Reference

API reference

15 routes. Secrets live only in server-side environment variables; the browser holds none. Manual refreshes are limited to one per 10 minutes. Each line says what the route does in plain words: click it for who can call it, what you send, what comes back and the safety limits.

Integrations

Names of configured integrations only: secret values never leave the server.

DatabaseConfigured
Supabase Postgres holds investors, signals and runs.
GeminiConfigured
Gemini Flash reads and judges the evidence.
AI backupConfigured
A second route to the same Gemini Flash model, used only if the first fails.
SearchConfigured
Tavily finds public pages about each investor.
Mail draftsConfigured
Fills your name and pitch into each draft. It never sends mail.
CalendlyConfigured
The meeting link added to every draft.
TelegramConfigured
The daily report to your phone.
CronConfigured
Starts the Monday and Thursday refresh.
AdminOpen demo
Open demo mode: no passcode needed.

Public: Anyone can call it. It reveals only facts the dashboard already shows, never a key or a note.
Passcode required: For actions a person takes in the app (refresh now, edit relationship, add a startup). The browser sends the admin passcode you type; it is never stored. On this open demo site the passcode is switched off, so these work without one.
Secret required: For machines, not people: the scheduled refresh, its internal hand-off and re-scoring. The caller must send a long server-side secret, which no page or browser ever holds, so these cannot be triggered from the website.

Pipeline and refresh

Health, the scheduled and manual refresh, and re-scoring.

POSTThe “Refresh now” button

/api/refresh

Passcode required

The same refresh, started by you from the page. It is limited to one every 10 minutes so the free search credits last.

Who can call it

Header x-admin-passcode. Not required when the deployment runs in open demo mode (DEMO_OPEN=1); disabled with 503 if neither is configured.

What you send

{ "linkedin": true } (optional; roughly doubles the search credits this run uses)

What you get back

202Started: { run_id, state }.
200already_running or nothing_due.
401Wrong passcode (answered after a 400 ms delay).
429Too many wrong passcodes (8 per 10 minutes per IP), or the manual cooldown is active (Retry-After header).
503Manual refresh is not enabled.

Safety limits

One manual run per 10 minutes, shared by everyone; monthly search-credit budget enforced by the planner (default 900); investors checked in the last 36 hours are skipped.

Technical summary

Manual refresh from the dashboard button. Same pipeline as the cron, plus an opt-in LinkedIn search.

Try it

curl -X POST -H "x-admin-passcode: …" https://…/api/refresh

Founder data

The columns a refresh can never write.

POSTSave your notes and status

/api/investors/[id]/founder

Passcode required

Edits only the columns that belong to you: relationship status, last contact date, contact history and personal notes. The refresh can never write these.

Who can call it

Header x-admin-passcode (same lockout as /api/refresh); not required in open demo mode.

What you send

{ "relationship_status"?, "last_contact_date"?: "YYYY-MM-DD"|null, "add_contact"?: { date?, channel?, note }, "personal_notes"?: string|null }   (strict: any other key is rejected)

What you get back

200{ updated: [field names] }
400Validation failed (unknown key, bad date, empty edit, bad id).
401Wrong passcode.
404No such investor.
429Too many wrong passcodes.
503Editing is not enabled.

Safety limits

Cannot write any signal-derived, profile or identity column. Audited by field name only, never by content. History is append-only.

Technical summary

Edits the founder-owned fields of one investor: relationship status, last contact date, one appended contact-history entry, personal notes. The mirror image of the refresh boundary.

Startups

Add a startup, its rubric and its evaluation.

POSTAdd a startup

/api/startups

Passcode required

Saves a new startup and asks Gemini to draft its scoring rubric. If Gemini is down, a plain default rubric is used and labelled.

Who can call it

Header x-admin-passcode (same lockout as /api/refresh); not required in open demo mode.

What you send

{ "name", "pitch", "sector", "stage": "pre_seed"|"seed"|"series_a"|"series_b_plus", "geography"?, "round_size"?, "ask"? }

What you get back

201{ slug, rubric_source: gemini|default, note }
400Validation failed (issues listed per field).
401Wrong passcode.
409The limit of 25 startups is reached.
429Too many wrong passcodes.
503Not enabled.

Safety limits

One Gemini call. Writes only the startup tables; never investors, signals or the founder's own scores.

