sgx_scrapper/adv-investigation/investigation.md

Advanced Browser Investigation Log

Interactive recon of www.sgx.com to understand how SGX's own frontend calls the documented/undocumented APIs.

Loading SGX — appconfig.json and the v parameter

When the browser loads https://www.sgx.com/, the React frontend fetches its configuration before issuing any data API calls:

1. https://www.sgx.com/config/appconfig.js?v=e6235fc4 — a one-line shim that queries the <sgx-config-service> DOM element.
2. https://www.sgx.com/config/appconfig.json?v=e6235fc4 — the real configuration object.

The v query parameter is a cache-bust / build version (currently e6235fc4). It is important to record and track because:

• The frontend appends it to every static asset and CMS call (locales/en.json?v=e6235fc4, etc.).
• It likely changes with each frontend deploy. When it changes, CMS_VERSION and the set of available CMS operations may also change.
• Any automation that replays the URLs below should first fetch the current appconfig.json, extract CMS_VERSION, and reconstruct CMS URLs with that version. Using an outdated version can cause queryId errors or missing operations.

Relevant fields in the current appconfig.json:

• CMS_VERSION: 70f75ec90c030bab34d750ee55d74b016f70d4b6 — used as the queryId prefix for api2.sgx.com/content-api.
• APP_CONFIG_URL / APP_CONFIG: https://www.sgx.com/config/appconfig.json.

Captured payload: payloads/resp_23_appconfig_fresh.json.

Method

• Chrome launched with --remote-debugging-port=9222.
• Navigated interactively to SGX pages.
• All network requests with Content-Type: application/json are captured.
• Request metadata logged in this file; full request/response bodies saved under payloads/.

Session details

• Date: 2026-06-25
• Browser: Google Chrome 149 / Linux
• Origin page: https://www.sgx.com/
• CMS version from appconfig: 70f75ec90c030bab34d750ee55d74b016f70d4b6

---

Page 1 — Homepage (https://www.sgx.com/)

A total of 66 requests were observed on first load. The JSON calls below are the ones relevant to the trader objectives and to resolving the previously blocked endpoints.

#	Page	Endpoint Key	URL	Method	Status	Content-Type	Response File	Notes
1	Homepage	APP_CONFIG_URL	https://www.sgx.com/config/appconfig.json?v=e6235fc4	GET	200	application/json	payloads/resp_23_appconfig.json	Master endpoint inventory; includes CMS_VERSION hash.
2	Homepage	CMS_API_URL	https://api2.sgx.com/content-api/?queryId=70f75ec90c030bab34d750ee55d74b016f70d4b6:we_chat_qr_validator	GET	200	application/json	payloads/resp_25_cms_wechat.json	Source of the authorizationtoken for api.sgx.com/announcements/v1.1/*. Response contains data.qrValidator, which is ROT13-encoded; decoding it yields the token (see Appendix A).
3	Homepage	CMS_API_URL	https://api2.sgx.com/content-api?queryId=70f75ec90c030bab34d750ee55d74b016f70d4b6%3Aall_menus&variables=%7B%22lang%22%3A%22EN%22%7D	GET	304	application/json	payloads/resp_27_cms_allmenus.json	Site navigation tree returned as nested GraphQL-like CMS data.
4	Homepage	CMS_API_URL	https://api2.sgx.com/content-api?queryId=70f75ec90c030bab34d750ee55d74b016f70d4b6%3Apage&variables=%7B%22path%22%3A%22%2F%22%2C%22lang%22%3A%22EN%22%7D	GET	304	application/json	payloads/resp_29_cms_page.json	Landing-page CMS content (/singapore-exchange).
5	Homepage	SECURITIES_API_URL	https://api.sgx.com/securities/v1.1/aggregate/	GET	200	application/json	payloads/resp_36_securities_aggregate.json	Market aggregate: total volume, value, advancers/decliners count.
6	Homepage	SECURITIES_API_URL	https://api.sgx.com/securities/v1.1/advancers/stocks/7/v?params=nc,adjusted-vwap,bond_accrued_interest,bond_clean_price,bond_dirty_price,bond_date,b,bv,p,c,change_vs_pc,change_vs_pc_percentage,cx,cn,dp,dpc,du,ed,fn,h,iiv,iopv,lt,l,o,p_,pv,ptd,s,sv,trading_time,v_,v,vl,vwap,vwap-currency	GET	200	application/json	payloads/resp_37_securities_advancers_stocks.json	Top 7 advancing stocks by value.
7	Homepage	SECURITIES_API_URL	https://api.sgx.com/securities/v1.1/advancers/reits/7/v?params=...	GET	200	application/json	payloads/resp_38_securities_advancers_reits.json	Top 7 advancing REITs by value.
8	Homepage	SECURITIES_API_URL	https://api.sgx.com/securities/v1.1/advancers/etfs/7/v?params=...	GET	200	application/json	payloads/resp_39_securities_advancers_etfs.json	Top 7 advancing ETFs by value.
9	Homepage	SECURITIES_API_URL	https://api.sgx.com/securities/v1.1/advancers/structuredwarrants/7/v?params=...	GET	200	application/json	payloads/resp_40_securities_advancers_structuredwarrants.json	Top 7 advancing structured warrants by value.
10	Homepage	SECURITIES_API_URL	https://api.sgx.com/securities/v1.1/advancers/dlcertificates/7/v?params=...	GET	200	application/json	payloads/resp_41_securities_advancers_dlcertificates.json	Top 7 advancing daily leverage certificates by value.
11	Homepage	SECURITIES_API_URL	https://api.sgx.com/securities/v1.1?params=nc,n,type,ls,m,sc,bl,sip,ex,ej,clo,cr,cur,el,r,i,cc,ig,lf	GET	200	application/json	payloads/resp_52_securities_reference.json	Static-ish reference table (security type, listing status, market, sector, currency, etc.).
12	Homepage	METADATA_API_URL	https://api.sgx.com/marketmetadata/v2	GET	200	application/json	payloads/resp_53_marketmetadata.json	~11 MB instrument master metadata.
13	Homepage	DERIVATIVES_API_URL	https://api.sgx.com/derivatives/v1.0?aggregate=true&aggregate-option=total-volume	GET	200	application/json	payloads/resp_42_derivatives_aggregate.json	Returns a single aggregate number (data: total volume).
14	Homepage	DERIVATIVES_API_URL	https://api.sgx.com/derivatives/v1.0?groupby=cc&category=futures	GET	200	application/json	payloads/resp_43_derivatives_groupby_cc.json	All futures contracts grouped by commodity code (~1.4 MB).
15	Homepage	DERIVATIVES_API_URL	https://api.sgx.com/derivatives/v1.0/history/symbol/CNM26?days=10d&category=futures&params=base-date,total-volume,last-traded-price-abs	GET	200	application/json	payloads/resp_54_derivatives_history_CNM26.json	10-day historical OHLC-like data for a single future (CNM26).
16	Homepage	INDICES_API_URL	https://api.sgx.com/indices/v1.0/charts/intraday/pid/.STI/5d?params=lp,trading_time,vl	GET	200	application/json	payloads/resp_55_indices_sti_intraday.json	5-day intraday STI index chart (1,590 data points).
17	Homepage	INDICES_API_URL	https://api.sgx.com/indices/v1.0/pid/.STI/	GET	200	application/json	payloads/resp_56_indices_meta_sti.json	STI index metadata/last value.
18	Homepage	INDICES_API_URL	https://api.sgx.com/indices/v1.0/pid/SGN50N/	GET	200	application/json	payloads/resp_57_indices_meta_sgn50n.json	iEdge SG Enhanced N50 index metadata.
19	Homepage	INDICES_API_URL	https://api.sgx.com/indices/v1.0/pid/.SREIT/	GET	200	application/json	payloads/resp_58_indices_meta_sreit.json	iEdge S-REIT index metadata.
20	Homepage	INDICES_API_URL	https://api.sgx.com/indices/v1.0/pid/SGLC40CN/	GET	200	application/json	payloads/resp_59_indices_meta_sglc40cn.json	iEdge SG China Focus index metadata.
21	Homepage	INDICES_API_URL	https://api.sgx.com/indices/v1.0/pid/.APACFINN/	GET	200	application/json	payloads/resp_60_indices_meta_apacfinn.json	iEdge Asia Pacific Ex-Japan Financials index metadata.
22	Homepage	INDICES_API_URL	https://api.sgx.com/indices/v1.0/pid/.EMASIAUN/	GET	200	application/json	payloads/resp_61_indices_meta_emasiaun.json	iEdge Emerging Asia index metadata.
23	Homepage	INDICES_API_URL	https://api.sgx.com/indices/v1.0/pid/ASIATECN/	GET	200	application/json	payloads/resp_62_indices_meta_asiatecn.json	iEdge Asia Tech index metadata.
24	Homepage	INDICES_API_URL	https://api.sgx.com/indices/v1.0/charts/intraday/pid/.STI/5d?params=lp,trading_time,vl	GET	200	application/json	payloads/resp_63_indices_sti_intraday_dup.json	Duplicate of #16.
25	Homepage	SECURITIES_API_URL	https://api.sgx.com/securities/v1.1?params=nc,adjusted-vwap,bond_accrued_interest,bond_clean_price,bond_dirty_price,bond_date,b,bv,p,c,change_vs_pc,change_vs_pc_percentage,cx,cn,dp,dpc,du,ed,fn,h,iiv,iopv,lt,l,o,p_,pv,ptd,s,sv,trading_time,v_,v,vl,vwap,vwap-currency	GET	200	application/json	payloads/resp_64_securities_fullquote.json	Full securities snapshot (~1 MB) with pricing/volume fields.

