Broker API insufficient permission

Getting Started with Alpaca Examples
1

Hi All,

I first begin to use broker api. However, I met a 403 permission error, this is my python code:

def get_today_cashflow(user_account):
    print(user_account.api_key, user_account.secret_key, get_account(user_account).id)
    trading_client = tradeapi.REST(user_account.api_key, user_account.secret_key, base_url='https://broker-api.alpaca.markets', api_version='v1')
    response = trading_client.get('/accounts/{}/transfers'.format(get_account(user_account).id))
    try:
        return response.json()
    except ValueError:
        return response.text

But I got a 403 error for:

   response = trading_client.get('/accounts/{}/transfers'.format(get_account(user_account).id))
  File "/opt/anaconda3/lib/python3.9/site-packages/alpaca_trade_api/rest.py", line 250, in get
    return self._request('GET', path, data)
  File "/opt/anaconda3/lib/python3.9/site-packages/alpaca_trade_api/rest.py", line 213, in _request
    return self._one_request(method, url, opts, retry)
  File "/opt/anaconda3/lib/python3.9/site-packages/alpaca_trade_api/rest.py", line 242, in _one_request
    raise APIError(error, http_error)
alpaca_trade_api.rest.APIError: insufficient permission

Same key and secret key I can use in tradeapi, is there any difference between trade api and broker api? Or do I miss anything here? Thank you for your help!

2

@crispan First off welcome to Alpaca! I’ll start with your question "is there any difference between trade api and broker api?". The two API sets are different and address two separate users.

The Trading APIs allow one to check account balances, fetch positions, submit orders etc, all for ones own trading account. One cannot create an account or move funds. It’s intended for traders who want to automate their trading. Use of the Trading APIs is completely free.

The Broker APIs allow one to create new accounts and move money between accounts as well as trade those accounts. It’s intended for Brokers or Registered Investment Advisors (RIAs) who are managing other users accounts. Use of the Broker APIs (outside of the sandbox) requires a paid subscription.

The two APIs use separate API keys. The Trading APIs use the API keys found in your Alpaca account dashboard as shown below. Note there are separate keys for your paper account and for your live account.

image
image2744Ă—1288 320 KB

The Broker keys are generated in the Broker dashboard. There is also a subtle difference in how those keys are used to authenticate. The Trading APIs authenticate each API call by placing the key and secret key into the call’s header information. The Broker APIs authenticate using “Basic Auth” by using the key and secret key as the username and password respectively.

Hope this helps?

2 Likes
3

Thank you Dan, I found broker API now.