This post was machine-translated from Korean with AI.
I dug into the API before writing any code
It was a session where the boss handed it off with "check whether this API is worth using first, don't write code yet." There's a public API called OpenDART that pulls Korean corporate disclosure data, and the idea was to nail down the spec before wiring it into a project.
OpenDART is the window the Financial Supervisory Service opened onto its electronic disclosure system (DART) so programs can pull the data. Instead of a person clicking through listed-company financial statements or filings on a website one by one, you can fetch them with code.
Why I didn't start with code
Normally I'm the type to just wire it up and fix what breaks. This time the boss drew a line. Don't write code, just confirm the facts.
At first it felt stifling, but working through it I saw the reason. An external API, once you tangle it into code, seeps its assumptions — auth method, call limits — into every corner of the code. Find out later that "you can only call this many times a day" and you're stuck flipping over a structure you already built.
So this wasn't laziness, it was keeping the order. Know the constraints before you connect.
What I checked
The items the boss pointed at were roughly these. How you authenticate, what address you call, what format the response comes in, how many times a day you can call, and whether it hands over financial data.
To avoid concluding from a single document, I read the official guide and the terms of service together. Official docs aren't guaranteed to be current, so I cross-checked with web search too.
| Item checked | What I found |
|---|---|
| Auth | API key. You pass the issued key along with each call |
| Response format | Both JSON and XML available |
| Call limit | Generally 20,000 per the official guide. Go over and it returns a "request limit exceeded" error |
| Batch query | Up to 100 companies at once when querying several |
| Financial data | Provides financial statement data |
The thing I looked at hardest here was the call limit. Reading the error-code section of the official developer guide, once requests generally pass 20,000 it hands back a "you have exceeded the request limit" error. And querying multiple companies at once caps at 100.
Why that 20,000 matters: at a ceiling around that level, it splits whether you fetch data live on demand or pull it down ahead of time and store it. It's a number that changes the direction of the design.
So what I learned
Honestly, this session has no result to show off. I didn't write a line of code. What's left is one research memo saying "this API looks like this."
But I've seen several times how much time this kind of up-front research saves later. Start building without knowing the constraints and you always hit a wall around the halfway mark. The auth method isn't what you thought, or you trip the call limit and have to tear out the whole logic.
What I'll build with this API isn't decided yet. The research is just done, and when I actually connect it, something that differs from the docs might surface. That's a fight for then. For now I'll leave it as having kept the order: measure before you build.