eToro API GET /api/v2/market-data/instruments/search
Free text search of instruments by name or symbol, returned in order of relevance.
Risk warning: CFDs and spread bets are complex instruments and come with a high risk of losing money rapidly due to leverage. You can lose money on these products, and each provider publishes its own loss figure under FCA rules. You should consider whether you understand how they work and whether you can afford to take the high risk of losing your money. Automated and API trading can amplify losses through bugs, connectivity failures and runaway orders.
Read on eToro's own reference page on 12 Oct 2026: method, path, parameters and the top level response fields. The fields of each entry were not read, so the mock shows an empty list. eToro says instruments that are not public are left out. Documented rate limit: 120 requests per 60 seconds, shared across the market data endpoints.
Parameters
| Name | In | Type | Description |
|---|---|---|---|
| x-request-idrequired | header | string | A fresh UUID for every request. |
| queryrequired | query | string | Text to match against names and symbols, 1 to 100 characters. |
| limit | query | integer | Most results to return, 1 to 50. Default 10. |
Authentication headers
| Name | Type | Description |
|---|---|---|
| x-api-keyrequired | string | Your public API key, which identifies the application. Sent with x-user-key; eToro's reference says an OAuth 2.0 bearer token can be used instead of the key pair, not alongside it. Placeholder only: never paste a real key into this site. |
| x-user-keyrequired | string | Your user key from Settings > Trading > API Key Management. Each key is tied to one environment (Demo or Real) and to Read or Write permission. Placeholder only. |
Request
Written from the method, path and parameters recorded on this page. No demo host is recorded as a plain address for this API, so the samples read the base address from an environment variable. Not executed against a live or demo account. Credentials are read from environment variables on your own machine and are never entered on this site. The request builder writes these same snippets, from the same record.
Python
# Set ETORO_BASE_URL, ETORO_API_KEY, ETORO_USER_KEY as environment variables first. Never paste real values into code.
# No demo host is recorded as a plain address for this API, so the base address is read from ETORO_BASE_URL.
# Replace each {placeholder}, "..." and 0 with a real value before running.
# Optional and not shown: query parameters limit.
import os
import requests
BASE_URL = os.environ["ETORO_BASE_URL"]
headers = {
"x-api-key": os.environ["ETORO_API_KEY"],
"x-user-key": os.environ["ETORO_USER_KEY"],
"x-request-id": "...",
}
params = {"query": "{query}"}
resp = requests.get(BASE_URL + "/api/v2/market-data/instruments/search", headers=headers, params=params, timeout=10)
resp.raise_for_status()
print(resp.json())JavaScript
// Set ETORO_BASE_URL, ETORO_API_KEY, ETORO_USER_KEY as environment variables first. Never paste real values into code.
// No demo host is recorded as a plain address for this API, so the base address is read from ETORO_BASE_URL.
// Replace each {placeholder}, "..." and 0 with a real value before running.
// Optional and not shown: query parameters limit.
// Run as a module, for example a .mjs file, on a Node version that has fetch built in.
const BASE_URL = process.env.ETORO_BASE_URL;
const res = await fetch(BASE_URL + "/api/v2/market-data/instruments/search" + "?query={query}", {
method: "GET",
headers: {
"x-api-key": process.env.ETORO_API_KEY,
"x-user-key": process.env.ETORO_USER_KEY,
"x-request-id": "...",
},
});
if (!res.ok) throw new Error(`HTTP ${res.status}`);
console.log(await res.json());curl
# Set ETORO_BASE_URL, ETORO_API_KEY, ETORO_USER_KEY as environment variables first. Never paste real values into code.
# No demo host is recorded as a plain address for this API, so the base address is read from ETORO_BASE_URL.
# Replace each {placeholder}, "..." and 0 with a real value before running.
# Optional and not shown: query parameters limit.
curl -X GET "$ETORO_BASE_URL/api/v2/market-data/instruments/search?query={query}" \
-H "x-api-key: $ETORO_API_KEY" \
-H "x-user-key: $ETORO_USER_KEY" \
-H "x-request-id: ..."Response
A mock response. The values are invented, so check field names against the official reference.
{
"_mock": true,
"results": []
}Limits that apply at eToro
| Limit | Value | Scope | Source |
|---|---|---|---|
| Headline limit | 60/min reads per key | user | api-portal.etoro.comchecked |
eToro API errors you may meet
- ApiKeyRequiredThe Authenticate message was sent without the API key. eToro lists this among the error codes of an unsuccessful WebSocket Authenticate response.
- HTTP 400HTTP 400. Validation failed on the request as sent, for example a missing or malformed minDate or too many instrument IDs in one call.
- DataRequiredThe Authenticate message was sent without its data. eToro lists this among the error codes of an unsuccessful WebSocket Authenticate response.
- HTTP 403HTTP 403. The key or token is recognised but lacks the permission this call needs.
- InvalidKeyA key in the Authenticate message is not valid. eToro lists this among the error codes of an unsuccessful WebSocket Authenticate response.
- HTTP 404HTTP 404. The order, position or username in the request was not found. eToro also uses 404 for some upstream or validation failures.
All eToro API error codes, including 10 more not listed here.