For AI agents: a documentation index is available at the root level at /llms.txt. Append /llms.txt to any URL for a page-level index, or .md for the markdown version of any page.
LogoLogo
IBKR HomeIBKR CampusLog InOpen Account
IntroductionAccount ManagementTradingAPI ReferenceWeb API v1.0 DocumentationFlex Web ServiceChangelog
IntroductionAccount ManagementTradingAPI ReferenceWeb API v1.0 DocumentationFlex Web ServiceChangelog
    • Introduction
  • Requirements & Limitations
    • Introduction
    • Supported Two Factor Authentication (2FA)
    • Canadian Residents Restricted From Programmatically Trading Canadian Products
    • WebAPI Basics Tutorial
  • Client Portal Gateway
    • Introduction
    • Limitations of the Client Portal Gateway
    • How To Modify The Client Portal Gateway Port
    • Client Portal Gateway FAQ
  • Authentication
    • Introduction
    • Session Authentication
    • Background regarding CP Web API sessions:
    • Understanding Brokerage Sessions
    • Understanding Interactive Brokers terminology
    • Managing Multiple Sessions
    • Using a Paper Account
    • Authentication Frequently Asked Questions
    • Pacing Limitations
    • Regular Server Maintenance
  • Endpoints
    • Introduction
  • Websockets
    • Introduction
    • Solicited and Unsolicited Messages
    • Subscribing to Websocket Topics
  • OAuth 1.0a
    • Introduction
      • Introduction
      • First Party OAuth Workflow
    • Understanding TESTCONS
    • OAuth 1.0a Python Libraries
    • Validate Live Session Token
  • Flex Web Service
    • Introduction
    • Error Codes
  • Introduction
  • Introduction
  • Supported Two Factor Authentication (2FA)
  • Canadian Residents Restricted From Programmatically Trading Canadian Products
  • WebAPI Basics Tutorial
  • Introduction
  • Limitations of the Client Portal Gateway
  • Download and install the Java Runtime Environment
  • Download and unzip the Client Portal API Gateway
  • Run the API Gateway
  • How To Modify The Client Portal Gateway Port
  • Client Portal Gateway FAQ
  • Introduction
  • Session Authentication
  • Background regarding CP Web API sessions:
  • Understanding Brokerage Sessions
  • Understanding Interactive Brokers terminology
  • Managing Multiple Sessions
  • Using a Paper Account
  • Authentication Frequently Asked Questions
  • Pacing Limitations
  • Regular Server Maintenance
  • Introduction
  • Introduction
  • Create or Modify Alert
  • Get a list of available alerts
  • Get details of a specific alert
  • Get MTA Alert
  • Activate or deactivate an alert
  • Delete an alert
  • Account Profit and Loss
  • Search Dynamic Account
  • Set Dynamic Account
  • Signatures and Owners
  • Switch Account
  • Receive Brokerage Accounts
  • Search the security definition by Contract ID
  • All Conids by Exchange
  • Contract information by Contract ID
  • Currency Pairs
  • Currency Exchange Rate
  • Find all Info and Rules for a given contract
  • Search Algo Params by Contract ID
  • Search Bond Filter Information
  • Search Contract by Symbol
  • Search Contract Rules
  • Search SecDef information by conid
  • Search Strikes by Underlying Contract ID
  • Security Future by Symbol
  • Security Stocks by Symbol
  • Trading Schedule by Symbol
  • Trading Schedule (NEW)
  • Introduction
  • Categorization
  • Markets and Strikes
  • Contract Rules
  • Trading schedule
  • Contract details
  • Order Submission
  • Executions and Netting
  • Allocatable Sub-Accounts
  • List All Allocation Groups
  • Retrieve Single Allocation Group
  • Add Allocation Group
  • Modify Allocation Group
  • Delete Allocation Group
  • Retrieve Allocation Presets
  • Set Allocation Presets
  • Allocation Method Codes
  • Allocation Preset Combinations
  • Unread Bulletins
  • Get a List of Subscriptions
  • Enable/Disable Specified Subscription
  • FYI Typecodes
  • Get disclaimer for a certain kind of fyi
  • Mark Disclaimer Read
  • Get Delivery Options
  • Enable/Disable Device Option
  • Delete a Device
  • Enable/Disable Email Option
  • Get a list of notifications
  • Mark Notification Read
  • Live Market Data Snapshot
  • Market Data Update Frequency
  • Regulatory Snapshot
  • Market Data Availability
  • Market Data Fields
  • Unavailable Historical Data
  • Historical Market Data
  • HMDS Period & Bar Size
