POST /api/broker/orders

All endpoints · Authentication and retries · Download OpenAPI

• Requires a signed-in account and permission to access this resource. Use identifiers returned by your own account's earlier requests.
• Requires a connected paper-trading account. Only whole-share quantities are supported; live environments are rejected. Read broker status and verify the symbol, side and quantity before submitting.
• Protected writes require an allowed Origin, the CSRF cookie and matching X-CSRF-Token header.
• Send a fresh X-Request-Nonce and current X-Request-Timestamp on every attempt. Reuse an idempotency key only for the same logical action.

Request

Example

Examples use fictional data. Replace identifiers with resources you can access. For account requests, cookies.txt must contain your own session; set CSRF_TOKEN to the matching CSRF cookie value where required.

{
  "providerId": "alpaca",
  "symbol": "AAPL",
  "side": "buy",
  "qty": 1
}

curl --include \
  --request POST \
  'https://api.weavers.app/api/broker/orders' \
  --cookie cookies.txt --cookie-jar cookies.txt \
  --header 'x-idempotency-key: example-request-0001' \
  --header "X-Request-Nonce: $(openssl rand -hex 16)" \
  --header "X-Request-Timestamp: $(date +%s)" \
  --header 'Origin: https://weavers.app' \
  --header "X-CSRF-Token: ${CSRF_TOKEN}" \
  --header 'Content-Type: application/json' \
  --data-binary @request.json

Responses

{
  "providerId": "alpaca",
  "order": {
    "id": "1",
    "symbol": "AAPL",
    "side": "buy",
    "qty": 1,
    "status": "example",
    "filledQty": 1,
    "filledAvgPrice": null,
    "submittedAt": null
  }
}

{
  "error": "example"
}

{}

{}

{
  "error": "example"
}

{}

{
  "error": "example"
}

{
  "error": "example"
}

{
  "error": "example"
}