IG API POST /positions/otc

# Set IG_API_KEY, IG_CST, IG_SECURITY_TOKEN as environment variables first. Never paste real values into code.
# IG_CST and IG_SECURITY_TOKEN hold the CST and X-SECURITY-TOKEN headers that POST /session returns: step 3 of the quickstart (/brokers/ig/quickstart#step-3) captures them and this sample reads them back.
# Replace each {placeholder}, "..." and 0 with a real value before running.
# Not marked required or optional on the vendor's page, so sent here with a placeholder: direction, orderType. Leave out any the call does not need.
# Optional and not shown: body fields level, stopDistance, limitDistance, trailingStop, limitLevel, stopLevel, quoteId, timeInForce, trailingStopIncrement.
import os
import requests

BASE_URL = "https://demo-api.ig.com/gateway/deal"  # the demo host
headers = {
    "X-IG-API-KEY": os.environ["IG_API_KEY"],
    "CST": os.environ["IG_CST"],
    "X-SECURITY-TOKEN": os.environ["IG_SECURITY_TOKEN"],
    "VERSION": "2",
}
body = {"epic": "...", "direction": "...", "size": 0, "orderType": "...", "expiry": "...", "currencyCode": "...", "forceOpen": False, "guaranteedStop": False}
resp = requests.post(BASE_URL + "/positions/otc", headers=headers, json=body, timeout=10)
resp.raise_for_status()
print(resp.json())

// Set IG_API_KEY, IG_CST, IG_SECURITY_TOKEN as environment variables first. Never paste real values into code.
// IG_CST and IG_SECURITY_TOKEN hold the CST and X-SECURITY-TOKEN headers that POST /session returns: step 3 of the quickstart (/brokers/ig/quickstart#step-3) captures them and this sample reads them back.
// Replace each {placeholder}, "..." and 0 with a real value before running.
// Not marked required or optional on the vendor's page, so sent here with a placeholder: direction, orderType. Leave out any the call does not need.
// Optional and not shown: body fields level, stopDistance, limitDistance, trailingStop, limitLevel, stopLevel, quoteId, timeInForce, trailingStopIncrement.
// Run as a module, for example a .mjs file, on a Node version that has fetch built in.
const BASE_URL = "https://demo-api.ig.com/gateway/deal"; // the demo host
const res = await fetch(BASE_URL + "/positions/otc", {
  method: "POST",
  headers: {
    "X-IG-API-KEY": process.env.IG_API_KEY,
    "CST": process.env.IG_CST,
    "X-SECURITY-TOKEN": process.env.IG_SECURITY_TOKEN,
    "VERSION": "2",
    "Content-Type": "application/json",
  },
  body: JSON.stringify({"epic": "...", "direction": "...", "size": 0, "orderType": "...", "expiry": "...", "currencyCode": "...", "forceOpen": false, "guaranteedStop": false}),
});
if (!res.ok) throw new Error(`HTTP ${res.status}`);
console.log(await res.json());

# Set IG_API_KEY, IG_CST, IG_SECURITY_TOKEN as environment variables first. Never paste real values into code.
# IG_CST and IG_SECURITY_TOKEN hold the CST and X-SECURITY-TOKEN headers that POST /session returns: step 3 of the quickstart (/brokers/ig/quickstart#step-3) captures them and this sample reads them back.
# Replace each {placeholder}, "..." and 0 with a real value before running.
# Not marked required or optional on the vendor's page, so sent here with a placeholder: direction, orderType. Leave out any the call does not need.
# Optional and not shown: body fields level, stopDistance, limitDistance, trailingStop, limitLevel, stopLevel, quoteId, timeInForce, trailingStopIncrement.
curl -X POST "https://demo-api.ig.com/gateway/deal/positions/otc" \
  -H "X-IG-API-KEY: $IG_API_KEY" \
  -H "CST: $IG_CST" \
  -H "X-SECURITY-TOKEN: $IG_SECURITY_TOKEN" \
  -H "VERSION: 2" \
  -H "Content-Type: application/json" \
  -d '{"epic": "...", "direction": "...", "size": 0, "orderType": "...", "expiry": "...", "currencyCode": "...", "forceOpen": false, "guaranteedStop": false}'