  • Unsubscribe (Single)
  • Unsubscribe (All)
  • Introduction
  • Step One: Instantiate the Option Chain
  • Step Two: Find Potential Strikes
  • Step Three: Validate The Contract
  • Final Steps
  • Live Orders
  • Order Status
  • Order Status Value
  • Trades
  • Place Order
  • Cash Quantity Orders in the Web API
  • Place Order Reply Confirmation
  • Respond to a Server Prompt
  • Order Error Details
  • Preview Order / WhatIf Order
  • Overnight Order Submission
  • Bracket Orders & OCA Groups
  • Combo / Spread Orders
  • Cancel Order
  • Modify Order
  • Suppress Messages
  • Suppressible MessageIds
  • Reset Suppressed Messages
  • Portfolio Accounts
  • Portfolio Subaccounts
  • Portfolio Subaccounts (Large Account Structures)
  • Specific Account's Portfolio Information
  • Portfolio Allocation (Single)
  • Combination Positions
  • Portfolio Allocation (All)
  • Positions
  • Positions (NEW)
  • Positions by Conid
  • Invalidate Backend Portfolio Cache
  • Portfolio Summary
  • Portfolio Ledger
  • Position & Contract Info
  • All Periods
  • Account Performance
  • Transaction History
  • Iserver Scanner Parameters
  • Iserver Market Scanner
  • HMDS Market Scanner
  • Introduction
  • Authentication Status
  • Initialize Brokerage Session
  • Logout of the current session
  • Ping the server
  • Re-authenticate the Brokerage Session (Deprecated)
  • Validate SSO
  • Introduction
  • Create a Watchlist
  • Get All Watchlists
  • Get Watchlist Information
  • Delete a Watchlist
  • Introduction
  • Introduction
  • Request Session Information
  • Retrieve the Session Token
  • Establishing the Websocket with Client Portal Gateway
  • Establishing the Websocket with OAuth
  • Send a Websocket Topic
  • Solicited and Unsolicited Messages
  • Subscribing to Websocket Topics
  • Subscribe Account Summary
  • Unsubscribe Account Summary
  • Subscribe Account Ledger
  • Unsubscribe Account Ledger
  • Market Data Request
  • Cancel Market Data
  • Historical Market Data Request
  • Cancel Historical Market Data
  • Subscribe to BookTrader Price Ladder
  • Cancel Price Ladder Subscription
  • Exercise Options
  • Request Live Order Updates
  • Cancel Live Order Updates
  • Request Profit & Loss
  • Cancel Profit & Loss
  • Request Trades data
  • Cancel Trades data
  • Introduction
  • Maintain Session (Ping)
  • Introduction
  • Account Updates
  • Authentication Status
  • Bulletins
  • System Connection Messages
  • Notifications
  • Introduction
  • Introduction
  • First Party OAuth Workflow
  • Introduction
  • Third Party OAuth Workflow
  • Understanding TESTCONS
  • OAuth 1.0a Python Libraries
  • Introduction
  • Endpoint
  • OAuth Parameters
  • Request
  • Response
  • Introduction
  • Endpoint
  • Request
  • Response
  • Introduction
  • Endpoint
  • OAuth Params
  • Request
  • Response
  • Introduction
  • Endpoint
  • Diffie-Hellman Random Value
  • Diffie-Hellman Challenge
  • Prepend
  • OAuth Params
  • Encoded Base String
  • OAuth Signature
  • Realm
  • Authorization Header
  • Required Headers
  • Request
  • Response
  • Introduction
  • Prepend Bytes
  • Calculating K
  • Final Live Session Calculation
  • Validate Live Session Token
  • Introduction
  • Initial OAuth Params
  • Encoded Base String
  • OAuth Signature
  • Realm
  • Authorization Header
  • Required Headers
  • Submit The Request
  • Introduction
  • Introduction
  • Enable and Create Access Token
  • Create a Flex Query
  • Including Audit Trail Fields
  • Introduction
  • Generate a Report
  • Make request to /SendRequest
  • Success response from /SendRequest
  • Failure response from /SendRequest
  • Retrieve the Report
  • Make request to /GetStatement
  • Error Codes
IBKR HomeIBKR CampusLog InOpen Account
OAuth 1.0aFirst Party Oauth

First Party OAuth Workflow

|View as Markdown|Open in Claude|

Once you are registered in the Self-Service portal, all authentication will begin with the /live_session_token endpoint. Then you may begin making Authenticated Requests With OAuth 1.0A for our Standard Endpoints.

Live Session Token Endpoint
First Party OAuth registrants can not use the /request_token, /authorize, or /access_token endpoints. Attempts to do so will result in error.
Was this page helpful?
Edit this page
Previous

Introduction

Next

Introduction

Built with