---

Page 2 — Securities Prices (https://www.sgx.com/stock-exchange/securities-prices)

This page is the main securities screener/table.

#	Page	Endpoint Key	URL	Method	Status	Content-Type	Response File	Notes
26	Securities Prices	CMS_API_URL	https://api2.sgx.com/content-api?queryId=70f75ec90c030bab34d750ee55d74b016f70d4b6%3Apage&variables=%7B%22path%22%3A%22%2Fstock-exchange%2Fsecurities-prices%22%2C%22lang%22%3A%22EN%22%7D	GET	200	application/json	payloads/resp_72_cms_page_securities_prices.json	CMS page content for the screener.
27	Securities Prices	CMS_API_URL	https://api2.sgx.com/content-api?queryId=70f75ec90c030bab34d750ee55d74b016f70d4b6%3Aalerts&variables=%7B%22lang%22%3A%22EN%22%7D	GET	304	application/json	payloads/resp_28_cms_alerts.json	Global alert banners.
28	Securities Prices	CMS_API_URL	https://api2.sgx.com/content-api?queryId=70f75ec90c030bab34d750ee55d74b016f70d4b6%3Aderivatives_products_list&variables=%7B%22limit%22%3A100%2C%22offset%22%3A0%2C%22lang%22%3A%22EN%22%7D	GET	304	application/json	payloads/resp_44_cms_derivatives_products_list.json	CMS list of derivatives products.
29	Securities Prices	SECURITIES_API_URL	https://api.sgx.com/securities/v1.1?excludetypes=bonds&params=nc,adjusted-vwap,...,vwap-currency	GET	200	application/json	payloads/resp_74_securities_screener.json	Screener snapshot excluding bonds.
30	Securities Prices	SECURITIES_API_URL	https://api.sgx.com/securities/v1.1/circuitbreaker	GET	200	application/json	payloads/resp_75_securities_circuitbreaker.json	Active circuit-breaker records (empty at capture time).
31	Securities Prices	SECURITIES_API_URL	https://api.sgx.com/securities/v1.1?excludetypes=bonds&pagestart=0&pagesize=500&sort=vl&sortdir=desc&params=nc,adjusted-vwap,...,vwap-currency	GET	200	application/json	payloads/resp_80_securities_screener_paginated.json	Paginated/sorted screener call (top 500 by value).

Additional excludetypes=bonds calls (reqids 81, 83, 84) were polling/refreshes of the same screener data.

---

Page 3 — Indices (https://www.sgx.com/indices)

This page lists SGX and third-party indices and renders historic charts.

#	Page	Endpoint Key	URL	Method	Status	Content-Type	Response File	Notes
32	Indices	CMS_API_URL	https://api2.sgx.com/content-api?queryId=70f75ec90c030bab34d750ee55d74b016f70d4b6%3Apage&variables=%7B%22path%22%3A%22%2Findices%22%2C%22lang%22%3A%22EN%22%7D	GET	200	application/json	payloads/resp_114_cms_page_indices.json	CMS page content for indices.
33	Indices	CMS_API_URL	https://api2.sgx.com/content-api?queryId=70f75ec90c030bab34d750ee55d74b016f70d4b6%3Aindex_list&variables=%7B%22lang%22%3A%22EN%22%7D	GET	200	application/json	payloads/resp_124_cms_index_list.json	CMS-driven index taxonomy/list (~73 KB).
34	Indices	THIRDPARTY_INDICES_API_URL	https://api.sgx.com/thirdpartyindices/v1.0/chinabonds	GET	200	application/json	payloads/resp_125_thirdpartyindices_chinabonds.json	ChinaBond third-party indices.
35	Indices	INDICES_API_URL	https://api.sgx.com/indices/v1.0/	GET	200	application/json	payloads/resp_126_indices_base.json	Master index list with current OHLC/change (~50 KB, 854 items).
36	Indices	INDICES_API_URL	https://api.sgx.com/indices/v1.0/charts/historic/pid/.STI/1m?params=lp,trading_time,vl	GET	200	application/json	payloads/resp_127_indices_historic_sti_1m.json	1-month daily STI history.
37	Indices	INDICES_API_URL	https://api.sgx.com/indices/v1.0/charts/historic/pid/SGN50N/1m?params=lp,trading_time,vl	GET	200	application/json	payloads/resp_128_indices_historic_sgn50n_1m.json	1-month daily SGN50N history.
38	Indices	INDICES_API_URL	https://api.sgx.com/indices/v1.0/charts/historic/pid/IEVNTR/1m?params=lp,trading_time,vl	GET	200	application/json	payloads/resp_135_indices_historic_ievntr_1m.json	1-month daily IEVNTR history.

Additional historic-chart calls on this page used PIDs: SGN50N, SGN50LN, SGLC40CN, SREITLSP, AGREITSN, .APACFINN, ASIATECN, IEVNTR. Pattern is /indices/v1.0/charts/historic/pid/{pid}/{period}?params=lp,trading_time,vl.

