Docs | Kash

Builds deep links in bulk, using each market’s real outcome labels. One request can mix markets, outcomes and amounts. If one entry is invalid, it lands in errors and the rest of the batch is still returned.

Server-side only. This endpoint is CSRF-protected. Each request needs the csrf-token cookie from GET /api/csrf and the same value in an x-csrf-token header. Browsers on other origins can’t do that, because the cookie is SameSite=Strict and the API’s wildcard CORS doesn’t allow credentials. Call it from your backend. In a browser, call GET /api/markets/:id/twitter-link once per market instead.

Endpoint

POST https://app.kash.bot/api/twitter-links

Headers

string

required

application/json

csrf-token=<value>, the cookie set by GET /api/csrf.

string

required

The same token, URL-decoded. The cookie is URL-encoded, so %3D becomes =.

Request body

object[]

required

1 to 50 entries.

Show Entry

string

required

Market UUID

integer

required

The outcome you expect, from 0 to 99

number

required

Trade amount in whole USDC, from 1 to 10,000

string

Optional. It must be one of the market’s own labels for this outcome, or the default name (Yes, No or Outcome N). If it isn’t, the entry fails with Outcome is not one of the market's. Leave it out to use the market’s label.

Response

object[]

{ marketId, question, twitterUrl, tweetContent, outcomeIndex, outcomeLabel, amount } for each entry that succeeded.

object[]

{ marketId, outcomeIndex, error } for each entry that failed. error is Market not found, Market is expired, Market is not active or Outcome is not one of the market's.

object

{ requestedAt, totalRequested, totalGenerated, totalErrors }

Only verified markets that are ACTIVE or frozen, and not past their end time, get links. Each tweet mentions the X account that posts the market, or the Kash trading bot if there is none. These links don’t quote the announcement tweet.

Rate limit

Rate-limited per IP (see Rate limits).

Example request

curl -s -c kash-cookies.txt -o /dev/null https://app.kash.bot/api/csrf
RAW=$(awk '$6 == "csrf-token" { print $7 }' kash-cookies.txt)
TOKEN=$(python3 -c 'import sys, urllib.parse; print(urllib.parse.unquote(sys.argv[1]))' "$RAW")

curl -s -b kash-cookies.txt \
  -H "x-csrf-token: $TOKEN" \
  -H "Content-Type: application/json" \
  -d '{"markets":[{"marketId":"93f1445c-912c-47b4-8065-d1ff5a6b8dfc","outcomeIndex":1,"amount":25}]}' \
  https://app.kash.bot/api/twitter-links

const BASE = 'https://app.kash.bot';

async function getCsrf() {
  const res = await fetch(`${BASE}/api/csrf`);
  const setCookie = res.headers.getSetCookie().find((c) => c.startsWith('csrf-token='));
  const raw = setCookie.split(';')[0].slice('csrf-token='.length);
  return { cookie: `csrf-token=${raw}`, token: decodeURIComponent(raw) };
}

const { cookie, token } = await getCsrf(); // reusable for 24 hours
const res = await fetch(`${BASE}/api/twitter-links`, {
  method: 'POST',
  headers: { 'Content-Type': 'application/json', Cookie: cookie, 'x-csrf-token': token },
  body: JSON.stringify({
    markets: [
      { marketId: '93f1445c-912c-47b4-8065-d1ff5a6b8dfc', outcomeIndex: 1, amount: 25 },
      { marketId: '00000000-0000-4000-8000-000000000000', outcomeIndex: 0, amount: 5 },
    ],
  }),
});
const { links, errors } = await res.json();

Example response

200

{
  "links": [
    {
      "marketId": "93f1445c-912c-47b4-8065-d1ff5a6b8dfc",
      "question": "Will Ousmane Dembélé score against FC Barcelona?",
      "twitterUrl": "https://twitter.com/intent/tweet?text=<url-encoded tweetContent>&related=kash_bot_trade",
      "tweetContent": "<generated tweet text: amount, outcome and @kash_bot_trade>",
      "outcomeIndex": 1,
      "outcomeLabel": "No",
      "amount": 25
    }
  ],
  "errors": [
    { "marketId": "00000000-0000-4000-8000-000000000000", "outcomeIndex": 0, "error": "Market not found" }
  ],
  "_meta": {
    "requestedAt": "2026-10-20T17:41:37.853Z",
    "totalRequested": 2,
    "totalGenerated": 1,
    "totalErrors": 1
  }
}

403 (no CSRF cookie)

{
  "error": "CsrfTokenMissingError",
  "message": "CSRF cookie missing — call GET /api/csrf to bootstrap",
  "code": "CSRF_TOKEN_MISSING",
  "timestamp": "2026-10-20T17:40:53.081Z"
}

Overview

REST API

Webhooks

REST API SDK (TypeScript)

CLI

Protocol SDK (TypeScript)

Protocol SDK (Python)

API Error Catalogue

Public Embed API

Embed — Thread Endpoints

Embed — Market Endpoints

Embed — Twitter Deep Links

Embed — Guides

Embed — Code Examples

POST /api/twitter-links

Endpoint

Headers

Request body

Response

Rate limit

Example request

Example response

​Endpoint

​Headers

​Request body

​Response

​Rate limit

​Example request

​Example response

Endpoint

Headers

Request body

Response

Rate limit

Example request

Example response