Skip to Content
Trading APIAuthentication
View as Markdown

Authentication

The API authenticates you with a session token — the same token the dashboard uses after you sign in. Send it on every request in the Authorization header:

Authorization: Bearer <your-session-token>

A session token lasts 7 days. After that every call answers 401 with {"message":"Unauthorized"}, and you sign in again to get a new one.

Your session token is your whole account. Anyone holding it can trade, withdraw and change settings on every wallet you own, until it expires. Signing out of the dashboard does not cancel a token you have already copied — it stays valid for its full 7 days. Never paste it into a chat, a shared notebook, a public repository or a screenshot. Keep it in an environment variable or a secrets manager, and run scripts only on machines you trust.

Dedicated API keys — with read-only and trade-only scopes and the ability to revoke them — are not available yet. Until they are, a session token is the only way to authenticate.

Getting a token

Sign in on the dashboard

Open the dashboard at app.neurotrading.io  and sign in as usual: with Telegram, with email, or with a Solana wallet such as Phantom.

Open your browser’s developer tools (F12, or right-click → Inspect), go to Application (Chrome, Edge) or Storage (Firefox) → Cookies, and select the dashboard site. Copy the value of the cookie whose name starts with neuroToken. That value is your session token.

Store it outside your code

export NEURO_API=https://api.neurotrading.io/api/v1
export NEURO_TOKEN='eyJhbGciOi...'

Checking the token works

GET /user returns the account the token belongs to:

curl -s "$NEURO_API/user" -H "Authorization: Bearer $NEURO_TOKEN"
{
  "code": 200,
  "message": "Success",
  "data": {
    "_id": "6650f0c2...",
    "username": "satoshi",
    "demo": { "enabled": false },
    "config": {
      "trading": { "slippage": 20, "antiMev": true, "jitoTip": 0.001, "priorityLevel": "High" }
    }
  }
}

The response has more fields than shown. Two are useful to a script:

  • config.trading — your default slippage and fee settings. Any trade that leaves those fields out uses these values.
  • demo.enabled — true when the account is in Paper Trading.

Finding your wallets

Every trade names one of your wallets by address. List them with GET /wallets:

# Every wallet, on every network
curl -s "$NEURO_API/wallets" -H "Authorization: Bearer $NEURO_TOKEN"
 
# Solana wallets only, with balances
curl -s "$NEURO_API/wallets?chainId=101&includeBalance=true" -H "Authorization: Bearer $NEURO_TOKEN"
chainIdNetwork
101Solana
4663Robinhood Chain

GET /chains lists every network the deployment you are talking to offers.

Each wallet’s address is in publicKey — send that value as walletAddress when you trade.

The list follows the account’s mode: in Paper Trading it returns your paper wallets, outside it your real ones. Fetch the list again after switching modes and use the addresses for the mode you are in.

Signing out

POST /auth/logout clears the dashboard’s cookie. It does not cancel the token itself; see the warning above.

OverviewPaper Trading