The Propr.xyz API: automate your challenge with a bot

Most prop firms treat automation like contraband: bots banned, copy trading banned, API access reserved for "institutional partners" you'll never meet. Propr.xyz went the other way — it ships a public REST API, official Python and JavaScript SDKs, a sandbox to test in, and a rulebook that explicitly allows bots. Bubbles, my own bot, runs on this exact API every day. Here's everything in it that matters, what your bot is actually allowed to do, and the honest decision between building your own and plugging into something that already works.

The short answer

Yes, Propr.xyz has a real, public, documented API. You generate a key in your dashboard (it starts with pk_live_), send it in the X-API-Key header, and you can read your account, manage positions and place orders on evaluation and funded accounts at up to 1,200 requests per minute. Docs live on propr.xyz/developers and GitHub, and Propr claims an integration takes under two minutes — which matches my experience: auth is one header, no signature dance, no OAuth ceremony.

What the API actually gives you

The API is organized the way a bot builder would want it: health checks you can ping without auth (/health, /health/services), a /users/me profile endpoint, and authenticated routes covering challenges, trading, and account settings. The key facts worth writing on a sticky note:

• Base URL: api.propr.xyz/v1, REST, JSON in and out.
• Auth: one API key per user, sent as X-API-Key, full account scope (orders, positions, trades).
• Rate limit: 1,200 requests/minute — generous enough for a DCA bot, a grid, or a copy-trading engine without batching gymnastics.
• SDKs: official Python and JavaScript packages, maintained in Propr's public docs repo on GitHub.
• Environments: Production (real trades on real Hyperliquid markets) and Beta — a sandbox Propr itself tells you to use to test your bot first.

Two design choices tell you Propr is serious about this. First, the Beta environment: firms that merely tolerate bots don't build you a sandbox. Second, builder codes — an optional X-Builder-ID header that identifies your bot or integration to Propr, so legitimate tools get attribution, support and API stability instead of being treated as suspicious traffic. Propr's site puts a number on the result: over 1,000 AI agents already trade on the platform.

Getting your API key, step by step

1. Create your account on Propr.xyz (signing up through my link gets you 5% USDC cashback on your challenge fee) — a Google login works, and KYC is only needed later, before you go funded.
2. Open Settings in the dashboard and generate your key. It starts with pk_live_.
3. Store it in an environment variable. Never commit it, never paste it in a public repo — the key has full trading scope on your account, and you only get one (regenerate from Settings if it ever leaks).

If you don't have a Propr account yet and want the full walkthrough — challenge choice, fees, restricted countries — the sign-up guide covers it.

Is automating a challenge even allowed?

Explicitly, yes. Propr's official rulebook (v1.0.2, April 2026) permits bots, EAs and copy trading on both challenge formats and on funded accounts. This isn't a gray zone you exploit until a payout review catches you — it's the firm's positioning. The landing page literally advertises "agent friendly" trading and a developer-first "Prop Firm OS". For a systematic trader, that changes the risk calculus completely: with most firms, the biggest non-market risk is a retroactive rule interpretation; with Propr, automation is the intended use case.

The rules your bot still has to respect

The API will happily let you breach your account — guardrails are your job. Whatever you run has to live inside the same limits as a human trader:

• 1-Step: 10% profit target, 3% fixed daily loss, 6% static max drawdown.
• 2-Step: 5% then 10% targets, 5% fixed daily loss, 8% trailing drawdown that follows your high-water mark (it stops at your starting balance and never moves back down — you can breach while still net-positive).
• Leverage caps: 5x on BTC/ETH, 2x on other crypto, 4x on equities and commodities — applied automatically.

I broke every limit down with worked examples in the Propr rules explained guide. For a bot, the practical translation is: encode the daily loss and the drawdown as hard stops before you write a single line of entry logic. A fixed wall is trivial to code; the 2-Step trailing floor needs state tracking. That asymmetry is exactly why I recommend automating the 1-Step format — the full reasoning is in Propr 1-Step vs 2-Step.

Build your own bot — or plug into one that exists

If you write code, the honest assessment: a minimal DCA or grid bot on the Python SDK is a weekend project. Health check, read account, place orders on a schedule, enforce two risk numbers. The Beta sandbox means you can be wrong safely before you're wrong expensively. Add a builder code and you're a first-class citizen of the platform. I'd genuinely encourage any dev reading this to try it — it's the most fun you can have with a prop firm account.

If you don't write code — or you'd rather not maintain infrastructure, handle reconnects, and babysit a VPS — that's the gap Bubbles closes. It's a Telegram bot that runs a disciplined DCA strategy on your own Propr account through this same official API, with your daily loss and drawdown limits enforced automatically as hard guardrails. Or, via the Radar, it replicates the trades of a vetted pro Pilot instead. Setup is about three minutes and the strategy never revenge-trades at 2am, which — let's be honest — is the feature that actually passes challenges.

The non-custodial point (read this before you trust any bot)

One thing the API's design gets right: trading access is not money access. Your pk_live_ key places orders, reads positions and manages trades — but payouts remain tied to your own KYC-verified Propr account and land in your own wallet in USDC. No bot connected by API key, Bubbles included, can withdraw your money. That's the definition of non-custodial automation, and it's the first thing you should verify about any tool before connecting it to a funded account. If a service asks for wallet keys or custody of funds instead of an exchange-style API key, walk away.

Where this fits in the bigger picture

An open API plus on-chain USDC payouts plus published payout data is what separates the new generation of on-chain prop firms from the legacy CFD shops — I compare the whole category in the best decentralized prop firms pillar. Propr is currently the strongest expression of that model: 5 account sizes (5K to 100K), 80% profit split, USDC payouts within 24 hours (~5h on average), no time limits, and an API that treats your bot as a customer instead of a threat. The funded cap is $200K across accounts — enough headroom for a systematic strategy to compound seriously.

FAQ — the Propr.xyz API

⚠️ Trading carries risk. API specs (endpoints, rate limits, key format) come from Propr's official developer documentation and rules from the official rulebook (v1.0.2, April 2026); both can change — always check propr.xyz/developers and propr.xyz/rules before building. This article is informational, contains affiliate links, and is not investment advice. Only trade what you can afford to lose.