eToro API GET /api/v1/watchlists
Returns all of your watchlists and their items, with optional paging of items and related assets.
Risk warning: CFDs and spread bets are complex instruments and come with a high risk of losing money rapidly due to leverage. You can lose money on these products, and each provider publishes its own loss figure under FCA rules. You should consider whether you understand how they work and whether you can afford to take the high risk of losing your money. Automated and API trading can amplify losses through bugs, connectivity failures and runaway orders.
Also the example call on eToro's authentication page. The documented meta shows limits of 10 watchlists and 1000 items per watchlist. Shared read quota of 60 requests per 60 seconds across the watchlist read calls. Method, path and parameters, with their required flags, were re-read on eToro's reference page for this call on 12 Oct 2026 and agree with this record; the mock reply was not compared field by field.
Parameters
| Name | In | Type | Description |
|---|---|---|---|
| x-request-idrequired | header | string (uuid) | A fresh UUID for every request. |
| itemsPerPageForSingle | query | integer | Items per watchlist; default 100. |
| ensureBuiltinWatchlists | query | boolean | Include built in watchlists; default true. |
| addRelatedAssets | query | boolean | Include related assets; default false. |
Authentication headers
| Name | Type | Description |
|---|---|---|
| x-api-keyrequired | string | Your public API key, which identifies the application. Sent with x-user-key; eToro's reference says an OAuth 2.0 bearer token can be used instead of the key pair, not alongside it. Placeholder only: never paste a real key into this site. |
| x-user-keyrequired | string | Your user key from Settings > Trading > API Key Management. Each key is tied to one environment (Demo or Real) and to Read or Write permission. Placeholder only. |
Request
Written from the method, path and parameters recorded on this page. No demo host is recorded as a plain address for this API, so the samples read the base address from an environment variable. Not executed against a live or demo account. Credentials are read from environment variables on your own machine and are never entered on this site. The request builder writes these same snippets, from the same record.
Python
# Set ETORO_BASE_URL, ETORO_API_KEY, ETORO_USER_KEY as environment variables first. Never paste real values into code.
# No demo host is recorded as a plain address for this API, so the base address is read from ETORO_BASE_URL.
# Replace each {placeholder}, "..." and 0 with a real value before running.
# Optional and not shown: query parameters itemsPerPageForSingle, ensureBuiltinWatchlists, addRelatedAssets.
import os
import requests
BASE_URL = os.environ["ETORO_BASE_URL"]
headers = {
"x-api-key": os.environ["ETORO_API_KEY"],
"x-user-key": os.environ["ETORO_USER_KEY"],
"x-request-id": "...",
}
resp = requests.get(BASE_URL + "/api/v1/watchlists", headers=headers, timeout=10)
resp.raise_for_status()
print(resp.json())JavaScript
// Set ETORO_BASE_URL, ETORO_API_KEY, ETORO_USER_KEY as environment variables first. Never paste real values into code.
// No demo host is recorded as a plain address for this API, so the base address is read from ETORO_BASE_URL.
// Replace each {placeholder}, "..." and 0 with a real value before running.
// Optional and not shown: query parameters itemsPerPageForSingle, ensureBuiltinWatchlists, addRelatedAssets.
// Run as a module, for example a .mjs file, on a Node version that has fetch built in.
const BASE_URL = process.env.ETORO_BASE_URL;
const res = await fetch(BASE_URL + "/api/v1/watchlists", {
method: "GET",
headers: {
"x-api-key": process.env.ETORO_API_KEY,
"x-user-key": process.env.ETORO_USER_KEY,
"x-request-id": "...",
},
});
if (!res.ok) throw new Error(`HTTP ${res.status}`);
console.log(await res.json());curl
# Set ETORO_BASE_URL, ETORO_API_KEY, ETORO_USER_KEY as environment variables first. Never paste real values into code.
# No demo host is recorded as a plain address for this API, so the base address is read from ETORO_BASE_URL.
# Replace each {placeholder}, "..." and 0 with a real value before running.
# Optional and not shown: query parameters itemsPerPageForSingle, ensureBuiltinWatchlists, addRelatedAssets.
curl -X GET "$ETORO_BASE_URL/api/v1/watchlists" \
-H "x-api-key: $ETORO_API_KEY" \
-H "x-user-key: $ETORO_USER_KEY" \
-H "x-request-id: ..."Response
A mock response. The values are invented, so check field names against the official reference.
{
"_mock": true,
"status": 200,
"watchlists": [
{
"watchlistId": "MOCK-WL-1",
"name": "Mock Watchlist",
"Gcid": 1000002,
"watchlistType": "Static",
"totalItems": 1,
"isDefault": true,
"isUserSelectedDefault": true,
"watchlistRank": 1,
"dynamicUrl": null,
"items": [
{
"itemId": 999001,
"itemType": "Instrument",
"itemRank": 1,
"itemAddedReason": "Manual",
"itemAddedDate": "2000-01-01T00:00:00Z"
}
]
}
],
"meta": {
"pageNumber": 0,
"itemsPerPage": 100,
"maxItemsInWatchlistLimit": 1000,
"maxWatchlistsLimit": 10
},
"isSucceeded": true
}Response schema, HTTP 200
Every field this site's OpenAPI file for eToro declares for this response.
| Field | Type | Description |
|---|---|---|
| status | integer | Not recorded |
| watchlists | array of objects | Not recorded |
| watchlistId | string | Not recorded |
| name | string | Not recorded |
| Gcid | integer | Not recorded |
| watchlistType | string | Not recorded |
| totalItems | integer | Not recorded |
| isDefault | boolean | Not recorded |
| isUserSelectedDefault | boolean | Not recorded |
| watchlistRank | integer | Not recorded |
| dynamicUrl | string, nullable | Not recorded |
| items | array of objects | Not recorded |
| itemId | integer | Not recorded |
| itemType | string | Not recorded |
| itemRank | integer | Not recorded |
| itemAddedReason | string | Not recorded |
| itemAddedDate | string | Not recorded |
| meta | object | Not recorded |
| pageNumber | integer | Not recorded |
| itemsPerPage | integer | Not recorded |
| maxItemsInWatchlistLimit | integer | Not recorded |
| maxWatchlistsLimit | integer | Not recorded |
| isSucceeded | boolean | Not recorded |
Unverifiedno source opened This schema is not sourced to a page of the provider's own that we opened, so check field names against the official reference.
Limits that apply at eToro
| Limit | Value | Scope | Source |
|---|---|---|---|
| Headline limit | 60/min reads per key | user | api-portal.etoro.comchecked |
eToro API errors you may meet
- ApiKeyRequiredThe Authenticate message was sent without the API key. eToro lists this among the error codes of an unsuccessful WebSocket Authenticate response.
- HTTP 400HTTP 400. Validation failed on the request as sent, for example a missing or malformed minDate or too many instrument IDs in one call.
- DataRequiredThe Authenticate message was sent without its data. eToro lists this among the error codes of an unsuccessful WebSocket Authenticate response.
- HTTP 403HTTP 403. The key or token is recognised but lacks the permission this call needs.
- InvalidKeyA key in the Authenticate message is not valid. eToro lists this among the error codes of an unsuccessful WebSocket Authenticate response.
- HTTP 404HTTP 404. The order, position or username in the request was not found. eToro also uses 404 for some upstream or validation failures.
All eToro API error codes, including 10 more not listed here.