Developer Portal
Admin APIsAccounts & FundingSessions

Admin LoginPOST

Authenticate a back-office user (CRM/broker operator) and issue a bearer admin access token used to call this API. Tokens are valid for 30 days. Requests must originate from a whitelisted IP address.

View as Markdown
POST
/user/login

Authorization

Authorization<token>

Bearer access token issued by the admin login flow.

In: header

Request Body

application/jsonRequired
usernamestring
passwordstring
curl -X POST "https://example.com/user/login" \
  -H "Authorization: <token>" \
  -H "Content-Type: application/json" \
  -d '{
    "username": "string",
    "password": "string"
  }'

A successful response.

{
  "token": "string"
}

Create Token

Issue an end-user access token for a client profile without its password, for CRM 'log in as client' handoffs. The token grants the same trading access as Client Login; expiresInSeconds bounds its lifetime and 0 defaults to 30 days. It cannot be revoked once issued, so prefer the shortest lifetime that works. Requires the 'clients-profile:token' permission.

Open Positions

Return the open positions for the specified trading account.