-Key", "<api-key>")
res, _ := http.DefaultClient.Do(req)
defer res.Body.Close()
body, _ := io.ReadAll(res.Body)
fmt.Println(string(body))
}HttpResponse<String> response = Unirest.get("https://api-uat.dimetrades.com/api/notifications")
.header("Authorization", "Bearer <token>")
.header("X-API-Key", "<api-key>")
.asString();require 'uri'
require 'net/http'
url = URI("https://api-uat.dimetrades.com/api/notifications")
http = Net::HTTP.new(url.host, url.port)
http.use_ssl = true
request = Net::HTTP::Get.new(url)
request["Authorization"] = 'Bearer <token>'
request["X-API-Key"] = '<api-key>'
response = http.request(request)
puts response.read_body{
"data": {
"notifications": [
{
"id": "21def50c-8134-463a-aafa-d1c4cdca7c63",
"type": "trade_executed",
"isDelivered": true,
"isRead": false,
"link": null,
"content": {
"title": "Trade Executed",
"message": "Your YES order was matched. 9 contract(s) at 60¢.",
"tradeId": "019f2cfb-a1b2-733c-9d4e-42a3620ee901",
"orderId": "019f2cfb-9df3-733c-b8af-42a3620ee455",
"marketId": 60497,
"eventId": 5454,
"eventTitle": "Will there be a 6.0+ magnitude earthquake in California in 2026?",
"eventImageUrl": null,
"side": "yes",
"price": 60,
"quantity": 9
},
"createdAt": "2026-07-04T11:55:17.480Z"
},
{
"id": "8a0b71e4-55c9-4f2b-9f31-6d0c2b7e1a44",
"type": "position_size_limit_rejected",
"isDelivered": false,
"isRead": false,
"link": null,
"content": {
"title": "Order Rejected",
"message": "Your order of 1 contract(s) was rejected. Placing it would exceed the position limit of 1 for this market.",
"limit": 1,
"marketId": "60497",
"quantity": 1,
"currentTotal": 9
},
"createdAt": "2026-07-06T10:28:28.100Z"
}
],
"unreadCount": 3
},
"errors": []
}Authorizations
The end user's JWT access token, sent as Authorization: Bearer <token>.
Obtain one from POST /partner/customers or POST /partner/customers/login
— both return it as token. It identifies which of your users a call
is made for, and is sent alongside your X-API-Key on every authenticated
endpoint.
Event discovery, categories, subcategories and scores are public and need no token.
ISV / partner credential — public half. Required on every request.
Identifies the integration partner (ISV) making the call. Issued by Dime
Trades when the ISV is onboarded and sent on every /partner/* endpoint:
X-API-Key: dt_pk_live_7f3c9a2e5b18
- On the two partner endpoints that create accounts or issue tokens (
POST /partner/customers,POST /partner/customers/login), it is accompanied byX-API-Secretand is the only authentication — there is no user token yet. - On every other partner endpoint it is sent alongside the user's
Authorization: Bearer <token>: the API key says which platform is calling, the bearer token says which user it is calling for.
Credentials are scoped to one or more brands; using a key with a brandId outside that scope returns 403. Staging and production keys are separate.
The key identifies your platform — treat it as a backend credential.
