ehamarkets API integration services (CFD / multi-asset OpenFinance)

1. Authorization & session module

Wraps the email/phone login flow and the credit/demo/live account switch into a stable bearer-token endpoint. Session refresh is automated; rate-limit signals from the upstream are surfaced to the caller so an ERP or dashboard can back off cleanly. Use case: single-sign-on between an introducing-broker portal and the ehamarkets account.

2. Trade-history extraction

Reads closed and open positions for both Quick Mode (binary up/down tickets) and Standard Mode (zero-commission CFD orders, including the first 7-day overnight-swap-free window). Output normalises ticket type, open/close timestamps, leverage and realized P&L — ready for reconciliation against bank statements.

3. Statement & tax-report API

Generates monthly and annual statements equivalent to the in-app PDF, but as structured JSON. This unlocks programmatic feeds into accounting tools (Xero, QuickBooks, SAP) and into MiFID II ex-post cost & charges reporting for European EU/EEA partners.

4. Symbol & price catalogue sync

Mirrors the 600+ symbol list (SPX500, TECH100, NI225, HSI, Tesla, Microsoft, Apple, etc.) with the last quote, spread-from-zero pricing flag and instrument metadata. Use case: a competitor-analysis dashboard that compares ehamarkets pricing to Saxo, XTB and IG on the same tickers.

5. Funding & deposit-event webhooks

Emits structured events for card-based deposits and PayPal top-ups (with the €10 minimum deposit threshold respected). Each event carries method, currency, FX-rate context and the resulting equity delta — consumable by AML, fraud and treasury pipelines.

6. Awards & reputation feed (optional)

Surfaces public award metadata such as “Best Mobile Broker of the Year Global 2025” (World Business Outlook), “Fastest Trading Platform 2025” (World Finance) and “Most User-Friendly Trading Platform Europe 2024” (Global Business Review Magazine), packaged as a small JSON feed for partner marketing pages.

Scenario A — Cross-broker P&L consolidation

A wealth-management partner wants a unified ledger across ehamarkets and second-broker accounts (e.g. eToro, XTB). We expose /v1/eha/positions and /v1/eha/orders with a normalised schema (instrument, side, size, average price, realized/unrealized P&L) so the partner pipeline can right-join trades against custodian statements. This maps to the OpenFinance pattern of consent-driven account aggregation.

Scenario B — MiFID II ex-post cost & charges

EU-facing introducing brokers must produce the annual MiFID II ex-post cost & charges report. We extract every Standard-Mode CFD order including the implicit spread-from-zero cost and the swap fees that begin after the 7-day swap-free window, then format it for the partner's compliance vendor. This converts a manual screenshot exercise into a scheduled feed.

Scenario C — Quick-Mode behavioural analytics

A growth team wants to study Quick-Mode “earn in as little as 2 minutes” tickets vs Standard-Mode CFDs to forecast LTV. The integration emits per-ticket events with cycle length, stake (from €1), instrument and outcome, and lands them in BigQuery / Snowflake. Outcome: cohort dashboards in dbt, fed by a single ingest endpoint.

Scenario D — PayPal & card reconciliation

An accounting team needs to match Visa, MasterCard and PayPal acquirer statements against ehamarkets deposit events. Our webhook emits a deposit object (method, gross, net, currency, txn_id, KYC tier) at settle time, and the partner's ETL job pairs it with the acquirer payout file. Discrepancies surface as a queue, not as month-end surprises.

Scenario E — Education partner sandbox

A trading-education site wants to let learners practice against ehamarkets demo balances without sharing credentials. The integration provisions a demo session, exposes the €1000 starting balance and streams the 2025 Level-up Challenge tasks as a curriculum feed, so progress can be displayed inside the partner's LMS.

Login & session refresh

POST /api/v1/eha/auth/login
Content-Type: application/json

{
  "identifier": "trader@example.com",
  "credential": "<hashed-credential>",
  "account_mode": "live",
  "device_fingerprint": "ios-6471932560-..."
}

200 OK
{
  "access_token": "<bearer>",
  "refresh_token": "<rt>",
  "expires_in": 3600,
  "account": {
    "id": "u-9182",
    "currency": "EUR",
    "swap_free_until": "2025-05-08T00:00:00Z"
  }
}

Trade-history query

GET /api/v1/eha/orders
Authorization: Bearer <ACCESS_TOKEN>
?from=2025-01-01&to=2025-03-31
&mode=standard&symbol=SPX500&limit=200

