# Investment Bets

> Investment Bets is a gamified paper-trading web app for tracking stock-market calls by percentage return.

Investment Bets lets users place long or short paper-trading bets on stocks, compare performance on leaderboards, follow other traders, and review public track records. Prices are fetched server-side from market data so entry and exit prices are not user supplied.

## Primary Resources

- [Website](https://investment-bets.com/): Browser app for sign-in, portfolios, bets, leaderboards, public profiles, follows, feed, billing, and Telegram notifications.
- [Public leaderboard](https://investment-bets.com/leaderboard): Crawlable HTML leaderboard that links to public user profiles.
- [FAQ](https://investment-bets.com/faq): How paper trading, server-side pricing, scoring, bet slots, expiry, and billing work.
- [Full LLM overview](https://investment-bets.com/llms-full.txt): Expanded product, API, and crawler guidance.
- [Authentication notes](https://investment-bets.com/auth.md): How agents should understand account creation, cookie sessions, and protected endpoints.
- [OAuth protected-resource metadata](https://investment-bets.com/.well-known/oauth-protected-resource): Machine-readable auth discovery showing that OAuth authorization servers are not currently advertised.
- [API catalog](https://investment-bets.com/.well-known/api-catalog): RFC 9727 linkset pointing to machine-readable API descriptions.
- [OpenAPI description](https://investment-bets.com/openapi.json): Public description of the Investment Bets API surface.
- [Sitemap](https://investment-bets.com/sitemap.xml): Canonical crawlable URLs.
- [Crawler policy](https://investment-bets.com/robots.txt): Robots directives and Content-Signal preferences.

## Public API Summary

The production API origin is `https://api.investment-bets.com`. Public unauthenticated reads include leaderboards, public user profiles, and Stripe plan listings. Most account, trading, feed, follow, billing portal, and Telegram operations require an HttpOnly `auth_token` cookie from the email/password login flow.

Public HTML pages include `/leaderboard`, `/faq`, and `/user/{user_id}`. Use these pages for human-readable crawl results, and use the API endpoints for structured data.

## Agent Guidance

- Use `Accept: text/markdown` on `https://investment-bets.com/` to retrieve a concise markdown homepage.
- Use `/openapi.json` before attempting API calls.
- To assist with subscriptions, read `GET https://api.investment-bets.com/api/stripe/plans`, confirm the user's selected plan, then call authenticated `POST /api/stripe/checkout`; the user completes payment on Stripe.
- Do not call write endpoints unless a human user has explicitly authorized the action.
- Do not probe webhook endpoints.