---

Page 4 — Stock Exchange Overview (https://www.sgx.com/stock-exchange)

This is the Stock Exchange landing page. It shows sector heatmap, market performance, top movers, and corporate-announcement summaries.

#	Page	Endpoint Key	URL	Method	Status	Content-Type	Response File	Notes
39	Stock Exchange	CMS_API_URL	https://api2.sgx.com/content-api?queryId=70f75ec90c030bab34d750ee55d74b016f70d4b6%3Apage&variables=%7B%22path%22%3A%22%2Fstock-exchange%22%2C%22lang%22%3A%22EN%22%7D	GET	200	application/json	(observed but not saved; same shape as other page calls)	CMS page content.
40	Stock Exchange	CMS_API_URL	https://api2.sgx.com/content-api?queryId=70f75ec90c030bab34d750ee55d74b016f70d4b6%3Amarket_updates_list&variables=%7B%22category%22%3A%2226%22%2C%22limit%22%3A6%2C%22categoryFilterEnabled%22%3Atrue%2C%22lang%22%3A%22EN%22%7D	GET	200	application/json	payloads/resp_263_cms_market_updates_list.json	CMS market updates list.
41	Stock Exchange	IPO_PROSPECTUS_API_URL	https://api.sgx.com/ipoprospectus/v1.0/?closing_time=20260624_160000	GET	200	application/json	payloads/resp_251_ipoprospectus.json	IPO prospectus open/closed issues (empty at capture time).
42	Stock Exchange	SECURITIES_API_URL	https://api.sgx.com/securities/v1.1/advancers/stocks/5/v?params=nc,adjusted-vwap,...,vwap-currency	GET	200	application/json	payloads/resp_258_securities_advancers_stocks_5v.json	Top 5 advancing stocks.
43	Stock Exchange	SECURITIES_API_URL	https://api.sgx.com/securities/v1.1/aggregate/volume?securitytype=stocks	GET	200	application/json	payloads/resp_259_securities_aggregate_volume.json	Today's total stock volume.
44	Stock Exchange	SECURITIES_API_URL	https://api.sgx.com/securities/v1.1/aggregate/value?securitytype=stocks	GET	200	application/json	payloads/resp_260_securities_aggregate_value.json	Today's total stock value.
45	Stock Exchange	SECURITIES_API_URL	https://api.sgx.com/securities/v1.1/sectorbreakdown	GET	200	application/json	payloads/resp_262_securities_sectorbreakdown.json	Sector heatmap: 20 SSIC sectors with change/changePercentage.
46	Stock Exchange	ANNOUNCEMENTS_API_URL	https://api.sgx.com/announcements/v1.1/summary/company?periodstart=20260624_050955&cat=CACT	GET	200	application/json	payloads/resp_264_announcements_summary_cact.json	Summary of corporate-action announcements (CACT).
47	Stock Exchange	ANNOUNCEMENTS_API_URL	https://api.sgx.com/announcements/v1.1/summary/company?periodstart=20260624_160000&cat=TRAD	GET	200	application/json	payloads/resp_265_announcements_summary_trad.json	Summary of trading-status announcements (TRAD).
48	Stock Exchange	ANNOUNCEMENTS_API_URL	https://api.sgx.com/announcements/v1.1/summary/company?periodstart=20260624_160000&cat=ANNC%2CCACT%2CPLST%2CTRAD	GET	200	application/json	payloads/resp_266_announcements_summary_all.json	Combined announcement summary.
49	Stock Exchange	INDICES_API_URL	https://api.sgx.com/indices/v1.0/pid/.STI/, .../.FTFSTM/, .../.FTFSTS/	GET	200	application/json	payloads/resp_56_indices_meta_sti.json (already saved on Page 1) and payloads/resp_254_indices_meta_ftfstm.json, payloads/resp_255_indices_meta_ftfsts.json	Large/mid/small cap index metadata.

---

Page 5 — Company Announcements (https://www.sgx.com/stock-exchange/company-announcements)

Full searchable announcement feed.

#	Page	Endpoint Key	URL	Method	Status	Content-Type	Response File	Notes
50	Company Announcements	CMS_API_URL	https://api2.sgx.com/content-api?queryId=70f75ec90c030bab34d750ee55d74b016f70d4b6%3Apage&variables=%7B%22path%22%3A%22%2Fstock-exchange%2Fcompany-announcements%22%2C%22lang%22%3A%22EN%22%7D	GET	200	application/json	payloads/resp_303_cms_page_company_announcements.json	CMS page content.
51	Company Announcements	CMS_API_URL	https://api2.sgx.com/content-api?queryId=70f75ec90c030bab34d750ee55d74b016f70d4b6%3Ataxonomy_terms&variables=%7B%22vid%22%3A%22company_announcements_categories%22%2C%22lang%22%3A%22EN%22%7D	GET	200	application/json	payloads/resp_312_cms_taxonomy_terms.json	Announcement category taxonomy (ANNC, CACT, PLST, TRAD, etc.).
52	Company Announcements	ANNOUNCEMENTS_API_URL	https://api.sgx.com/announcements/v1.1/companylist	GET	200	application/json	payloads/resp_313_announcements_companylist.json	Filter dropdown: all issuing companies.
53	Company Announcements	ANNOUNCEMENTS_API_URL	https://api.sgx.com/announcements/v1.1/securitylist	GET	200	application/json	payloads/resp_314_announcements_securitylist.json	Filter dropdown: all securities.
54	Company Announcements	ANNOUNCEMENTS_API_URL	https://api.sgx.com/announcements/v1.1/count?periodstart=20060624_160000&periodend=20260625_155959	GET	200	application/json	payloads/resp_317_announcements_count.json	Total count of announcements in the date window.
55	Company Announcements	ANNOUNCEMENTS_API_URL	https://api.sgx.com/announcements/v1.1/?periodstart=20060624_160000&periodend=20260625_155959&pagestart=0&pagesize=20	GET	200	application/json	payloads/resp_318_announcements_list.json	Paginated announcement records with title, issuer, security, category, URL, dates.

---

Page 6 — ETF Screener (https://www.sgx.com/stock-exchange/etf-screener)

#	Page	Endpoint Key	URL	Method	Status	Content-Type	Response File	Notes
56	ETF Screener	CMS_API_URL	https://api2.sgx.com/content-api?queryId=70f75ec90c030bab34d750ee55d74b016f70d4b6%3Apage&variables=%7B%22path%22%3A%22%2Fstock-exchange%2Fetf-screener%22%2C%22lang%22%3A%22EN%22%7D	GET	200	application/json	payloads/resp_358_cms_page_etf_screener.json	CMS page content.
57	ETF Screener	SECURITIES_API_URL	https://api.sgx.com/securities/v1.1/etfs?params=n,nc,cx,lt,c,p,vl,v,sc	GET	200	application/json	payloads/resp_365_securities_etfs.json	ETF price snapshot.
58	ETF Screener	ETF_API_URL	https://api.sgx.com/etfscreener/v1.0/documents	GET	200	application/json	payloads/resp_371_etfscreener_documents.json	ETF screener document metadata (factsheets, CSVs, etc.).