200 OK
{
  "items": [{
    "order_id": "ord-7710",
    "mode": "standard",
    "symbol": "SPX500",
    "side": "buy",
    "size": 0.10,
    "open_price": 5102.40,
    "close_price": 5121.85,
    "pnl_eur": 19.45,
    "swap_eur": 0.00,
    "opened_at": "2025-02-14T09:21:11Z",
    "closed_at": "2025-02-14T13:02:08Z"
  }],
  "next_cursor": "eyJvcmRlcl9pZCI6Im9yZC03Njk5In0="
}

Deposit webhook (PayPal/card)

POST https://partner.example/webhooks/eha
X-EHA-Signature: t=...,v1=...

{
  "event": "deposit.settled",
  "deposit_id": "dep-44021",
  "method": "paypal",
  "gross_eur": 250.00,
  "net_eur": 248.50,
  "fx_rate": null,
  "kyc_tier": "tier-2",
  "occurred_at": "2025-03-04T08:10:55Z"
}

// Verify HMAC, then upsert into deposits table.
// Errors: 4xx responses are retried with exponential
// backoff up to 24h; 5xx after 3 attempts pages oncall.

Compliance & privacy

ehamarkets serves European users (the App Store listing is live in EU markets including Belgium and Greece) and accepts EUR funding from €10. Integrations therefore cross several regulatory surfaces: MiFID II for investor protection, ex-ante and ex-post cost disclosures and trade reporting; GDPR for personal-data minimisation, lawful basis and the right to erasure; and ESMA retail leverage / negative-balance protection rules for CFDs. Where applicable, we also align with PSD2 SCA for card-funding event handling.

We work strictly under written customer authorization and store only the data fields the use case requires. Access tokens are scoped, rotated and revocable; webhook payloads are signed with HMAC-SHA256; audit logs are retained on the partner side, never inside our infrastructure.

Data flow / architecture

A typical pipeline keeps ehamarkets at the edge and the partner system in control of storage and analytics:

Real-time price streams use WebSocket; account, order and statement reads use REST with cursor paging; deposit and KYC events use signed webhooks. Partners can choose either source-code delivery (we hand over the adapter) or our hosted, pay-per-call gateway.

Deliverables checklist

• OpenAPI 3.1 specification for every adapter endpoint
• Protocol & auth-flow report (token chain, refresh, rate-limit notes)
• Runnable source code (Python 3.12 / Node.js 20) with fixtures
• End-to-end test harness against demo and live modes
• MiFID II / GDPR-aware data-handling guidance and DPA template
• Postman collection & sample notebooks for finance teams

Engagement options

• Source-code delivery from $300 — runnable adapter and full documentation; pay after delivery, on satisfaction.
• Pay-per-call hosted API — we operate the adapter, you call our endpoint and pay only for what you use; no upfront cost.
• Optional retainers for upstream protocol drift, new endpoints and on-call SLAs.

Engagement workflow

1. Scope confirmation: integration scenarios and API needs (login, statements, deposits, market data).
2. Protocol analysis & API design (2–5 business days).
3. Build, internal validation and security review (3–8 business days).
4. Docs, samples, test cases and handover (1–2 business days).
5. Typical first delivery: 5–15 business days; complex flows or third-party approvals may extend timelines.

About our studio

We are an independent studio focused on App interface integration and authorized API integration for fintech, trading and OpenBanking ecosystems. Our team brings hands-on experience from banks, payment gateways, brokerage operations and protocol-analysis labs. We deliver one-stop services across protocol analysis, interface refactoring, OpenData integration and third-party interface integration — including automated data scripts and complete interface documentation.

• Familiar with mainstream broker, banking and e-commerce app authorization standards across Europe, MENA, APAC and LATAM.
• Compliant and lawful interface implementations aligned to MiFID II, PSD2, GDPR and other local frameworks.
• Android and iOS coverage with ready-to-use API source code, interface documentation and test plans.
• Two engagement models: source-code delivery from $300, or pay-per-call hosted API access.

Contact

For quotes or to submit your target app and requirements, open our contact page:

Contact page

Tell us the target app (already ehamarkets-Trading & Investing), the data fields you need (e.g. trade history, deposits, symbol catalogue) and any sandbox or partner credentials you can share. We will send back a scoped quote within one business day.

What do you need from me to start?

Do you provide live trading order placement?

How long does delivery take?

How do you handle compliance?