Register OAuth application
Rate limit: 60 requests per 60 seconds. This is the default shared quota — it is shared with every other endpoint that has no dedicated limit, so requests across those endpoints all draw from the same budget.
Creates a new OAuth application. The authenticated user automatically becomes the application admin. Both clientId and clientSecret are auto-generated server-side. The clientSecret is returned only in this response (one-time reveal) - subsequent reads will never expose it again, so callers must store it securely. Auto-populated defaults (audience, applicationType, supported flows, token expirations) come from service configuration. Validation is aligned with the upstream sts-metadata-api: applicationName max 100 chars, applicationIconUrl max 500 chars, each redirectUri max 500 chars and unique, each scopeId positive and recognized in the cached scope catalog.
Authorizations
eToro OAuth2. Each operation lists the scopes that grant access as separate security requirements (OpenAPI OR semantics): the caller's token only needs ONE of them — you do NOT need all of them. The same scopes back the x-api-key/x-user-key credential pair.
Headers
A unique request identifier.
"ae0da95b-9c26-467f-ac70-7678ae407172"
API key for authentication.
"lhgfaslk21490FAScVPkdsb53F9dNkfHG4faZSG5vfjndfcfgdssdgsdHF4663"
User-specific authentication key.
"eyJlYW4iOiJVbnJlZ2lzdGVyZWRBcHBsaWNhdGlvbiIsImVrIjoiOE5sZ2cwcW5EUVdROUFNWGpXT2lmOWktZnpidG5KcUlqWGJ3WHJZZkpZcldrbG90ZEhvLVBjSWhQaU8xU1ZtMW84aU1WZGZqN2xWNzFjLXFxLmcybXE1dnh4Q1hUT25xaWRUaTFlcEhmVk1fIn0_"
Body
Display name shown to end users in the OAuth consent screen.
100"My Trading App"
Publicly reachable URL of the application icon. Format-validated only - the URL is not fetched by the service.
500"https://cdn.etoro.com/icons/my-app.png"
Scopes that the application will request from end users. Each scopeId must be positive and present in the cached scope catalog. Duplicates are rejected.
1OAuth redirect URIs registered for the application. Must be unique. Each URI is capped at 500 characters.
1500