Also observed: https://api2.sgx.com/sites/default/files/2026-06/May_2026_ETF%20Screener.csv — a monthly CSV dump surfaced by the screener.

---

Page 7 — IPO Performance (https://www.sgx.com/stock-exchange/ipo-performance)

#	Page	Endpoint Key	URL	Method	Status	Content-Type	Response File	Notes
59	IPO Performance	IPO_PERFORMANCE_API_URL	https://api.sgx.com/ipoperformance/v1.0/yearlist	GET	200	application/json	payloads/resp_426_ipoperformance_yearlist.json	Available years for filtering.
60	IPO Performance	IPO_PERFORMANCE_API_URL	https://api.sgx.com/ipoperformance/v1.0/issuerlist	GET	200	application/json	payloads/resp_427_ipoperformance_issuerlist.json	Issuer filter dropdown.
61	IPO Performance	IPO_PERFORMANCE_API_URL	https://api.sgx.com/ipoperformance/v1.0/companylist	GET	200	application/json	payloads/resp_428_ipoperformance_companylist.json	Company filter dropdown.
62	IPO Performance	IPO_PERFORMANCE_API_URL	https://api.sgx.com/ipoperformance/v1.0?year=2026	GET	200	application/json	payloads/resp_430_ipoperformance_year_2026.json	IPO performance data for 2026.

---

Page 8 — Investor Portal Per-Stock Page (https://investors.sgx.com/market/security-details/stocks/AWX?from=/market/securities)

The investor portal (investors.sgx.com) uses a different CMS queryId hash (9b5f40321735d88857c12bd08459b5aba7fe2d1e) and sends Origin: https://investors.sgx.com. It exposes per-stock fundamentals, analyst data, shareholder holdings, and stock charts that are not visible on www.sgx.com.

#	Page	Endpoint Key	URL	Method	Status	Content-Type	Response File	Notes
63	Investor Portal	CMS_API_URL	https://api2.sgx.com/content-api?queryId=0c6b763562fa9ad6d4b40558d2670db60437f7a6:document_list&variables=%7B%22namefilter%22:%22IP-CA-TABLE%22,%22lang%22:%22EN%22%7D	GET	304	application/json	payloads/resp_174_cms_document_list_ip_ca_table.json	CMS document list for corporate-actions table widget.
64	Investor Portal	(static JSON)	https://api2.sgx.com/sites/default/files/2026-06/IP-CA-TABLE-20260619_1.json	GET	304	application/json	payloads/resp_176_ip_ca_table_json.json	Static rendered corporate-actions table JSON.
65	Investor Portal	SECURITIES_API_URL	https://api.sgx.com/securities/v1.1?excludetypes=bonds&params=n,nc,adjusted-vwap,...,issuer-name,ig,r,i,ls,sc,bl,clo,ej,ex	GET	200	application/json	(not saved; same shape as Page 2 screener)	Full screener snapshot used by investor portal.
66	Investor Portal	SECURITIES_API_URL	https://api.sgx.com/securities/v1.1/stocks/code/AWX?ts={timestamp}	GET	200	application/json	payloads/resp_177_securities_stocks_code_awx.json	Per-stock quote/details for code AWX.
67	Investor Portal	METADATA_API_URL	https://api.sgx.com/marketmetadata/v2?stock-code=AWX	GET	200	application/json	payloads/resp_178_marketmetadata_stockcode_awx.json	Metadata scoped to single stock code.
68	Investor Portal	SECURITIES_API_URL	https://api.sgx.com/securities/v1.1//charts/historic/stocks/code/AWX/1y?params=trading_time,vl,lt	GET	200	application/json	payloads/resp_182_securities_charts_historic_awx_1y.json	1-year historic OHLC-like chart for stock AWX.
69	Investor Portal	SECURITIES_API_URL	https://api.sgx.com/securities/v1.1//charts/historic/stocks/code/AWX/1w	GET	200	application/json	(not saved; same pattern as 1y)	1-week historic chart (no params supplied by frontend).
70	Investor Portal	RATIOS_REPORTS_API_URL	https://api.sgx.com/ratiosreports/v2.0/countryCode/SGP/stockCode/AWX?params=noOfAnalysts,consensusRecommendation,targetPrice,currencyIdForConsensus	GET	200	application/json	payloads/resp_185_ratiosreports_analyst_awx.json	Analyst consensus and target price.
71	Investor Portal	SHAREHOLDERS_REPORTS_API_URL	https://api.sgx.com/shareholdersreports/v2.0/stockCode/AWX?params=investorName,investorType,investorHoldingsDate,pctOfSharesOutstanding,sharesHeld,sharesHeldChange,turnoverRating	GET	200	application/json	payloads/resp_187_shareholdersreports_awx.json	Major shareholder holdings.
72	Investor Portal	RATIOS_REPORTS_API_URL	https://api.sgx.com/ratiosreports/v2.0/countryCode/SGP/stockCode/AWX?params=beta,average3MonthVolume,totalMarketCap,fiftyTwoWeekHigh,...,currencyIdForProfitability	GET	200	application/json	payloads/resp_191_ratiosreports_full_awx.json	Full ratio/fundamental snapshot (market cap, P/E, dividend yield, EPS, margins, etc.).
73	Investor Portal	SNAPSHOT_REPORTS_API_URL	https://api.sgx.com/snapshotreports/v2.0/countryCode/SGP/stockCode/AWX?params=enterpriseValue,returnOnEquity,companyName,stockCode,sectorName,industryName,reportingCurrency,tradedCurrency,currentFiscalYear,currentFiscalYearEndMonth,currencyIdForMarketCap	GET	200	application/json	payloads/resp_192_snapshotreports_awx.json	Enterprise value, ROE, sector/industry, reporting/traded currency.
74	Investor Portal	CORPORATE_ACTIONS_API_URL	https://api.sgx.com/corporateactions/v1.0?pagesize=10&pagestart=0&ibmcode=1BA1&params=id,anncType,dateAnnc,exDate,name,particulars,recDate,datePaid&order=desc&orderBy=dateAnnc	GET	200	application/json	payloads/resp_194_corporateactions_ibmcode_awx.json	Corporate actions for IBM code 1BA1 (AEM Holdings).
75	Investor Portal	FINANCIAL_STATEMENT_REPORTS_API_URL	https://api.sgx.com/financialstatementreports/v2.0/balanceSheet/countryCode/SGP/stockCode/AWX?params=all	GET	200	application/json	payloads/resp_195_financialstatement_balance_awx.json	Balance sheet (params=all).
76	Investor Portal	FINANCIAL_STATEMENT_REPORTS_API_URL	https://api.sgx.com/financialstatementreports/v2.0/cashFlow/countryCode/SGP/stockCode/AWX?params=all	GET	200	application/json	payloads/resp_197_financialstatement_cashflow_awx.json	Cash flow statement.
77	Investor Portal	FINANCIAL_STATEMENT_REPORTS_API_URL	https://api.sgx.com/financialstatementreports/v2.0/incomeStatement/countryCode/SGP/stockCode/AWX?params=all	GET	200	application/json	payloads/resp_198_financialstatement_income_awx.json	Income statement.
78	Investor Portal	STOCKSCREENER_API_URL	https://api.sgx.com/stockscreener/v2.0/all?params=exchange,exchangeCountryCode,companyName,stockCode,marketCapitalization,salesTTM,priceToEarningsRatio,dividendYield,fourWeekPricePercentChange,thirteenWeekPricePercentChange,twentySixWeekPricePercentChange,fiftyTwoWeekPricePercentChange,netProfitMargin,returnOnAvgCommonEquity,priceToCashFlowPerShareRatio,totalDebtToTotalEquityRatio,salesPercentageChange,sector,priceToBookRatio,priceCurrCode	GET	200	application/json	payloads/resp_196_stockscreener_v2.json	~701-stock quant screener with market cap, P/E, yield, returns, sector, etc.
79	Investor Portal	SECURITIES_API_URL	https://api.sgx.com/securities/v1.1//charts/intraday/stocks/code/AWX/1d?params=trading_time,vl,lt	GET	200	application/json	payloads/resp_200_securities_charts_intraday_awx_1d.json	1-day intraday chart.
80	Investor Portal	SECURITIES_API_URL	https://api.sgx.com/securities/v1.1//charts/historic/stocks/code/AWX/1m?params=trading_time,vl,lt	GET	200	application/json	payloads/resp_220_securities_charts_historic_awx_1m.json	1-month historic chart.
81	Investor Portal	SECURITIES_API_URL	https://api.sgx.com/securities/v1.1//charts/historic/stocks/code/AWX/5y?params=trading_time,vl,lt	GET	200	application/json	payloads/resp_225_securities_charts_historic_awx_5y.json	5-year historic chart.
82	Investor Portal	ANNOUNCEMENTS_API_URL	https://api.sgx.com/announcements/v1.1/securitycode?value=AWX&cat=ANNC&securityCodeParams=securitycode&sub=ANNC17&pagestart=0&pagesize=250&periodstart={ts}	GET	200	application/json	payloads/resp_190_announcements_securitycode_awx.json	Per-stock announcements filtered by security code.

