B2BROKER
B2CORE
B2CORE IB
B2TRADER
B2CONNECT
B2TRANSLATE
B2BROKERApps
Overview a list of all apps that have access to IB via API
The B2CORE IB API is currently restricted and not publicly available.
Apps are the credentials that integrations use to access the B2CORE IB API. To register an app, obtain an access token and make your first API call, see How to access the API.
App list
View the following information for each app:
App name
The app name.
Access level
Whether the app can change data through the API — Full access or Read-only. See Access level for details.
IP Whitelist
The IP addresses the app is allowed to call the API from. An empty list allows requests from any IP address.
Registration date
The date and time when an app was registered.
App details
To view details, click the app name or pencil icon.
The detailed information contains the following:
App name
The app name.
Client ID
The public identifier of your app.
Client secret
The private identifier of your app, which is used to verify the client's identity when accessing the system via the API. It is displayed only once, right after the app is registered; on this page it is masked.
Your Client ID and Client secret are used to verify your identity. To properly protect you and your clients, please make sure that these values are kept in a secure storage.
Registration date
The date and time when an app was registered.
Access level
Whether the app can change data through the API — Full access or Read-only. See Access level for details.
IP Whitelist
Up to 50 IPv4/IPv6 addresses or CIDR ranges the app is allowed to call the API from. An empty list allows requests from any IP address.
Access level
The access level defines what an app is allowed to do through the API:
- Full access — the app can call every API operation, including operations that create, update or delete data.
- Read-only — the app can call every GET operation (partners, referred clients, accounts, trades, rewards, reports and so on) and create export jobs (
POST /exports/async). Any other POST, PUT, PATCH or DELETE request made with the app's access token is rejected with HTTP403and theinsufficient_scopeerror code.
When you register an app in the Back Office, Read-only is pre-selected. Choose Full access only for integrations that need to change data.
To change the access level of an existing app, click the app name or pencil icon, select a new level and click Save. The change applies to the app's next API request; the app's existing access tokens stay valid and don't need to be re-issued.
Apps registered through the API without an explicit access level get Full access. In the API reference, the access level is the accessLevel field of the Clients operations (/clients), and every operation shows whether it requires read or write access.
Última actualización