> ## Documentation Index
> Fetch the complete documentation index at: https://docs.trdrs.co/llms.txt
> Use this file to discover all available pages before exploring further.

# List challenge programs

> **Preview: outside the additive-only guarantee.** These shapes are the pre-contract v1 scaffold; the Phase-1 rebuild will change them. Read them, do not pin to them.

**Served only when the engine runs with `CHALLENGES_ENABLED`.** The route bundle is not merely disabled without it. It is never constructed, so every path here answers `404`.

Returns the active challenge programs. Draft (inactive) programs are never listed.



## OpenAPI

````yaml /partner-platform/openapi.json get /api/challenges
openapi: 3.1.0
info:
  title: trdrs Engine API
  version: 1.1.0
  description: >-
    ## API Reference


    This is the served OpenAPI contract for the trdrs engine: market data,
    trading and account

    routes for your firm's traders, trdrs Connect account-registration handoff,
    and preview

    challenge routes.


    See Quick Start for the first integration path: key setup, market config,
    chart data, Connect

    account registrations, idempotency, stream reconnects, and conformance.


    See Overview and API Standards for the cross-cutting contract rules.
servers:
  - url: https://app.trdrs.co
    description: Production
  - url: /
    description: This engine
security: []
tags:
  - name: Market data
    description: >-
      Symbol search and resolution, OHLCV history, quote snapshots, the server
      clock, and the live bar stream. Crypto rides each venue’s public feed;
      futures stream from the caller’s own connected Rithmic account. With none
      connected, futures requests answer 503 `feed_requires_connection`.
  - name: News
    description: >-
      Aggregated market news and the economic calendar, from licensed/open
      sources, keyword-tagged with futures roots at ingest. Platform-wide
      content (nothing per-user), admitted exactly like Market data: a licensed
      origin, a session, or a firm API key. Headlines page by published time,
      scope by instrument root, and stream live over SSE; thumbnails serve
      through the image proxy.
  - name: Trading
    description: >-
      The money surface: entries, exits, replaces, cancels, and position/account
      flattening. Every order-placing call uses `clientOrderId` as its
      idempotency key.
  - name: Account
    description: >-
      Reading a connected account. You do not create trading accounts here: a
      trader connects their own broker account (or creates a free demo account)
      in the app, and firms create evaluation accounts through the Partner API
      (Firm accounts → Create evaluation accounts) or register venue accounts
      through Connect (Create an account registration). Account state and the
      durable ledgers: balances, positions, working orders, fills, P&L history,
      and the live account stream.
  - name: Connect
    description: >-
      trdrs Connect account registration, for partner firms. Register an account
      you issued on your own venue — a pending account registration — with the
      trader’s sign-in email, optionally the venue account id and the login name
      your venue issued. The trader finds it waiting in the connect flow the
      moment they sign in with that email: the connect step is pre-filled with
      everything except the credential, which the trader always enters
      themselves. A registration never transmits a password and never grants
      access to anything before the trader’s own login succeeds. These routes
      answer a partner-scoped key only; a firm API key or a user session gets
      401. Registrations expire after 30 days; re-registering the same email +
      account refreshes the expiry instead of duplicating. The end-to-end flow
      guide is **[Quick Start](/docs/guides/quick-start)**.
  - name: Firm accounts
    description: >-
      Evaluation accounts your firm issues on the trdrs venue, through your
      partner key — the other half of account setup. Connect registrations hand
      off accounts that exist on your venue; these routes create and manage
      accounts on ours: the trader trades them on trdrs, and your firm owns the
      lifecycle. Every route is scoped to accounts your firm created through
      this API — an account the same trader opened themselves is invisible and
      untouchable here, by construction. Creation is batched with per-item
      results, and every write carries your own `referenceId`, so a crashed
      pipeline retries safely. Served when the deployment runs the prop engine;
      without it, every route in this group answers `404`.
  - name: Webhooks
    description: >-
      The outbound event bus: register an https endpoint and the platform pushes
      events to it instead of your back office polling us. Every delivery is
      signed (`trdrs-signature: t=<unix>,v1=<hmac-sha256>` over
      `${t}.${rawBody}`) so you can prove it came from us and is fresh, and
      every delivery is durable — a failed attempt is retried with backoff for
      about nine hours and the whole log is readable, so an endpoint that was
      down is a delay rather than a lost event. Serves brokers and prop firms
      alike: the account-registration (`registration.*`) events fire wherever
      Connect does, and the account events fire where the prop engine runs.