Notes:

• we_chat_qr_validator calls with queryId 9b5f40321735d88857c12bd08459b5aba7fe2d1e were also observed on every investor-portal page load.
• Several calls (snapshotreports, announcements/securitycode) carried the same authorizationtoken header used on www.sgx.com.

---

Page 9 — Fixed Income / Additional www.sgx.com patterns (https://www.sgx.com/fixed-income)

This page revealed bond-specific securities sub-paths, additional CMS operations, and legacy infofeed calls with a noCache parameter.

#	Page	Endpoint Key	URL	Method	Status	Content-Type	Response File	Notes
83	Fixed Income	CMS_API_URL	https://api2.sgx.com/content-api?queryId=70f75ec90c030bab34d750ee55d74b016f70d4b6%3Adata_settlement_prices_list&variables=%7B%22limit%22%3A0%2C%22offset%22%3A0%2C%22underlyingProductsCategory%22%3A%22191%22%2C%22underlyingProductsCategoryFilterEnabled%22%3Atrue%2C%22lang%22%3A%22EN%22%7D	GET	200	application/json	payloads/resp_766_cms_data_settlement_prices_list.json	CMS settlement-prices document list for derivatives category 191.
84	Fixed Income	CMS_API_URL	https://api2.sgx.com/content-api?queryId=70f75ec90c030bab34d750ee55d74b016f70d4b6%3Aprices_list&variables=%7B%22limit%22%3A0%2C%22offset%22%3A0%2C%22lang%22%3A%22EN%22%7D	GET	200	application/json	payloads/resp_768_cms_prices_list.json	CMS prices document list.
85	Fixed Income	SECURITIES_API_URL	https://api.sgx.com/securities/v1.1/bonds?params=nc%2Cadjusted-vwap%2Cbond_accrued_interest%2Cbond_clean_price%2Cbond_dirty_price%2Cbond_date%2Cb%2Cbv%2Cp%2Cc%2Cchange_vs_pc%2Cchange_vs_pc_percentage%2Ccx%2Ccn%2Cdp%2Cdpc%2Cdu%2Ced%2Cfn%2Ch%2Ciiv%2Ciopv%2Clt%2Cl%2Co%2Cp_%2Cpv%2Cptd%2Cs%2Csv%2Ctrading_time%2Cv_%2Cv%2Cvl%2Cvwap%2Cvwap-currency	GET	200	application/json	payloads/resp_796_securities_bonds.json	All bonds snapshot.
86	Fixed Income	SECURITIES_API_URL	https://api.sgx.com/securities/v1.1/charts/historic/retailbonds/code/91DB/1y	GET	200	application/json	payloads/resp_803_securities_charts_historic_retailbonds_91DB_1y.json	1-year historic chart for retail bond 91DB.
87	Fixed Income	SECURITIES_API_URL	https://api.sgx.com/securities/v1.1/retailbonds/code/91DB?params=...	GET	200	application/json	payloads/resp_804_securities_retailbonds_91DB.json	Retail bond 91DB detail snapshot.
88	Fixed Income	ANNOUNCEMENTS_API_URL	https://api.sgx.com/announcements/v1.1/summary/company?periodstart=20260526_052303&sub=CACT22%2CCACT10%2CCACT23%2CCACT15	GET	200	application/json	payloads/resp_799_announcements_summary_cact_sub.json	Corporate-action summary filtered by sub categories.
89	Fixed Income	V1_DERIVATIVES_DAILY_LIST_URL	https://api3.sgx.com/infofeed/Apps?A=COW_Infopubdtstat_Content&B=DailyDataDownload&S_T=1&C_T=60&noCache={timestamp}	GET	200	text/plain	(not saved; text/plain)	Legacy derivatives daily list with noCache anti-cache param.
90	Fixed Income	V1_DERIVATIVES_HISTORICAL_LIST_URL	https://api3.sgx.com/infofeed/Apps?A=COW_Tickdownload_Content&B=TimeSalesData&C_T=20&noCache={timestamp}	GET	200	text/plain	(not saved; text/plain)	Legacy derivatives historical list with noCache param.

Bond-related sub-paths observed: /securities/v1.1/bonds, /securities/v1.1/retailbonds/code/{code}, /securities/v1.1/retailpreferenceshares/code/{code}, /securities/v1.1/charts/historic/retailbonds/code/{code}/{period}.

---

Page 10 — Remaining www.sgx.com endpoints (/stock-exchange/corporate-actions, /stock-exchange/meeting-schedules, /stock-exchange/corporate-information, /fixed-income/wholesale-bonds, /fixed-income/evaluated-bond-prices, /derivatives/daily-margining, /stock-exchange/circulars, /derivatives/negotiated-large-trades, /derivatives/structured-products)

This round targeted endpoints that were still listed as blocked or unresolved after Pages 1–9.

