POST /api/broker/connect
Account required · HTTP API reference
All endpoints · Authentication and retries · Download OpenAPI
- Requires a signed-in account and permission to access this resource. Use identifiers returned by your own account's earlier requests.
- Only paper-trading connections are supported. Omit environment or send paper. Use your own broker credentials in this protected request; never put credentials in a URL or shared example.
- Protected writes require an allowed Origin, the CSRF cookie and matching X-CSRF-Token header.
Request
| Parameter | Location | Type and requirement |
|---|---|---|
Origin | header | string · required An origin allowed by this deployment. |
X-CSRF-Token | header | string · required Must match the CSRF cookie issued to this browser. |
Body · application/json
providerId optional · stringapiKeyId required · stringapiSecret required · stringenvironment optional · "paper"Example
Examples use fictional data. Replace identifiers with resources you can access. For account requests, cookies.txt must contain your own session; set CSRF_TOKEN to the matching CSRF cookie value where required.
{
"apiKeyId": "1",
"apiSecret": "REPLACE_WITH_YOUR_FLOW_VALUE"
}curl --include \
--request POST \
'https://api.weavers.app/api/broker/connect' \
--cookie cookies.txt --cookie-jar cookies.txt \
--header 'Origin: https://weavers.app' \
--header "X-CSRF-Token: ${CSRF_TOKEN}" \
--header 'Content-Type: application/json' \
--data-binary @request.jsonResponses
200 · Successful response.
application/json
{
"connected": false,
"providerId": "alpaca",
"providerLabel": "Example research",
"connectMode": "api_key",
"environment": "paper",
"accountId": null
}View response model
connected required · booleanproviderId required · "alpaca" | "tradier" | "oanda" | "ibkr"providerLabel required · stringconnectMode required · "api_key"environment required · "paper" | "live"accountId required · null | stringView accountId model
Variant 1: null
null
Variant 2: string
string
Additional fields: JSON values.
400 · Invalid request.
application/json
{
"error": "example"
}View response model
Variant 1: object
error required · stringAdditional fields: JSON values.
401 · Authentication is missing or invalid.
application/json
{}View response model
Error envelopes can include resource-specific details. Check the status before reading these fields.
error optional · stringcode optional · stringmessage optional · stringAdditional fields: JSON values.
403 · Permission, origin or CSRF check failed.
application/json
{}View response model
Error envelopes can include resource-specific details. Check the status before reading these fields.
error optional · stringcode optional · stringmessage optional · stringAdditional fields: JSON values.
409 · Revision, state or idempotency conflict.
application/json
{
"error": "example"
}View response model
Variant 1: object
error required · stringAdditional fields: JSON values.
429 · Rate limit reached; honor Retry-After when supplied.
application/json
{}View response model
Error envelopes can include resource-specific details. Check the status before reading these fields.
error optional · stringcode optional · stringmessage optional · stringAdditional fields: JSON values.
500 · Server failure.
application/json
{
"error": "example"
}View response model
error required · stringAdditional fields: JSON values.
503 · Service or dependency unavailable.
application/json
{
"error": "example"
}View response model
Variant 1: object
error required · stringAdditional fields: JSON values.
default · Operation-specific error. Inspect error/code before deciding whether to retry.
application/json
{
"error": "example"
}View response model
Variant 1: object
error required · stringAdditional fields: JSON values.