# cTrader ProtoOARefreshTokenRes Independent and unofficial. Not affiliated with or endorsed by any broker or platform named here. Educational only: nothing here is advice, and nothing here recommends a broker or a trade. This is the markdown version of https://openbrokerapi.com/platforms/ctrader/messages/protooarefreshtokenres, written from the same records as that page. Risk warning: CFDs and spread bets are complex instruments and come with a high risk of losing money rapidly due to leverage. You can lose money on these products, and each provider publishes its own loss figure under FCA rules. You should consider whether you understand how they work and whether you can afford to take the high risk of losing your money. Automated and API trading can amplify losses through bugs, connectivity failures and runaway orders. Returns the new access token, how long it lasts and a new refresh token. - Message: `ProtoOARefreshTokenRes` - Interface: cTrader Open API - Group: Authorisation - Status: verified. Source: [help.ctrader.com](https://help.ctrader.com/open-api/messages/#protooarefreshtokenres), checked 2026-10-12. - The definition file it was checked against: https://github.com/spotware/openapi-proto-messages/blob/main/OpenApiMessages.proto This is a message of the cTrader Open API, not an HTTP endpoint. It has no method and no path: it is sent over an open TCP or WebSocket connection, as Protocol Buffers or as JSON. It is in no OpenAPI file on this site and the request builder does not list it. ## The message - Name: `ProtoOARefreshTokenRes` - Direction: Response, sent by the server - Payload type: `PROTO_OA_REFRESH_TOKEN_RES`, number `2174`. This number is what identifies the message on the wire. - Answers: [ProtoOARefreshTokenReq](https://openbrokerapi.com/platforms/ctrader/messages/protooarefreshtokenreq) ## Fields - `payloadType` (type ProtoOAPayloadType, optional): Identifies the message. Its default in the definition is PROTO_OA_REFRESH_TOKEN_RES, which is number 2174. - `accessToken` (type string, required): The new access token. A credential: keep it out of source code and logs. - `tokenType` (type string, required): The kind of token. The definition gives the value bearer. - `expiresIn` (type int64, required): How long the new access token lasts, in seconds. - `refreshToken` (type string, required): The new refresh token, which replaces the one that was sent. ## Limits that apply at cTrader Open API - Requests a second, not historical data: 50 requests per second - Scope: Per connection, requests that are not for historical data - Status: verified. Source: [help.ctrader.com](https://help.ctrader.com/open-api/), checked 2026-10-12. - Note: Historical data requests have their own lower limit, held in a separate record. - Requests a second, historical data: 5 requests per second - Scope: Per connection, historical data requests only - Status: verified. Source: [help.ctrader.com](https://help.ctrader.com/open-api/), checked 2026-10-12. ## Related cTrader messages: Authorisation - [ProtoOAAccountAuthReq](https://openbrokerapi.com/platforms/ctrader/messages/protooaaccountauthreq): Opens a session for one trading account on a connection where the application is already authorised, using the access token granted for that account. - [ProtoOAAccountAuthRes](https://openbrokerapi.com/platforms/ctrader/messages/protooaaccountauthres): Confirms that the session for the trading account is open, naming the account. - [ProtoOAAccountLogoutReq](https://openbrokerapi.com/platforms/ctrader/messages/protooaaccountlogoutreq): Asks to end the session of one trading account on this connection. - [ProtoOAAccountLogoutRes](https://openbrokerapi.com/platforms/ctrader/messages/protooaaccountlogoutres): Acknowledges the logout request. The definition says the logout itself is complete only when ProtoOAAccountDisconnectEvent arrives. - [ProtoOAApplicationAuthReq](https://openbrokerapi.com/platforms/ctrader/messages/protooaapplicationauthreq): Authorises the application on a newly opened connection, with the client id and client secret it was registered with. An account session can be opened only on a connection where this has been done. - [ProtoOAApplicationAuthRes](https://openbrokerapi.com/platforms/ctrader/messages/protooaapplicationauthres): Confirms that the application is authorised on this connection. It carries nothing beyond its payload type. - [ProtoOAGetAccountListByAccessTokenReq](https://openbrokerapi.com/platforms/ctrader/messages/protooagetaccountlistbyaccesstokenreq): Asks which trading accounts an access token was granted for. - [ProtoOAGetAccountListByAccessTokenRes](https://openbrokerapi.com/platforms/ctrader/messages/protooagetaccountlistbyaccesstokenres): Lists the trading accounts the access token covers, with the scope of permission the token carries. - [ProtoOARefreshTokenReq](https://openbrokerapi.com/platforms/ctrader/messages/protooarefreshtokenreq): Exchanges a refresh token for a new access token for the granted trading account. ## More on cTrader - [All cTrader messages](https://openbrokerapi.com/platforms/ctrader/messages): 49 documented here, grouped by what they do. - [cTrader API quickstart](https://openbrokerapi.com/platforms/ctrader/quickstart) - [All cTrader error codes](https://openbrokerapi.com/errors/ctrader) - [cTrader API page](https://openbrokerapi.com/platforms/ctrader): The full record: access, authentication, limits and the source for each. ## Licence and how to cite The records behind this page are all rights reserved. This file is the page itself, at its own address, in another format. It is not part of the CC BY 4.0 downloads listed at https://openbrokerapi.com/data. Quote from it with a link to the page. Cite as: cTrader ProtoOARefreshTokenRes. Broker API Hub, https://openbrokerapi.com/platforms/ctrader/messages/protooarefreshtokenres, newest check 2026-10-12. Where you rely on a single figure, cite the source and the checked date printed beside it as well. Where this page and a broker's own documentation differ, the documentation wins.