#	Page	Endpoint Key	URL	Method	Status	Content-Type	Response File	Notes
91	Corporate Actions	CMS_API_URL	https://api2.sgx.com/content-api?queryId=70f75ec90c030bab34d750ee55d74b016f70d4b6%3Apage&variables=%7B%22path%22%3A%22%2Fstock-exchange%2Fcorporate-actions%22%2C%22lang%22%3A%22EN%22%7D	GET	200	application/json	(observed; same page shape as prior CMS calls)	CMS page wrapper for the corporate-actions table.
92	Corporate Actions	CORPORATE_ACTIONS_API_URL	https://api.sgx.com/corporateactions/v1.0/metalist	GET	200	application/json	payloads/resp_1185_corporateactions_metalist.json	~112 KB gzipped list of companyName filter values.
93	Corporate Actions	CORPORATE_ACTIONS_API_URL	https://api.sgx.com/corporateactions/v1.0?pagestart=0&pagesize=20&params=id%2CanncType%2CdatePaid%2CexDate%2Cname%2Cparticulars%2CrecDate	GET	200	application/json	payloads/resp_1188_corporateactions_list.json	Paginated global corporate-actions feed (39,302 records). Fields include id, anncType, datePaid, exDate, name, particulars, recDate.
94	Meeting Schedules	MEETING_SCHEDULES_API_URL	https://api.sgx.com/meetingschedules/v1.0/metalist	GET	200	application/json	payloads/resp_868_meetingschedules_metalist.json	issuerName, securityName, anncType filter lists.
95	Meeting Schedules	MEETING_SCHEDULES_API_URL	https://api.sgx.com/meetingschedules/v1.0?pagestart=0&pagesize=20&params=issuerName%2CsecurityName%2CmeetingDateTime%2CanncType%2CanncTitle%2CrecDateTime	GET	200	application/json	payloads/resp_871_meetingschedules_list.json	Paginated AGM/EGM schedule records.
96	Corporate Information	CORPORATE_INFORMATION_API_URL	https://api.sgx.com/corporateinformation/v1.0/metalist	GET	200	application/json	payloads/resp_909_corporateinformation_metalist.json	issuerName, securityName, industry, country filter lists.
97	Corporate Information	CORPORATE_INFORMATION_API_URL	https://api.sgx.com/corporateinformation/v1.0?pagestart=0&pagesize=20&params=issuerName%2CsecurityName%2Cindustry%2Ccountry%2CincorporationDate%2ClistedDate%2CtradingCurrency%2Curl%2Cemail	GET	200	application/json	payloads/resp_912_corporateinformation_list.json	Paginated issuer profile records with incorporation/listing dates, currency, contact URL.
98	Wholesale Bonds	WHOLESALE_BONDS_API_URL	https://api.sgx.com/wholesalebonds/v1.0/metalist	GET	200	application/json	payloads/resp_1030_wholesalebonds_metalist.json	issuerName, securityName filter lists.
99	Wholesale Bonds	WHOLESALE_BONDS_API_URL	https://api.sgx.com/wholesalebonds/v1.0?pagestart=0&pagesize=20&params=issuerName%2CsecurityName%2CbondType%2ClastTradedPrice%2ClastTradedDate%2ClastTradedYield%2CcouponRate%2CmaturityDate%2CbondPriceType	GET	200	application/json	payloads/resp_1032_wholesalebonds_list.json	Paginated wholesale bond price/yield records.
100	Evaluated Bond Prices	EVALUATED_BONDS_PRICES_API_URL	https://api.sgx.com/evaluatedbondprices/v1.0/metalist	GET	200	application/json	payloads/resp_1071_evaluatedbondprices_metalist.json	issuerName, securityName filter lists.
101	Evaluated Bond Prices	EVALUATED_BONDS_PRICES_API_URL	https://api.sgx.com/evaluatedbondprices/v1.0?pagestart=0&pagesize=20&params=issuerName%2CsecurityName%2CcleanPrice%2CdirtyPrice%2CevaluatedPriceDate%2CbidPrice%2CofferPrice%2Cyield%2CcouponRate%2CmaturityDate	GET	200	application/json	payloads/resp_1073_evaluatedbondprices_list.json	Paginated evaluated bond prices.
102	Daily Margining	DAILY_MARGINING_API_URL	https://api.sgx.com/dailymargining/v1.0/outright	GET	200	application/json	payloads/resp_dailymargining_outright.json	Outright margin requirements per contract (~558 records). No authorizationtoken needed for this sub-path.
103	Daily Margining	DAILY_MARGINING_API_URL	https://api.sgx.com/dailymargining/v1.0/intracomm	GET	200	application/json	payloads/resp_dailymargining_intracomm.json	Intra-commodity spread margin offsets (~1,343 records).
104	Daily Margining	DAILY_MARGINING_API_URL	https://api.sgx.com/dailymargining/v1.0/intercomm	GET	200	application/json	payloads/resp_dailymargining_intercomm.json	Inter-commodity spread margin offsets (~6,170 records).
105	Circulars	CIRCULARS_API_URL	https://api.sgx.com/circulars/v1.0/metalist	GET	200	application/json	payloads/resp_1203_circulars_metalist.json	companyName filter list (this endpoint returns prospectuses and supplement documents, not only circulars).
106	Circulars	CIRCULARS_API_URL	https://api.sgx.com/circulars/v1.0?pagestart=0&pagesize=5	GET	200	application/json	payloads/resp_1202_circulars_list.json	Paginated prospectus/circular records: id, documentDate, prospectusType, subject, companyName.
107	Negotiated Large Trades	NLT_API_URL	https://api.sgx.com/negotiatedlargetrades/v1.0?pagestart=0&pagesize=20	GET	200	application/json	payloads/resp_1201_negotiatedlargetrades_list.json	Paginated NLT records: contractCode, instrumentGroup, category, month, year, strikePrice, quantity, businessDate, tradedDate, clearedOnDate, premium, session.
108	Structured Warrants	STRUCTURED_PRODUCTS_API_URL	https://api.sgx.com/marketmetadata/v2/structure-warrants?pagestart=0&pagesize=5	GET	200	application/json	payloads/resp_1204_structurewarrants_meta.json	Structured-warrant instrument metadata (1,183 records).
109	Freight Forward Agreements	FFA_API_URL	https://api.sgx.com/ffa/products	GET	200	application/json	payloads/resp_ffa_products.json	Product list: ["CW","PW","SW"] (capesize, panamax, supramax).
110	Freight Forward Agreements	FFA_API_URL	https://api.sgx.com/ffa/prices?product_code={CW,PW,SW}&time_period={TODAY,YESTERDAY}	GET	200	application/json	payloads/resp_ffa_prices_CW_TODAY.json, resp_ffa_prices_PW_TODAY.json, resp_ffa_prices_SW_TODAY.json	Forward curve prices per product. time_period also accepts PREVIOUS_WEEK, PREVIOUS_MONTH, PREVIOUS_YEAR, but those currently return 500. No authorizationtoken needed for /products or /prices.

Additional observations from this round:

• /derivatives/daily-margining (the CMS page) has no JSON data API on first load; the underlying DAILY_MARGINING_API_URL works if the correct sub-paths (/outright, /intracomm, /intercomm) are used. The base URL (/v1.0) and a guessed /intercommodity path still return Missing Authentication Token.
• /derivatives/structured-products is a 404 CMS route, but STRUCTURED_PRODUCTS_API_URL (/marketmetadata/v2/structure-warrants) works directly.
• /derivatives/freight-forward-agreements is a 404 CMS route, but FFA_API_URL works if the correct sub-paths are used: /products and /prices?product_code={CW,PW,SW}&time_period={TODAY,YESTERDAY}. The base URL (/ffa) and /reports/24-hour still return Missing Authentication Token.
• V1_CHART_API_URL (https://api3.sgx.com/JsonRead/chartdata) still returns Not a valid request ! for guessed parameters (qryId=STI, code=STI, code=Z74.SI&noCache=...). Correct query parameters were not identified; the current www.sgx.com frontend does not appear to call this endpoint.
• Base links.sgx.com/1.0.0/* paths (corporate-actions, securities-historical, derivatives-daily, warrants, etc.) all return 404. Individual detail links such as https://links.sgx.com/1.0.0/corporate-actions/{id} work as HTML detail pages.

