See Endpoints for the WebSocket URLs and access details.
Connecting
As a security best practice, keep your DFlow API key on the backend, not in browser code where anyone can read it. Stream through a backend proxy that holds the key, connects to DFlow, and relays messages to the browser. In production, access to the quote and book streams is granted per API key: a key that works for/order is not automatically allowed on the streams. Reach out to the team to request stream access on your key.