OAuth support is here
For months we’ve been talking to developers and users and repeatedly hearing the same request: please build OAuth support. Today, it’s here.
What is OAuth?
But what is OAuth? It’s a standard protocol used by many platforms—like Google, Slack, GitHub, Auth0, and more—that allows access to an API or service on behalf of the end user, without having to reveal information, like an API key ID or secret, directly to the user. Each app (OAuth client) gets a token with access scope—end users will also be able to see what information the app is accessing for transparency and security.
With new OAuth support, the range of things you can do and build with the Alpaca API has widened. Examples include trading platforms, signal services, mobile apps for discretionary trading, robo-advisor apps, RIAs, and even non-US broker-dealers. Don’t believe us? Just check out any number of our existing integrations: TradingView, QuantFu, Passiv, and more. Now it’s your turn to build! Anyone with an Alpaca account can start generating one, or many, OAuth clients and start developing.
Here’s exactly how to get started:
You’ll need:
An Alpaca account
Get started:
- Head to your Alpaca Dashboard.
- On the left side, click “OAuth Apps” on the Menu.
- Sign the agreement to create an OAuth client.
- Fill out all the information requested (name, picture, callback URLs, etc). Should your OAuth App offer services for live trading, your App is subject to review and approval prior to client use.
- Whenever authorization is needed, send the end user to the OAuth Authorization page. Use your Client ID and Secret as the Query String Parameter.
- Alpaca will display the app information and prompt you/your user to authorize API access.
- Your end user will be redirected to your service/app. When this happens, you’ll be sent the access token for the user as a part of the URL.
If you have any questions please read the documentation and/or email us at [email protected]!
We can’t wait to see what you build.
Technology and services are offered by AlpacaDB, Inc. Brokerage services are provided by Alpaca Securities LLC ("Alpaca"), member FINRA/SIPC, a wholly-owned subsidiary of AlpacaDB, Inc.
This is not an offer, solicitation of an offer, or advice to buy or sell securities, or open a brokerage account in any jurisdiction where Alpaca is not registered (Alpaca is registered only in the United States).
You should know that the use or granting of any third party access to your account information or place transactions in your account at your direction is solely at your risk. Alpaca does not warrant against loss of use or any direct, indirect or consequential damages or losses to you caused by your assent, expressed or implied, to a third party accessing your account or information, including access provided through any other third party apps, systems, or sites.