---

Page 11 — Financial Reports (FINANCIAL_REPORTS_API_URL)

FINANCIAL_REPORTS_API_URL was exempt from the original discovery run, so it was investigated manually after the browser recon round. It provides a paginated metadata list of financial/periodic reports filed by SGX-listed entities.

#	Page	Endpoint Key	URL	Method	Status	Content-Type	Response File	Notes
108	Financial Reports	FINANCIAL_REPORTS_API_URL	https://api.sgx.com/financialreports/v1.0/metalist	GET	200	application/json	payloads/resp_1302_financialreports_metalist.json	companyName filter list for the UI dropdown.
109	Financial Reports	FINANCIAL_REPORTS_API_URL	https://api.sgx.com/financialreports/v1.0?pagestart=1&pagesize=10&params=id%2CcompanyName%2CdocumentDate%2CsecurityName%2Ctitle%2Curl	GET	200	application/json	payloads/resp_1300_financialreports_page1.json	Page 1 of the report metadata list. Returns id, companyName, documentDate (ms epoch), securityName, title, and a url pointing to a links.sgx.com HTML detail page. Total items: 13,348.
110	Financial Reports	FINANCIAL_REPORTS_API_URL	https://api.sgx.com/financialreports/v1.0?pagestart=2&pagesize=10&params=id%2CcompanyName%2CdocumentDate%2CsecurityName%2Ctitle%2Curl	GET	200	application/json	payloads/resp_1301_financialreports_page2.json	Page 2 confirming pagination works.

Usage notes:

• Pagination: pagestart begins at 1. pagesize=2000 is the documented bulk size; at that size the full corpus is ~7 pages (13,348 records). The small pagesize=10 captures above were made for payload-size convenience.
• Field projection: The endpoint requires/strongly prefers a params list. The useful fields are id,companyName,documentDate,securityName,title,url.
• Document retrieval: Each url is a https://links.sgx.com/1.0.0/corporate-announcements/{id}/{hash} HTML detail page. That page hosts the actual PDF attachment(s); the API itself returns metadata only.
• Headers: Include Origin: https://www.sgx.com and Referer: https://www.sgx.com/.
• Filter dependent call: .../metalist returns the companyName dropdown values, useful for per-company filtering if the API supports it.

---

Key findings across all pages

1. Many "blocked" endpoints were simply called without required sub-paths

During the first discovery run the raw appconfig URLs such as https://api.sgx.com/securities/v1.1 and https://api.sgx.com/derivatives/v1.0 returned errors. The browser reveals that the frontend never calls those bare URLs directly; it always appends resource paths or query parameters.

Examples now proven working:

• SECURITIES_API_URL:
  • /aggregate/
  • /aggregate/volume?securitytype={type} and /aggregate/value?securitytype={type}
  • /sectorbreakdown
  • /circuitbreaker
  • /advancers/{stocks,reits,etfs,structuredwarrants,dlcertificates}/{5,7}/v?params=...
  • /etfs?params=...
  • ?params=nc,n,type,ls,m,sc,bl,sip,ex,ej,clo,cr,cur,el,r,i,cc,ig,lf (reference)
  • ?params=nc,adjusted-vwap,bond_accrued_interest,...,vwap-currency (full quote)
  • ?excludetypes=bonds&params=... (screener)
• DERIVATIVES_API_URL:
  • ?aggregate=true&aggregate-option=total-volume
  • ?groupby=cc&category=futures
  • /history/symbol/{symbol}?days=10d&category=futures&params=...
• INDICES_API_URL:
  • / — master list of all indices
  • /pid/{pid}/
  • /charts/intraday/pid/{pid}/{period}?params=...
  • /charts/historic/pid/{pid}/{period}?params=...
• ANNOUNCEMENTS_API_URL:
  • /companylist, /securitylist
  • /summary/company?periodstart={ts}&cat={cat}
  • /count?periodstart={ts}&periodend={ts}
  • /?periodstart={ts}&periodend={ts}&pagestart=0&pagesize=20
• IPO_PERFORMANCE_API_URL:
  • /yearlist, /issuerlist, /companylist
  • /?year={yyyy}
• IPO_PROSPECTUS_API_URL:
  • /?closing_time={yyyyMMdd_HHmmss}
• ETF_API_URL:
  • /documents
• THIRDPARTY_INDICES_API_URL:
  • /chinabonds
• FINANCIAL_REPORTS_API_URL:
  • /metalist
  • /?pagestart={n}&pagesize=2000&params=id,companyName,documentDate,securityName,title,url
• CORPORATE_ACTIONS_API_URL:
  • /metalist
  • /?pagestart=0&pagesize=20&params=id,anncType,datePaid,exDate,name,particulars,recDate (global feed)
  • /?pagesize=10&pagestart=0&ibmcode={ibmcode}&params=... (per-stock investor-portal call)
• CIRCULARS_API_URL:
  • /metalist
  • /?pagestart=0&pagesize=5 (prospectus/circular feed)
• NLT_API_URL:
  • /?pagestart=0&pagesize=20 (negotiated large trades)
• MEETING_SCHEDULES_API_URL:
  • /metalist
  • /?pagestart=0&pagesize=20&params=issuerName,securityName,meetingDateTime,anncType,anncTitle,recDateTime
• CORPORATE_INFORMATION_API_URL:
  • /metalist
  • /?pagestart=0&pagesize=20&params=issuerName,securityName,industry,country,incorporationDate,listedDate,tradingCurrency,url,email
• WHOLESALE_BONDS_API_URL:
  • /metalist
  • /?pagestart=0&pagesize=20&params=issuerName,securityName,bondType,lastTradedPrice,lastTradedDate,lastTradedYield,couponRate,maturityDate,bondPriceType
• EVALUATED_BONDS_PRICES_API_URL:
  • /metalist
  • /?pagestart=0&pagesize=20&params=issuerName,securityName,cleanPrice,dirtyPrice,evaluatedPriceDate,bidPrice,offerPrice,yield,couponRate,maturityDate
• STRUCTURED_PRODUCTS_API_URL:
  • /marketmetadata/v2/structure-warrants?pagestart=0&pagesize=...
• DAILY_MARGINING_API_URL:
  • /outright — per-contract outright margin requirements
  • /intracomm — intra-commodity spread margin offsets
  • /intercomm — inter-commodity spread margin offsets
• FFA_API_URL:
  • /products — product list (CW, PW, SW)
  • /prices?product_code={CW,PW,SW}&time_period={TODAY,YESTERDAY} — forward curve prices
  • /reports/24-hour — blocked (still requires an unknown token)
• New api.sgx.com v2.0 per-stock/fundamental endpoints (not in original appconfig):
  • /ratiosreports/v2.0/countryCode/SGP/stockCode/{code}?params=...
  • /snapshotreports/v2.0/countryCode/SGP/stockCode/{code}?params=...
  • /shareholdersreports/v2.0/stockCode/{code}?params=...
  • /financialstatementreports/v2.0/{balanceSheet,cashFlow,incomeStatement}/countryCode/SGP/stockCode/{code}?params=all
  • /stockscreener/v2.0/all?params=marketCapitalization,priceToEarningsRatio,dividendYield,sector,...
• Stock charts on SECURITIES_API_URL:
  • /charts/historic/stocks/code/{code}/{period}?params=...
  • /charts/intraday/stocks/code/{code}/{period}?params=...
• Bond sub-paths on SECURITIES_API_URL:
  • /bonds?params=...
  • /retailbonds/code/{code}?params=...
  • /retailpreferenceshares/code/{code}?params=...
  • /charts/historic/retailbonds/code/{code}/{period}?params=...
• Additional CMS operations:
  • data_settlement_prices_list
  • prices_list

2. ANNOUNCEMENTS_API_URL requires an authorizationtoken header

All api.sgx.com/announcements/v1.1/* calls carry an authorizationtoken header. This is almost certainly why the original discovery run for ANNOUNCEMENTS_API_URL returned HTTP 401.

