Authentication

This section explains how to log in to the FYERS API and get the access_token that every later API request must carry.

Use an individual app to call the APIs for your own account. Use a third-party app when you build a platform where other FYERS clients log in with their own credentials.

Access tokens expire daily at 6:30 AM. Generate a new token after 6:30 AM for it to remain valid throughout the day.
Send app_id:access_token in the HTTP Authorization header on every request after login. See API Standards.
redirect_uri must be the same URL provided at app creation, and should be in your control because the auth token is sensitive.
Expired or invalid tokens return error code -8, -15, -16 or -17. See API Error Codes.

Endpoint	Method	Description
Individual App Authentication	—	This section explains how to authenticate your own FYERS account with an individual app and get an access token for all later requests.
Third-Party App Authentication	—	This section explains how to let FYERS clients log in to your platform with their own credentials. Third-party apps are created by platform providers so that FYERS clients can use their applications.