Aleta API — https://platform.aleta.io/api
Format: JSON:API (all requests/responses use {"data": {"type": "...", "attributes": {...}, "relationships": {...}}})
Auth: Bearer token (run `aleta auth login` first)

The API version travels with each path. Use the version segment shown
below — the CLI passes the path through verbatim.

## Clients & access

/v2/clients                                          GET, POST            — Manage client entities
/v2/clients/:id                                      GET, PATCH, DELETE   — Get, update, or delete a specific client
/v2/clients/:id/users                                GET, POST            — Users owned by a client
/v2/clients/:id/legal-entities                       GET, POST            — Legal entities owned by a client
/v2/clients/:id/reporting-entities                   GET, POST            — Reporting entities owned by a client
/v2/clients/:id/limits                               GET                  — Limits owned by a client
/v2/clients/:id/limits-status                        GET                  — Bulk current status of every limit on a client (?date=…)

## Users

/v2/users/:id                                        GET, PATCH, DELETE   — A specific user
/v2/users/:id/invites                                GET, POST            — Manage invite links
/v2/users/:id/invites/:inviteId/cancellation         POST                 — Cancel an outstanding invite

## Legal-entity structure

/v2/legal-entities/:id                               GET, PATCH, DELETE   — A specific legal entity
/v2/legal-entities/:id/accounts                      GET, POST            — Accounts under the legal entity
/v2/legal-entities/:id/depositories                  GET, POST            — Depositories under the legal entity
/v2/legal-entities/:id/custodian-authorities         GET, POST            — Custodian authorities under the legal entity
/v2/accounts/:id                                     GET, PATCH, DELETE   — A specific account
/v2/depositories/:id                                 GET, PATCH, DELETE   — A specific depository

## Reporting structure

/v2/reporting-entities/:id                           GET, PATCH, DELETE   — A specific reporting entity
/v2/reporting-entities/:id/portfolios                POST                 — Create a portfolio under a reporting entity
/v2/portfolios/:id                                   GET, PATCH, DELETE   — A specific portfolio

## Custodian integration

/v2/custodians                                       GET                  — List custodians (not yet available — may 404)
/v2/custodian-authorities/:id                        GET                  — A specific custodian authority
/v2/custodian-authorities/:id/files                  GET, POST            — Proof-of-access files (POST is multipart, not JSON)
/v2/custodian-authorities/:id/consent                POST                 — Submit signed consent JWT
/v2/custodian-authorities/:id/link                   POST                 — Link an account/depository
/v2/custodian-authorities/:id/revoke                 POST                 — Request revocation
/v2/custodian-auth-flows                             GET                  — List auth flows (not yet available — may 404)
/v2/custodian-auth-flows/:id                         GET                  — A specific auth flow

## Instruments (v3)

/v3/instruments                                      POST (polymorphic)   — Create instruments of various types
/v3/instruments/:id                                  GET, DELETE          — A specific instrument
/v3/instruments/:id/private-instruments              GET                  — Private instruments owned by a reporting entity (`:id` is the RE id)
/v3/instruments/:id/commitments                      GET                  — Commitments on a private-market fund
/v3/instruments/:id/commitments/:commitmentId        GET                  — One commitment
/v3/instruments/:id/prices                           GET, POST            — Price time series
/v3/instruments/:id/interest-rates                   GET, POST            — Interest-rate time series
/v3/instruments/:id/index-factors                    GET, POST            — Index-factor time series
/v3/instruments/:id/net-asset-values                 GET, POST            — NAV time series (private-market funds)
/v3/instruments/:id/net-asset-values/:navId          DELETE               — Delete a specific NAV
/v3/prices/:id                                       PATCH, DELETE        — Update or delete a specific price
/v3/interest-rates/:id                               DELETE               — Delete a specific interest rate
/v3/index-factors/:id                                DELETE               — Delete a specific index factor

## Instrument classes

/v2/instrument-classes/:id                           GET                  — A specific instrument class
/v2/instrument-classes-detailed/:id                  GET                  — A specific detailed instrument class

## Transactions (v2)

/v2/transactions                                     GET, POST (polymorphic) — Financial events on accounts
/v2/transactions/:id                                 DELETE               — Delete a specific transaction

## Holdings & performance

/v2/holdings/reporting-entities/:id                  GET                  — Aggregated holdings for a reporting entity (?fromDate=…&toDate=…&expand=…)
/v3/instrument-holdings/reporting-entities/:id       GET                  — Per-instrument holdings (always with unitsInHolding)
/v2/custodian-holdings/legal-entities/:id            GET                  — Custodian-reported raw holdings (?date=…)
/v2/performance/reporting-entities/:id               GET                  — Daily / accumulated performance over a period
/v2/performance/reporting-entities/:id/private-markets  GET               — Point-in-time private-market metrics (NAV, multiples, IRR)

## Limits

/v2/limits                                           POST                 — Create a limit
/v2/limits/:id                                       GET, DELETE          — A specific limit
/v2/limits/:id/status                                GET                  — Current status of one limit (?date=…)

## Drilling in

  aleta api --spec /v2/transactions
  aleta api --spec POST /v2/transactions --type refund-transaction
  aleta api --spec POST /v3/instruments --type bond-instrument
  aleta api --spec GET /v3/instruments/:id/prices
  aleta api --spec /v2/performance/reporting-entities/:id

POST/PUT/PATCH/DELETE are blocked at v0.0.0; calling them prints a
preview of the request that would have been sent (with the bearer
token redacted) and exits 1.