  - name: Challenges
    description: >-
      The prop evaluation surface: challenge programs and a trader’s own
      enrollments. **Preview: the one group on this page outside the
      additive-only guarantee** (the pre-contract v1 scaffold; the Phase-1
      rebuild will change these shapes; see Stability). **Cookie-authenticated,
      not key-authenticated**, and served only when the engine runs with
      `CHALLENGES_ENABLED`; without that flag the bundle is absent and every
      route below returns `404`. The firm-console/admin half of this surface is
      deliberately not documented here. It is back office, not licensed surface.
paths:
  /api/challenges:
    get:
      tags:
        - Challenges
      summary: List challenge programs
      description: >-
        **Preview: outside the additive-only guarantee.** These shapes are the
        pre-contract v1 scaffold; the Phase-1 rebuild will change them. Read
        them, do not pin to them.


        **Served only when the engine runs with `CHALLENGES_ENABLED`.** The
        route bundle is not merely disabled without it. It is never constructed,
        so every path here answers `404`.


        Returns the active challenge programs. Draft (inactive) programs are
        never listed.
      responses:
        '200':
          description: The active programs
          content:
            application/json:
              schema:
                $ref: '#/components/schemas/ChallengesResponse'
        '404':
          description: '`CHALLENGES_ENABLED` is off, so the route does not exist'
      security:
        - sessionCookie: []
      x-codeSamples:
        - lang: javascript
          label: TypeScript
          source: >-
            // First-party cookie auth: this runs in a signed-in trdrs session,
            not under an API key.

            const res = await fetch('https://app.trdrs.co/api/challenges', {
              credentials: 'include',
            })

            const data = await res.json()
        - lang: shell
          label: cURL
          source: |-
            curl 'https://app.trdrs.co/api/challenges' \
              -b "session=$TRDRS_SESSION"
components:
  schemas:
    ChallengesResponse:
      type: object
      properties:
        challenges:
          type: array
          items:
            $ref: '#/components/schemas/WireChallenge'
      required:
        - challenges
      example:
        challenges:
          - id: 3f8a1c2e-9b47-4d10-a3fe-2c61b7c90d84
            name: 50K Evaluation
            description: Two-stage evaluation on a 50K account.
            isActive: true
            stage: 1
            nextChallengeId: 8d2f5a90-1e4b-4c7a-9f3d-6b0a8c4e2f17
            allowedTypes:
              - standard
            accountSizes:
              - 50000
            currency: USD
            priceCents: 0
            profitTargetPct: 8
            maxDailyDdPct: 4
            maxTotalDdPct: 8
            ddMode: trailing_max_equity_eod
            minTradingDays: 5
            maxDurationDays: null
            allowWeekendHold: false
            profitSharePct: null
    WireChallenge:
      type: object
      properties:
        id:
          type: string
          format: uuid
        name:
          type: string
        description:
          type:
            - string
            - 'null'
        isActive:
          type: boolean
        stage:
          type: integer
          description: 'Multi-stage chains: the stage number within the program.'
        nextChallengeId:
          type:
            - string
            - 'null'
          description: The next stage’s program, for 2-step evaluations.
        allowedTypes:
          type: array
          items:
            type: string
            enum:
              - trial
              - standard
              - funded
        accountSizes:
          type: array
          items:
            type: integer
          description: Permitted starting balances, whole dollars.
        currency:
          type: string
        priceCents:
          type: integer
          description: >-
            Entry price in cents. Only a `0`-priced program is self-serve on
            this engine; see `/api/challenges/enroll`.
        profitTargetPct:
          type: number
        maxDailyDdPct:
          type:
            - number
            - 'null'
        maxTotalDdPct:
          type: number
        ddMode:
          type: string
          enum:
            - static_balance
            - static_equity
            - trailing_max_equity_eod
            - trailing_max_equity_intraday
        minTradingDays:
          type: integer
        maxDurationDays:
          type:
            - integer
            - 'null'
        allowWeekendHold:
          type: boolean
        profitSharePct:
          type:
            - number
            - 'null'
      required:
        - id
        - name
        - isActive
        - stage
        - allowedTypes
        - accountSizes
        - currency
        - priceCents
        - profitTargetPct
        - maxTotalDdPct
        - ddMode
        - minTradingDays
        - allowWeekendHold
  securitySchemes:
    sessionCookie:
      type: apiKey
      in: cookie
      name: session
      description: >-
        The signed session cookie of a logged-in trdrs user. First-party/browser
        only; a firm API key cannot reach a route secured this way.

````