Api Credit Watchlist Post

Add/remove/update bond watchlist (CSRF protected).

Per-user scoped — passes user["id"] to the service so writes touch ONLY this user's rows. C-3 IDOR fix 2026-05-27 (docs/audits/2026-05-27_SECURITY_AUDIT.md). Pre-fix the POST handler would DELETE every user's research on every save.

post/api/credit/watchlist

Request

  • Base URL: https://www.oxfordledge.com (the document declares no server; this is the origin it was published from)
  • URL: https://www.oxfordledge.com/api/credit/watchlist
  • Auth: none declared

Response

Successful Response

statusstring required

'ok' on success.

errorstring nullable

Persist or validation error.

Changes

No recorded changes to this operation across all 1 revision of this API.