A Personal Access Token is a secure credential that allows IB partners to access backend APIs—just like they previously did when interfacing directly with their IB portals. This token is essential for retrieving data related to:
Follow these steps to obtain your Personal Access Token:
Once generated, include the token in the Authorization header of your API requests:
{"PRIVATE-TOKEN": token}
If the user requests the API without a header / with a non-existent token / with an expired or revoked token - the API should return Status Code 401 and an error in JSON format.
For example:
{ "error": "The token for API authorization has expired. Please create a new token in your partner portal."