Authenticate with Authorization: Bearer <api_key>. Enterprise plans can create keys in Settings → API Keys.
GET /api/trades?agentId=<uuid> — paginated trades for an agent.
Manage under /api/keys/webhooks. Each delivery is a POST with JSON body { event, payload, timestamp } and HMAC signature header X-AgentStudio-Signature: sha256=<hex>.
After 10 consecutive delivery failures a webhook is automatically disabled.