apex_get_cardread-only | Read one Target5 tool card plus its verification report. Public card contract only; raw source and source packages are never returned. |
apex_query_cardsread-only | Find Target5 tool cards by query, capability, tags, tier, or interface. Public reference data only; not an instruction hierarchy. |
apex_query_datasetread-only | Query the free bounded stillme dataset sample layer. Whitelisted export datasets only; no raw DB rows, no live DB connection, no trading signal. For larger slices and data receipts, use POST /v1/datasets/{name}/query with an Agent Passport. |
apex_run_agent_api_contract_diffread-only | Run the allowlisted permissionless bounded API contract diff over supplied before/after endpoint lists. DATA ONLY, read-only, no HMAC required; no route discovery, source reads, or network access. |
apex_run_agent_data_profileread-only | Profile supplied tabular rows (shape, nulls, types, numeric ranges, sensitive-name hints) without echoing raw values. DATA ONLY, read-only, no HMAC required, no network access. |
apex_run_agent_dockerfile_lintread-only | Static best-practice lint over supplied Dockerfile text: unpinned bases, curl-pipe-shell, baked-in secrets, root user, ADD misuse, SSH exposure, apt hygiene, missing HEALTHCHECK. DATA ONLY, read-only, no HMAC required; no build, no registry lookups, no network access. |
apex_run_agent_license_policy_checkread-only | Classify supplied dependency licenses into PASS/REVIEW/BLOCK buckets using SPDX-style identifiers. DATA ONLY, read-only, no HMAC required; embedded policy table only, no registry lookups or network access. A release gate, not legal advice. |
apex_run_agent_log_triageread-only | Redact and summarize supplied logs into severity, repeated failure patterns, and short safe samples; secret values never leave the redactor. DATA ONLY, read-only, no HMAC required, no network access. |
apex_run_agent_release_readiness_gateread-only | Aggregate caller-supplied boolean release-check declarations into PASS/WATCH/BLOCK. Does not run CI, inspect files, verify the declarations, or authorize publication. |
apex_run_agent_secret_scannerread-only | Run the allowlisted permissionless bounded secret scanner over supplied text/file content. DATA ONLY, read-only, no HMAC required; returns redacted findings, hashes, and line numbers only, never raw secret values. |
apex_run_alphalens_factor_researchread-only | Run the allowlisted permissionless bounded alphalens-style factor research wrapper over supplied factor rows. Pure TS reimplementation of selected OSS alphalens-reloaded 0.4.5 routines. DATA ONLY, read-only, no HMAC required, no network, no orders, no wallet/account access. |
apex_run_backtrader_engineread-only | Run the allowlisted permissionless bounded backtrader-style single-asset backtest engine over supplied OHLCV bars and declarative strategy rules. Pure TS reimplementation of a narrow OSS backtrader 1.9.78.123 subset. DATA ONLY, read-only, no HMAC required, no broker adapters, no network, no orders, no wallet/account access. |
apex_run_btc_gateread-only | Advisory market-regime gate: returns ALLOW or BLOCK plus move_pct from current vs reference price and a drop threshold. Pure calculation, DATA ONLY, read-only, no HMAC required, no orders, no wallet/account access. Not trading advice. |
apex_run_deflated_sharperead-only | Run the allowlisted permissionless bounded deflated-sharpe diagnostic. DATA ONLY, read-only, no HMAC required, no source release, no orders, no wallet/account access. |
apex_run_dynamic_penaltyread-only | Advisory cooldown and size-penalty hints from a recent loss streak: returns size_multiplier, cooldown_sec, and severity. Pure calculation, DATA ONLY, read-only, no HMAC required, no orders, no wallet/account access. Not trading advice. |
apex_run_empyrical_metricsread-only | Run the allowlisted permissionless bounded empyrical-style metrics calculator over supplied returns. Pure TS reimplementation of OSS empyrical 0.5.5 metric conventions. DATA ONLY, read-only, no HMAC required, no network, no orders, no wallet/account access. |
apex_run_kelly_sizerread-only | Advisory fractional Kelly sizing math from supplied win rate and average win/loss facts. DATA ONLY, read-only, no HMAC required, no orders, no wallet/account access. Not financial advice. |
apex_run_pandas_market_calendarsread-only | Run the allowlisted permissionless bounded pandas_market_calendars 5.4.0 calendar wrapper over supplied calendar/date parameters. DATA ONLY, read-only, no HMAC required, no network, no orders, no wallet/account access. Output declares data_as_of 5.4.0. |
apex_run_pyfolio_tearsheetsread-only | Run the allowlisted permissionless bounded pyfolio-reloaded 0.9.9 tear-sheet core over supplied dated returns. DATA ONLY, read-only, no HMAC required, no plots, no network, no orders, no wallet/account access. |
apex_run_regime_hurstread-only | Pure regime classifier over supplied prices: returns Hurst estimate and mean_reverting/random_walk/trending label. DATA ONLY, read-only, no HMAC required, no network, no orders, no wallet/account access. |
apex_run_semver_sortread-only | Sort supplied version tags ('v1.9.0' or '1.9.0') in NUMERIC version order (v1.9.0 before v1.70.0 — which a lexical sort gets wrong). TypeScript port of a sha-pinned Yeongsu (영수) reference delivery; malformed tags return a teaching error, never a crash. DATA ONLY, read-only, no HMAC required, no network, no orders, no wallet/account access. |
apex_run_strategy_gatekeeperread-only | Composite advisory gate over supplied statistics: CI lower bound, effect size, slippage improvement, sample depth, and Holm/BH corrected p-values. DATA ONLY, read-only, no HMAC required, no orders. |
apex_run_zero_mfe_timeoutread-only | Advisory exit check for stagnant positions: returns HOLD or EXIT_TIMEOUT from seconds_open and max favorable excursion. Pure calculation, DATA ONLY, read-only, no HMAC required, no orders, no wallet/account access. Not trading advice. |
apex_submit_review | Submit a safe usage review tied to an existing Apex verification receipt. Permissionless bounded receipts need only the receipt. Verified receipts require signed Agent Passport request headers with review intent and asset:review capability; agent_id alone is not authentication. Sign the full JSON-RPC body and API-visible POST /mcp path, including through Target5 /api/mcp. Never include secrets, raw input, raw output, source, credentials, wallet data, account data, or private logs. |