Why not make every route public?
Public discovery should be narrow so premium data, status, usage, and account state stay protected.
Agent-native market data
Account-aware access lets an agent know what it can read, how much quota remains, and when a workflow needs a higher plan. That is safer than anonymous unlimited probing or private shared keys.
Why should market-data agents use account-aware access instead of anonymous unlimited reads?
Separate narrow public discovery from dashboard-issued account access, then expose plan and usage state in surfaces agents can read.
cornerstones-client auth login --api-key "$CORNERSTONES_API_KEY"
cornerstones-client auth status
cornerstones-client verify| Option | Best for | Tradeoff |
|---|---|---|
| Account-aware access | Repeatable agent workflows with quota and revocation | Requires login or key issuance |
| Anonymous discovery | First-touch product understanding | Must stay narrow and low-risk |
| Shared private key | Legacy internal scripts | Poor attribution and high leakage risk |
Public discovery should be narrow so premium data, status, usage, and account state stay protected.
Responses and docs should point to the access matrix and upgrade path rather than failing ambiguously.
Yes. Product-level keys are revocable without rotating private upstream credentials.
Pro starts richer context; Max adds deeper orderflow and liquidity depth.