Technical summary

Creates a startup and has Gemini Flash draft its scoring rubric. Every number the model returns is clamped by code; if Gemini fails, a plain default rubric built from the profile is stored and labelled as such. No search runs.

POSTRank investors for a startup

/api/startups/[slug]/evaluate

Passcode required

Gemini reads the evidence already collected and judges it for this startup, then fixed rules score every investor. No web search is run.

Who can call it

Header x-admin-passcode (same lockout as /api/refresh); not required in open demo mode.

What you get back

202Started; progress is in the startup's workflow steps.
200{ state: already_running }
404No such startup.
401Wrong passcode.

Safety limits

No search and no Tavily credit. At most 80 Gemini calls and 4 minutes per evaluation; whatever is not finished is reported as not judged, never guessed.

Technical summary

Judges the evidence already stored (verified signals from the last 30 days) against this startup with Gemini, then scores every searched investor with the startup's rubric. Resumable and cached: judged signals are not asked again.

POSTEdit or rewrite a rubric

/api/startups/[slug]/rubric

Passcode required

Saves your changes to a startup's rubric, or asks Gemini for a new one. Number changes re-score instantly.

Who can call it

Header x-admin-passcode (same lockout as /api/refresh); not required in open demo mode.

What you send

{ "rubric": { ... } } or { "action": "regenerate" }

What you get back

200{ rubric_source, rescored, needs_evaluation }
502Gemini could not write a new rubric; the current one is kept.
400Neither a rubric nor an action.
404No such startup.
401Wrong passcode.

Safety limits

Whatever is submitted is clamped by code before it can reach the scoring arithmetic (weights total 100, thresholds ordered, caps non-increasing).

Technical summary

Saves an edited rubric, or asks Gemini for a new one with { action: 'regenerate' }. Numbers and keyword edits re-score at once from cached judgements; changing what a topic class means clears the judgements so the next evaluation asks Gemini again.

DELETEDelete a startup

/api/startups/[slug]

Passcode required

Removes a startup with its rubric and scores. The shared investors and evidence stay.

Who can call it

Header x-admin-passcode (same lockout as /api/refresh); not required in open demo mode.

What you get back

200{ deleted: 1 }
404No such startup.
401Wrong passcode.

Safety limits

Only the startup's own rows.

Technical summary

Deletes a startup with its rubric, judgements and scores. Shared investors and evidence are untouched.

Demo mode

Synthetic accounts only: real data is never touched.

POSTReset the demo accounts

/api/demo/reset

Passcode required

Deletes the labelled demo investors and creates them again. Real investors are never touched.

Who can call it

Header x-admin-passcode; not required in open demo mode.

What you get back

200{ removed, created, demo: true }
401Wrong passcode.
429Too many wrong passcodes.
503Not enabled on this server.

Safety limits

Every statement is scoped by the is_demo flag. No search credits or model calls.

Technical summary

Demo mode: deletes the synthetic demo investors (and only those, with the runs and audit lines they produced) and recreates the five labelled Piyush accounts. Real investors, signals, runs, notes and contact history are never touched.

POSTSimulate a refresh on demo data

/api/demo/simulate

Passcode required

Pretends to run a refresh on the demo accounts only: no searches, no AI, no credits.

Who can call it

Header x-admin-passcode; not required in open demo mode.

What you get back

200{ run_id, investors, changed, action_changes, simulated: true }
401Wrong passcode.
429Too many wrong passcodes.
503Not enabled on this server.

Safety limits

Writes only the four signal columns, as the restricted refresh role, and only on demo investors. No search credits or model calls.

Technical summary

Demo mode: a simulated refresh. Re-scores the demo investors from their stored synthetic evidence and records a run labelled as simulated.

Integrations

Names of configured integrations only: secret values never leave the server.

DatabaseConfigured

Supabase Postgres holds investors, signals and runs.

GeminiConfigured

Gemini Flash reads and judges the evidence.

AI backupConfigured

A second route to the same Gemini Flash model, used only if the first fails.

SearchConfigured

Tavily finds public pages about each investor.

Mail draftsConfigured

Fills your name and pitch into each draft. It never sends mail.

CalendlyConfigured

The meeting link added to every draft.

TelegramConfigured

The daily report to your phone.

CronConfigured

Starts the Monday and Thursday refresh.

AdminOpen demo

Open demo mode: no passcode needed.