The token is not hard-coded in the main JS bundle. It is fetched from the CMS and decoded by the frontend:

1. Request https://api2.sgx.com/content-api/?queryId={CMS_VERSION}:we_chat_qr_validator (with matching Origin/Referer).
2. The response JSON contains data.qrValidator, a ROT13-encoded string.
3. Apply ROT13 to data.qrValidator to obtain the raw authorizationtoken value.
4. Include that value as the authorizationtoken header on every api.sgx.com/announcements/v1.1/* request.

The same token is required by some investor-portal calls (e.g. /snapshotreports/v2.0/..., /announcements/v1.1/securitycode). On investors.sgx.com the frontend calls we_chat_qr_validator with that site's own CMS_VERSION, and the decoded token is used for the investor-portal API calls.

See Appendix A for a worked example and implementation notes.

3. CMS_API_URL is GraphQL-ish but uses queryId hashes

The actual host is api2.sgx.com/content-api. Calls look like:

https://api2.sgx.com/content-api?queryId={CMS_VERSION}:{operation}&variables={urlencoded_json}

Operations seen on www.sgx.com (queryId = {CMS_VERSION} from appconfig, currently 70f75ec90c030bab34d750ee55d74b016f70d4b6):

• we_chat_qr_validator
• all_menus
• alerts
• page
• advertisement_list
• derivatives_products_list
• index_list
• market_updates_list
• taxonomy_terms

The investor portal (investors.sgx.com) uses a different queryId prefix (9b5f40321735d88857c12bd08459b5aba7fe2d1e) and a document_list operation with namefilter. A third CMS prefix (0c6b763562fa9ad6d4b40558d2670db60437f7a6) was used for the IP-CA-TABLE document list.

Required headers for CORS: Origin: https://www.sgx.com / https://investors.sgx.com, and matching Referer.

4. Parameter params controls field projection

Every securities/derivatives/indices GET accepts a params query string of comma-separated field abbreviations. This is how the frontend trades payload size against field richness. Replaying a request without params may fail or return a different shape.

5. METADATA_API_URL is the instrument master

/marketmetadata/v2 returns ~11 MB of instrument metadata. The browser's compressed response was ~480 KB but the expanded JSON is ~11 MB. This is the authoritative mapping of symbols, names, sectors, currencies, listing status, etc.

6. links.sgx.com is the document delivery layer

Announcement and financial-report payloads contain url fields pointing to https://links.sgx.com/1.0.0/.... These are pre-signed/document-store URLs, not API endpoints to be scraped blindly.

7. FINANCIAL_REPORTS_API_URL is paginated

Although exempt from the original discovery run, manual probing confirmed the modern endpoint works as a paginated metadata list:

• https://api.sgx.com/financialreports/v1.0?pagestart={n}&pagesize=2000&params=id,companyName,documentDate,securityName,title,url
• pagestart begins at 1. At pagesize=2000 the corpus is ~7 pages (13,348 records as of 2026-06-25).
• A .../metalist sub-path returns the companyName filter values.
• Each record's url points to a links.sgx.com/1.0.0/corporate-announcements/{id}/{hash} HTML detail page hosting the PDF attachment(s).
• Captured payloads: payloads/resp_1300_financialreports_page1.json, payloads/resp_1301_financialreports_page2.json, payloads/resp_1302_financialreports_metalist.json.

---

Appendix A — How to obtain the authorizationtoken

Several api.sgx.com endpoints require an authorizationtoken header, notably:

• https://api.sgx.com/announcements/v1.1/*
• some investors.sgx.com calls such as /snapshotreports/v2.0/... and /announcements/v1.1/securitycode

The token is not hard-coded in the main JS bundle. The frontend retrieves it from the CMS and decodes it before use:

1. Call the CMS validator endpoint:

   GET https://api2.sgx.com/content-api/?queryId={CMS_VERSION}:we_chat_qr_validator
   

   with Origin: https://www.sgx.com and Referer: https://www.sgx.com/.

2. The response contains:

   {"data":{"qrValidator":"<ROT13-encoded-token>"}}
   

3. Apply ROT13 to the value of data.qrValidator to obtain the raw authorizationtoken.

4. Send that value as the request header:

   authorizationtoken: <decoded-value>
   

Example (captured 2026-06-25):

• CMS response qrValidator: RGxg1OtusGizp5RJaKN6BZ7w6wV1bEFPHhjPCqRQjoBKnjng8/2FSP9NdyWN0BBtiADW/mgRpnICrITvD5ILplGJRZvIA74QPJDxfvb+XeeRUSrZL/l+scNZyrotV4mn9g2K4YscUQ==
• ROT13 decode: ETkt1BghfTvmc5EWnXA6OM7j6jI1oRSCUuwCPdEDwbOXawat8/2SFC9AqlJA0OOgvNQJ/ztEcaVPeVGiQ5VYcyTWEMiVN74DCWQksio+KrrEHFeMY/y+fpAMlebgI4za9t2X4LfpHD==
• This decoded value is exactly what the announcements API requests send as authorizationtoken.

The same we_chat_qr_validator call is made on investors.sgx.com with that site's CMS_VERSION (9b5f40321735d88857c12bd08459b5aba7fe2d1e) and produces the token used by the investor-portal API calls. Treat the decoded token as a short-lived credential; do not commit it to the repository in plain text.

---

Appendix B — CORS headers

All api.sgx.com, api2.sgx.com, and api3.sgx.com calls carried an Origin/Referer matching the calling site:

Origin: https://www.sgx.com          # when called from www.sgx.com
Referer: https://www.sgx.com/

Origin: https://investors.sgx.com    # when called from investors.sgx.com
Referer: https://investors.sgx.com/

Replaying requests without the matching Origin/Referer may result in 403/401 responses.

---

Still to investigate

• STOCKS_API_URL / THIRDPARTY_INDICES_API_URL full Refinitiv/TRKD usage — direct calls to apitrkd.trkd-hs.com remain unresolved.
• V1_CHART_API_URL — legacy chart endpoint (api3.sgx.com/JsonRead/chartdata). Correct query parameters not identified; current frontend does not appear to use it.

---

Files in this directory

• investigation.md — this log.
• payloads/ — full JSON request/response bodies captured from the browser.