I am trying to use the ecosystem API. The page says to grab authentication token from the browser. This totally seems sus to me. If I am trying to write some code to integrate licensing, grabbing a token that way to auth seems broken. Is testToken API supposed to be used to grab the auth token?
I notice the web gui uses accesstokenrequest endpoint, but they do something to the password and then base64 encode it, should i be doing something similar?
I notice the ecosystem API uses https://live.tradovateapi.com/auth/accesstokenrequest. When I go to that documentation, it doesn’t explain what sec is supposed to be?
I’m not familiar with the API, but you usually give it your credentials and then receive the access token in response. You then use that access token with additional calls to some end point. So… it’s not sus or broken. This is common.
When I look at the documentation, it shows required fields to use the API, but the documentation doesn’t make clear or explain what the fields should be set to, so how am I supposed to figure out what they need?
I figured it out. I ended up having to use the testToken endpoint in the ecosystem API.
1 Like
Hi Pancidal,
I’m running into the exact same issue — trying to automate license creation for my product through the Ecosystem API, and the only documented way to get a Bearer token is manually via Chrome DevTools, which isn’t workable for a server-side integration.
Could you share the exact request you used with the testToken endpoint? Specifically:
- The full URL
- What fields you sent in the body
- Whether it was under the Ecosystem API (ecosystemapi.ninjatrader) or somewhere else
Would really appreciate it — I think a few of us are stuck on this same step. Thanks in advance!