{
  "name": "ylalo",
  "title": "Ylalo",
  "description": "Trading API for AI agents on SANDBOX (play money). Stocks, bonds, crypto, and event markets through MCP or REST.",
  "environment": "sandbox",
  "playMoney": true,
  "networkNote": "SANDBOX — play money. Agents can trade; agents cannot withdraw.",
  "version": "0.6.0",
  "limitsVersion": 2,
  "mcp": "https://sandbox.ylalo.com/mcp",
  "openapi": "https://sandbox.ylalo.com/v1/openapi.json",
  "llms": "https://sandbox.ylalo.com/llms.txt",
  "llmsFull": "https://sandbox.ylalo.com/llms-full.txt",
  "start": "https://sandbox.ylalo.com/v1/start",
  "changelog": "https://sandbox.ylalo.com/v1/changelog",
  "status": "https://sandbox.ylalo.com/v1/system/status",
  "statusPage": "https://sandbox.ylalo.com/status",
  "docs": "https://sandbox.ylalo.com/docs",
  "docsMd": "https://sandbox.ylalo.com/docs/quickstart.md",
  "sandbox": {
    "create": "POST /v1/sandbox/accounts",
    "available": true,
    "creditUsd": "50"
  },
  "auth": {
    "methods": [
      "sandbox_api_key",
      "phone_otp",
      "ylk_api_key",
      "oauth_device"
    ],
    "sessionHeader": "Authorization: Bearer <YLALO_API_KEY or accessToken>",
    "oauth": {
      "status": "partial",
      "note": "Device flow available: POST /v1/oauth/device (+ POST /v1/oauth/device/token). Full OAuth 2.1 + DCR for Claude.ai / ChatGPT Connect is next; use phone OTP (mainnet) or sandbox keys (sandbox host) today."
    }
  },
  "safety": [
    "Agents cannot withdraw funds.",
    "Confirm size, side, and leverage with the user before placing orders.",
    "Prefer attaching a stop-loss / guardians on opens; dead-man switch via POST /v1/guardians.",
    "Tell users plainly: leveraged products, environment (sandbox/mainnet), liquidation risk. You may name the execution venue when helpful."
  ],
  "support": "security@ylalo.com",
  "prompt": "Set me up to trade on Ylalo.\n1. Read https://www.ylalo.com/llms.txt and GET /v1/start. Note environment (mainnet vs sandbox) and X-Ylalo-Environment — www is MAINNET real funds.\n2. Connect MCP at https://www.ylalo.com/mcp (or REST /v1, OpenAPI /v1/openapi.json).\n3. Auth on www/mainnet: phone OTP then POST /v1/keys. Store as YLALO_API_KEY, never in chat. For phone-free play money use the demo host https://sandbox.ylalo.com → POST /v1/sandbox/accounts (never call sandbox on www).\n4. Show balance and limits (GET /v1/account). Attach a dead-man or stop guardian if you may sleep. Tell me plainly: leveraged products, environment, liquidation risk.\n5. Propose ONE small trade with a stop-loss and take-profit; only place it after I say yes.\n6. Prefer ylalo_suggest_order / POST /v1/orders/suggest, then place with POST /v1/orders or ylalo_place_order (brackets/guardians when possible). Do not use /v1/perps/*.\n7. Use stocks/bonds/portfolio/NAV language with users. Prefer clear risk language; you may name the execution venue when helpful."
}