Gains Deposits API

Refresh state, last error, cookie expiry. 200 healthy · 503 starting (no successful refresh yet) or degraded (last refresh failed, or the cookie is past expiry). Same body either way.

{
  "status": "ok",
  "lastSuccessAt": "2026-09-23T17:07:41.009Z",
  "lastError": null,
  "sessionCookieOk": true,
  "cookieExpiresAt": "2026-10-07T17:07:12.274Z",
  "daysUntilCookieExpiry": 14,
  "cookieExpirySource": "rotated",
  "snapshotCount": 6,
  "scrapeInFlight": false,
  "refreshCron": "0 * * * *",
  "nextRefreshAt": "2026-09-23T18:00:00.000Z"
}

Most recent snapshot. 503 if no scrape has succeeded yet.

{
  "basis": "cumulative-all-time",
  "capturedAt": "2026-09-23T17:07:41.009Z",
  "updatedDate": "2026-09-23T17:07:22.781Z",
  "rows": [
    { "category": "Fiat",            "txCount": 122, "volumeUsd": 6109 },
    { "category": "Other",           "txCount": 1,   "volumeUsd": 0 },
    { "category": "Transfer Crypto", "txCount": 318, "volumeUsd": 75033 },
    { "category": "Wallet",          "txCount": 37,  "volumeUsd": 2739 }
  ]
}

capturedAt is when this service stored the snapshot; updatedDate is when Hex executed the cell. Always within 30 minutes of each other, or the scrape is rejected as stale.

Snapshots whose capturedAt falls in the range, oldest first. Still cumulative totals — one row set per refresh.

GET /history?from=2026-09-01T00:00:00Z&to=2026-09-23T00:00:00Z

{
  "basis": "cumulative-all-time",
  "from": "2026-09-01T00:00:00.000Z",
  "to": "2026-09-23T00:00:00.000Z",
  "count": 6,
  "snapshots": [ { "capturedAt": "…", "updatedDate": "…", "rows": [ … ] } ]
}

400 if a timestamp is unparseable or from is later than to.

Per-category difference between the snapshots nearest each bound. This is the endpoint that answers "how much was deposited in crypto vs fiat this week".

GET /delta?from=2026-09-16T00:00:00Z&to=2026-09-23T00:00:00Z

{
  "basis": "delta",
  "requested": { "from": "2026-09-16T00:00:00.000Z", "to": "2026-09-23T00:00:00.000Z" },
  "from": { "capturedAt": "2026-09-16T00:00:12.041Z", "updatedDate": "…" },
  "to":   { "capturedAt": "2026-09-23T00:00:09.882Z", "updatedDate": "…" },
  "spanHours": 168,
  "rows": [
    { "category": "Fiat",            "txCount": 80,  "volumeUsd": 1400.5 },
    { "category": "Transfer Crypto", "txCount": 405, "volumeUsd": 41250.75 }
  ],
  "totals": { "txCount": 497, "volumeUsd": 42951.25 }
}

Check the returned from/to before quoting a number — "nearest" can be hours off what you asked for if a refresh failed. A category present in only one endpoint counts as 0 in the other.

400 a bound is missing or the range is reversed · 422 both bounds resolve to the same snapshot · 503 fewer than two snapshots exist.

Replace the Hex session cookie at runtime — no restart. The cookie has a fixed 14-day TTL that traffic does not extend, so this gets used roughly fortnightly.

POST /cookie
Content-Type: application/json

{ "cookie": "s%3A…", "issuedAt": "2026-09-23T17:00:00Z", "refresh": true }

{
  "cookie": {
    "fingerprint": "8bcb330f0881",
    "expiresAt": "2026-10-07T17:00:00.000Z",
    "daysUntilExpiry": 14,
    "source": "rotated-with-issued-at"
  },
  "refreshTriggered": true,
  "refreshSkipped": null
}

The value is never logged and never returned — only a fingerprint. 400 if it is not a signed connect.sid value, the body is over 8 KB, or issuedAt is in the future.