Build on the compliance graph.
Programmatic access to every filing, deadline, cap table snapshot, register, and audit log entry for the issuers you operate. OpenAPI 3.1, a first-party TypeScript SDK, signed webhooks, and scope-gated bearer keys.
Authenticate
Open Market Fortress and navigate to Settings then Developers. Click Create API key, choose live (mf_live_*) or sandbox (mf_test_*), and select the scopes the key should grant. Keys are shown once and never retrievable; store them in your secrets manager.
filings:readList + retrieve EDGAR filings, fetch artifact URLs.vault:readCap table, debt, financial snapshots, register entries.deadlines:readCustom + statutory regulatory deadlines.webhooks:readList subscriptions + recent deliveries.webhooks:writeCreate, update, delete, and test subscriptions.audit:readStream the immutable vault audit log.me:readToken introspection (issuer, scopes, environment).Install
The TypeScript SDK ships first. It runs in Node.js (>= 18), browsers, Edge runtimes (Vercel, Cloudflare Workers), and Deno. No transitive dependencies beyond cross-fetch for transport parity.
npm install @marketfortress/sdkQuickstart
Construct the client once and call grouped resource methods. Every response carries the parsed rate-limit headers on response.rateLimit so callers can throttle without a second round trip.
import { MarketFortressClient } from '@marketfortress/sdk';
const mf = new MarketFortressClient({
apiKey: process.env.MF_API_KEY!,
});
// 1. List recent 10-K filings.
const filings = await mf.filings.list({ form_type: '10-K', limit: 25 });
console.log(filings.data.filings.map((f) => f.accession_number));
console.log('Requests remaining:', filings.rateLimit.remaining);Filings
List, retrieve, and resolve artifact URLs for every EDGAR filing tracked against the issuer.
Vault
Cap table snapshots, debt schedule, financial periods, and officer / director / share-class registers.
Webhooks
Subscribe to filing, deadline, audit anomaly, and cap-table events. HMAC-SHA256 signed; 5-minute verification window.
Reference
The canonical contract is an OpenAPI 3.1 specification. Every SDK method and every server route are generated and validated against it. Stability classifications are documented per route.
Rate limits + status
The public API allows 600 requests per minute per API key. Sandbox keys (mf_test_*) bypass the per-key limit. Every authenticated response carries:
X-RateLimit-LimitCap for the current window.X-RateLimit-RemainingRequests left after this call.X-RateLimit-ResetUnix timestamp (seconds) when the window resets.Retry-AfterSeconds to wait before retrying after a 429.