IG API PUT /working-orders/otc/{dealId}

# Set IG_API_KEY, IG_CST, IG_SECURITY_TOKEN as environment variables first. Never paste real values into code.
# IG_CST and IG_SECURITY_TOKEN hold the CST and X-SECURITY-TOKEN headers that POST /session returns: step 3 of the quickstart (/brokers/ig/quickstart#step-3) captures them and this sample reads them back.
# Replace each {placeholder}, "..." and 0 with a real value before running.
# Optional and not shown: body fields type, timeInForce, goodTillDate, guaranteedStop, stopLevel, stopDistance, limitLevel, limitDistance.
import os
import requests

BASE_URL = "https://demo-api.ig.com/gateway/deal"  # the demo host
headers = {
    "X-IG-API-KEY": os.environ["IG_API_KEY"],
    "CST": os.environ["IG_CST"],
    "X-SECURITY-TOKEN": os.environ["IG_SECURITY_TOKEN"],
    "VERSION": "2",
}
body = {"level": 0}
resp = requests.put(BASE_URL + "/working-orders/otc/{dealId}", headers=headers, json=body, timeout=10)
resp.raise_for_status()
print(resp.json())

// Set IG_API_KEY, IG_CST, IG_SECURITY_TOKEN as environment variables first. Never paste real values into code.
// IG_CST and IG_SECURITY_TOKEN hold the CST and X-SECURITY-TOKEN headers that POST /session returns: step 3 of the quickstart (/brokers/ig/quickstart#step-3) captures them and this sample reads them back.
// Replace each {placeholder}, "..." and 0 with a real value before running.
// Optional and not shown: body fields type, timeInForce, goodTillDate, guaranteedStop, stopLevel, stopDistance, limitLevel, limitDistance.
// Run as a module, for example a .mjs file, on a Node version that has fetch built in.
const BASE_URL = "https://demo-api.ig.com/gateway/deal"; // the demo host
const res = await fetch(BASE_URL + "/working-orders/otc/{dealId}", {
  method: "PUT",
  headers: {
    "X-IG-API-KEY": process.env.IG_API_KEY,
    "CST": process.env.IG_CST,
    "X-SECURITY-TOKEN": process.env.IG_SECURITY_TOKEN,
    "VERSION": "2",
    "Content-Type": "application/json",
  },
  body: JSON.stringify({"level": 0}),
});
if (!res.ok) throw new Error(`HTTP ${res.status}`);
console.log(await res.json());

# Set IG_API_KEY, IG_CST, IG_SECURITY_TOKEN as environment variables first. Never paste real values into code.
# IG_CST and IG_SECURITY_TOKEN hold the CST and X-SECURITY-TOKEN headers that POST /session returns: step 3 of the quickstart (/brokers/ig/quickstart#step-3) captures them and this sample reads them back.
# Replace each {placeholder}, "..." and 0 with a real value before running.
# Optional and not shown: body fields type, timeInForce, goodTillDate, guaranteedStop, stopLevel, stopDistance, limitLevel, limitDistance.
curl -X PUT "https://demo-api.ig.com/gateway/deal/working-orders/otc/{dealId}" \
  -H "X-IG-API-KEY: $IG_API_KEY" \
  -H "CST: $IG_CST" \
  -H "X-SECURITY-TOKEN: $IG_SECURITY_TOKEN" \
  -H "VERSION: 2" \
  -H "Content-Type: application/json" \
  -d '{"level": 0}'