TradingView · Authentication Profile

Tradingview Authentication

Authentication

TradingView secures its APIs with http and oauth2 across 4 declared security schemes, as derived from its OpenAPI definitions. OAuth 2.0 is offered via the authorizationCode and clientCredentials flow(s).

CompanyConsumerChartsCharting LibraryFinancial DataMarket DataWidgetsTradingFintechEmbeddable Components
Methods: http, oauth2 Schemes: 4 OAuth flows: authorizationCode, clientCredentials API key in:

Security Schemes

PasswordBearer http
scheme: bearer
OAuth2Bearer oauth2
· flows: authorizationCode
ServerOAuth2Bearer oauth2
· flows: clientCredentials
TradingView MCP OAuth 2.1 oauth2

Source

Authentication Profile

Raw ↑
generated: '2026-11-05'
method: searched
source: openapi/tradingview-broker-rest-api-openapi.yml
summary:
  types:
  - http
  - oauth2
  oauth2_flows:
  - authorizationCode
  - clientCredentials
schemes:
- name: PasswordBearer
  type: http
  scheme: bearer
  bearerFormat: Bearer ACCESS_TOKEN
  description: 'This flow uses login and password to authenticate a user. Username and password are sent as parameters

    to the [/authorize](/rest-api-spec/#operation/authorize) endpoint.


    If the username and password are valid, then the broker issues an access token

    and returns it in the response. The access token is sent with every request in the Authorization header.'
  sources:
  - openapi/tradingview-broker-rest-api-openapi.yml
- name: OAuth2Bearer
  type: oauth2
  flows:
  - flow: authorizationCode
    authorizationUrl: https://your-rest-implementation.com/api/authorize
    tokenUrl: https://your-rest-implementation.com/api/oauth/token
    scopes: 1
  description: 'TradingView supports OAuth 2 Authorization Code flow (standard) and OAuth 2 Authorization Code flow with PKCE, as described in
    [RFC 6749](https://tools.ietf.org/html/rfc6749) and [RFC 7636](https://tools.ietf.org/html/rfc7636), respectively.

    After performing authorization, the access token is sent with every request in the `Authorization` header.


    **Code Flow:**


    For OAuth 2 Code Flow the broker p'
  sources:
  - openapi/tradingview-broker-rest-api-openapi.yml
- name: ServerOAuth2Bearer
  type: oauth2
  flows:
  - flow: clientCredentials
    tokenUrl: https://your-rest-implementation.com/api/authorize/token
    scopes: 1
  description: 'This authentication flow is used for server-to-server requests where authentication needs to be done without human intervention.

    It can be used with the [/history](#operation/getHistory), [/symbol_info](#operation/getSymbolInfo), [/streaming](#operation/streaming)

    and [/groups](#operation/getGroups) endpoints.


    JSON Web Token (JWT) is used to securely transmit information between broker and Tradin'
  sources:
  - openapi/tradingview-broker-rest-api-openapi.yml
- name: TradingView MCP OAuth 2.1
  type: oauth2
  surface: https://mcp.tradingview.com/mcp
  description: Authentication is OAuth 2.1 — you log in with your TradingView account, no API keys to manage.
  sources:
  - https://www.tradingview.com/mcp/docs
docs: https://www.tradingview.com/mcp/docs
note: Broker REST API schemes are implemented by the broker (TradingView authenticates to the broker). The MCP server scheme is TradingView-hosted.

Work with this as data

Every security artifact here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for security posture

4 MCP tools reach this
  • find_securityBrowse and filter every security artifact in the catalog.
  • apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
  • resolveTurn a domain, URL or GitHub org into the provider it belongs to.
  • find_cohortsEvery scored population of providers in the catalog.
All 92 tools →

Call it yourself

curl for this page
This security artifact
curl "https://apis.io/api/v1/security/tradingview-authentication"
All security posture
curl "https://apis.io/api/v1/security?limit=25"

Calls without X-API-Key need no key. Calls with it need a paid plan — get a key.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

A second provider on the same verified email joins the account you already have.