BAV EOD API

Overview

The BAV EOD API provides access to BAV brand metrics (strength, stature, differentiation, relevance, esteem, knowledge) alongside company financial fundamentals powered by Morningstar data. The API uses JWT authentication and returns JSON responses.

Base URL: https://eod-api.bavfutures.com

Quick Start

1. Get an access token — POST to /api/getAccessToken with your client credentials
2. Search for brands — GET /api/brands?brand_name=Apple
3. Get company fundamentals — GET /api/company?ticker=AAPL.US

Contents

Authentication

All data endpoints require a JWT Bearer token. Obtain one by posting your client credentials to the token endpoint. Tokens are valid for 1 hour.

curl -X POST https://eod-api.bavfutures.com/api/getAccessToken \
  -H "Content-Type: application/json" \
  -d '{"client_id": "YOUR_ID", "client_secret": "YOUR_SECRET"}'

{
  "status": "success",
  "accessToken": "eyJhbGciOiJIUzI1NiIs..."
}

Authorization: Bearer eyJhbGciOiJIUzI1NiIs...

Brand Search

Search for brands by name and retrieve BAV brand equity metrics.

curl https://eod-api.bavfutures.com/api/brands?brand_name=Nike \
  -H "Authorization: Bearer YOUR_TOKEN"

{
  "brand_list": [
    {
      "Brand name": "Nike",
      "Sector": "Apparel & Accessories",
      "Strength rank": 97.75,
      "Stature rank": 98.05,
      "Ticker": "NKE",
      "Exchange": "US"
    }
  ]
}

Company Fundamentals

Retrieve comprehensive financial data for a company by its stock ticker. Data is sourced from Morningstar and updated daily.

curl https://eod-api.bavfutures.com/api/company?ticker=AAPL.US&filters=Highlights,AnalystRatings \
  -H "Authorization: Bearer YOUR_TOKEN"

[
  {
    "Name": "Apple Inc",
    "Ticker": "AAPL",
    "Exchange_code": "US",
    "Highlights": {
      "MarketCapitalization": 3725924237312,
      "MarketCapitalizationMln": 3725924.24,
      "EBITDA": 152901992448,
      "PERatio": 32.09,
      "PEGRatio": 2.27,
      "EarningsShare": 7.90,
      "DividendYield": 0.004,
      "ProfitMargin": 0.2704
    },
    "AnalystRatings": {
      "Rating": 3.91,
      "TargetPrice": 295.32,
      "StrongBuy": 20,
      "Buy": 7,
      "Hold": 16,
      "Sell": 1,
      "StrongSell": 2
    }
  }
]

Health Check

{
  "status": "ok",
  "checks": {
    "mysql": true,
    "mongodb": true
  }
}

Security & Rate Limits

Rate Limiting

Rate limit headers (RateLimit-Limit, RateLimit-Remaining, RateLimit-Reset) are included in every response.

Authentication Security

• JWT tokens are signed with HMAC-SHA256 and expire after 1 hour
• Keep your client credentials secure and never expose them in client-side code

Best Practices

• Store credentials server-side only — never in frontend JavaScript or mobile apps
• Cache your JWT token and reuse it until expiry instead of requesting a new one each call
• Handle 429 (Too Many Requests) responses with exponential backoff
• Use the filters parameter on /api/company to reduce payload size
• All requests are logged with IP, timestamp, and endpoint for audit purposes

Error Responses

All error responses use the following format:

{
  "status": "failed",
  "message": "Descriptive error message"
}

Status Code Reference

API Status