eToro API POST /api/v2/trading/execution/orders

POST/api/v2/trading/execution/ordersversion v2Trading (Real)

Places an order on the real account, by amount, units or contracts, with optional leverage, stop loss and take profit. A 200 reply means the order was accepted, not that it was executed.

Risk warning: CFDs and spread bets are complex instruments and come with a high risk of losing money rapidly due to leverage. You can lose money on these products, and each provider publishes its own loss figure under FCA rules. You should consider whether you understand how they work and whether you can afford to take the high risk of losing your money. Automated and API trading can amplify losses through bugs, connectivity failures and runaway orders.

Independent and unofficialapi-portal.etoro.comchecked 12 Oct 2026

Read on eToro's own reference page on 12 Oct 2026: method, path, parameters and the top level response fields. Needs a Write key (OAuth scope etoro-public:real:write or etoro-public:trade.real:write). referenceId echoes your x-request-id, which you can pass to the orders lookup to confirm the outcome. eToro says only the buy and sellShort transactions are currently supported. Also documented on the page: additionalMargin and positionIds. Documented rate limit: 20 requests per 60 seconds, a quota shared across the order execution endpoints.

Parameters

Name	In	Type	Description
x-request-idrequired	header	string	A fresh UUID for every request.
Content-Typerequired	header	string	Send application/json on a request with a body.
actionrequired	body	string	open or close. eToro says only open is currently supported here.
transactionrequired	body	string	buy, sell, sellShort or buyToCover. buy opens a long position and sellShort opens a short one.
instrumentId	body	integer	eToro instrument ID. For an open give exactly one of instrumentId or symbol.
symbol	body	string	Ticker symbol, as the alternative to instrumentId.
orderType	body	string	mkt (market), mit (market if touched, needs triggerRate) or limitIOC (needs limitRate).
amount	body	number	Amount to invest in the order currency. Mutually exclusive with units and contracts.
units	body	number	Number of units. Mutually exclusive with amount and contracts.
contracts	body	number	Number of contracts, for real futures. Mutually exclusive with amount and units.
orderCurrency	body	string	Currency of the amount. eToro says only USD is currently supported.
leverage	body	integer	Leverage multiplier. Defaults to 1. Anything above 1 needs a stopLossRate.
stopLossRate	body	number	Rate at which the position closes to limit a loss.
takeProfitRate	body	number	Rate at which the position closes to take profit.
stopLossType	body	string	fixed or trailing. Default fixed.
settlementType	body	string	cfd, real, realFutures or marginTrade.
triggerRate	body	number	Trigger rate. Required for mit orders and rejected for the other types.
limitRate	body	number	Limit rate. Required for limitIOC orders and rejected for the other types.

Authentication headers

Name	Type	Description
x-api-keyrequired	string	Your public API key, which identifies the application. Sent with x-user-key; eToro's reference says an OAuth 2.0 bearer token can be used instead of the key pair, not alongside it. Placeholder only: never paste a real key into this site.
x-user-keyrequired	string	Your user key from Settings > Trading > API Key Management. Each key is tied to one environment (Demo or Real) and to Read or Write permission. Placeholder only.

Request

Written from the method, path and parameters recorded on this page. No demo host is recorded as a plain address for this API, so the samples read the base address from an environment variable. Not executed against a live or demo account. Credentials are read from environment variables on your own machine and are never entered on this site. The request builder writes these same snippets, from the same record.

This call takes a request body. The samples send it as JSON with a Content-Type of application/json (in Python, passing json= sets that header) and a placeholder for each of the 2 body fields the record marks as required. Each placeholder has to be replaced with a real value before the request can succeed.

Python

# Set ETORO_BASE_URL, ETORO_API_KEY, ETORO_USER_KEY as environment variables first. Never paste real values into code.
# No demo host is recorded as a plain address for this API, so the base address is read from ETORO_BASE_URL.
# Replace each {placeholder}, "..." and 0 with a real value before running.
# Optional and not shown: body fields instrumentId, symbol, orderType, amount, units, contracts, orderCurrency, leverage, stopLossRate, takeProfitRate, stopLossType, settlementType, triggerRate, limitRate.
import os
import requests

BASE_URL = os.environ["ETORO_BASE_URL"]
headers = {
    "x-api-key": os.environ["ETORO_API_KEY"],
    "x-user-key": os.environ["ETORO_USER_KEY"],
    "x-request-id": "...",
    "Content-Type": "application/json",
}
body = {"action": "...", "transaction": "..."}
resp = requests.post(BASE_URL + "/api/v2/trading/execution/orders", headers=headers, json=body, timeout=10)
resp.raise_for_status()
print(resp.json())

JavaScript

// Set ETORO_BASE_URL, ETORO_API_KEY, ETORO_USER_KEY as environment variables first. Never paste real values into code.
// No demo host is recorded as a plain address for this API, so the base address is read from ETORO_BASE_URL.
// Replace each {placeholder}, "..." and 0 with a real value before running.
// Optional and not shown: body fields instrumentId, symbol, orderType, amount, units, contracts, orderCurrency, leverage, stopLossRate, takeProfitRate, stopLossType, settlementType, triggerRate, limitRate.
// Run as a module, for example a .mjs file, on a Node version that has fetch built in.
const BASE_URL = process.env.ETORO_BASE_URL;
const res = await fetch(BASE_URL + "/api/v2/trading/execution/orders", {
  method: "POST",
  headers: {
    "x-api-key": process.env.ETORO_API_KEY,
    "x-user-key": process.env.ETORO_USER_KEY,
    "x-request-id": "...",
    "Content-Type": "application/json",
  },
  body: JSON.stringify({"action": "...", "transaction": "..."}),
});
if (!res.ok) throw new Error(`HTTP ${res.status}`);
console.log(await res.json());

curl

# Set ETORO_BASE_URL, ETORO_API_KEY, ETORO_USER_KEY as environment variables first. Never paste real values into code.
# No demo host is recorded as a plain address for this API, so the base address is read from ETORO_BASE_URL.
# Replace each {placeholder}, "..." and 0 with a real value before running.
# Optional and not shown: body fields instrumentId, symbol, orderType, amount, units, contracts, orderCurrency, leverage, stopLossRate, takeProfitRate, stopLossType, settlementType, triggerRate, limitRate.
curl -X POST "$ETORO_BASE_URL/api/v2/trading/execution/orders" \
  -H "x-api-key: $ETORO_API_KEY" \
  -H "x-user-key: $ETORO_USER_KEY" \
  -H "x-request-id: ..." \
  -H "Content-Type: application/json" \
  -d '{"action": "...", "transaction": "..."}'

Response

A mock response. The values are invented, so check field names against the official reference.

{
  "_mock": true,
  "token": "00000000-0000-4000-8000-000000000001",
  "orderId": 900001,
  "referenceId": "00000000-0000-4000-8000-000000000002"
}

Limits that apply at eToro

Limit	Value	Scope	Source
Headline limit	60/min reads per key	user	api-portal.etoro.comchecked 20 Sep 2026

eToro API errors you may meet

All eToro API error codes, including 10 more not listed here.