> ## Documentation Index > Fetch the complete documentation index at: https://api-portal.etoro.com/llms.txt > Use this file to discover all available pages before exploring further. # List Sub-Account User Tokens > **Rate limit:** 60 requests per 60 seconds. This is the **default shared quota** — it is shared with every other endpoint that has no dedicated limit, so requests across those endpoints all draw from the same budget. --- Lists all sub-account non-interactive user tokens owned by the authenticated user, across all their eToro trading sub-accounts. The secret token value is never included in list results. ## OpenAPI ````yaml /api-reference/openapi.json get /api/v1/sub-accounts/etoro-trading/user-tokens openapi: 3.0.1 info: title: eToro Api version: v1.387.0 description: >- eToro’s public API provides access to real-time financial data, trading insights, and account management features, allowing developers to integrate eToro’s services into their applications. With access to market prices, historical data, and social trading information, the API empowers users to enhance their trading strategies. Designed for security and scalability, the eToro API ensures smooth and reliable integration for a variety of financial applications. For more details on integrating with eToro's public WebSocket service, please refer to the dedicated [WebSocket documentation](./websocket/websocket-doc.html). ## Authentication Every request must be authenticated with exactly one of two options: an OAuth 2.0 access token (`Authorization: Bearer `), or the non-interactive credential pair (`x-api-key` + `x-user-key` headers). The two options are mutually exclusive — a request carrying both is rejected. Each operation lists the OAuth scopes that grant access as alternative security requirements: a bearer token needs only ONE of them, and the same permissions govern the credential pair. servers: - url: https://public-api.etoro.com description: eToro Public API security: - apiKeyAuth: [] userKeyAuth: [] - oauth2: [] tags: - name: Agent Portfolios - name: Social Feeds - name: Balances - name: Clubs - name: Watchlists - name: Data - name: Top Assets - name: App Data - name: Market Data - name: Identity - name: Cash Accounts - name: Transfer - name: Notifications - name: PI Data - name: PortfolioSearch - name: Price Alerts - name: SSO - Applications - name: SSO - Scopes - name: Sub-Accounts - eToro Trading - name: Sub-Accounts - name: Trading - Demo - name: Trading - Real - name: Users Info - name: Rankings - name: User Stats - name: Copy Trading - name: Copy Trading - Demo paths: /api/v1/sub-accounts/etoro-trading/user-tokens: get: tags: - Sub-Accounts - eToro Trading summary: List Sub-Account User Tokens description: >- **Rate limit:** 60 requests per 60 seconds. This is the **default shared quota** — it is shared with every other endpoint that has no dedicated limit, so requests across those endpoints all draw from the same budget. --- Lists all sub-account non-interactive user tokens owned by the authenticated user, across all their eToro trading sub-accounts. The secret token value is never included in list results. operationId: getSubAccountUserTokens parameters: - name: x-request-id in: header required: true schema: type: string format: uuid example: 806e5064-9afb-4268-8b5a-2be36e2ef062 description: A unique request identifier. example: 806e5064-9afb-4268-8b5a-2be36e2ef062 responses: '200': description: User tokens retrieved successfully content: application/json: schema: $ref: '#/components/schemas/ListUserTokensResponse' headers: RateLimit-Limit: description: >- Maximum number of requests allowed per window. This is the default shared pool used by every endpoint without a dedicated limit, so it is NOT per-endpoint — requests across those endpoints all draw from this one budget. schema: type: integer example: 60 RateLimit-Remaining: description: Requests remaining in the current window for this quota. schema: type: integer RateLimit-Reset: description: Seconds until the current window resets. schema: type: integer RateLimit-Policy: description: Quota policy in the form `;w=`. schema: type: string example: 60;w=60 '401': description: Unauthorized content: application/json: schema: $ref: >- #/components/schemas/EtoroTradingSubAccountsOperationsApi_ErrorResponse example: errorCode: Unauthorized errorMessage: Unauthorized '429': description: Too Many Requests — a downstream dependency is throttling requests content: application/json: schema: $ref: >- #/components/schemas/EtoroTradingSubAccountsOperationsApi_ErrorResponse example: errorCode: TooManyRequests errorMessage: Too many requests headers: RateLimit-Limit: description: >- Maximum number of requests allowed per window. This is the default shared pool used by every endpoint without a dedicated limit, so it is NOT per-endpoint — requests across those endpoints all draw from this one budget. schema: type: integer example: 60 RateLimit-Remaining: description: Requests remaining in the current window for this quota. schema: type: integer RateLimit-Reset: description: Seconds until the current window resets. schema: type: integer RateLimit-Policy: description: Quota policy in the form `;w=`. schema: type: string example: 60;w=60 Retry-After: description: Seconds to wait before retrying. schema: type: integer example: 60 '500': description: Internal Server Error content: application/json: schema: $ref: >- #/components/schemas/EtoroTradingSubAccountsOperationsApi_ErrorResponse example: errorCode: UnhandledException errorMessage: Global Error security: - apiKeyAuth: [] userKeyAuth: [] - oauth2: - etoro-public:sub-accounts:read - oauth2: - etoro-public:sub-accounts:write components: schemas: ListUserTokensResponse: type: object properties: userTokens: type: array items: $ref: '#/components/schemas/UserTokenItem' description: >- The user's sub-account user tokens, across all their eToro trading sub-accounts. EtoroTradingSubAccountsOperationsApi_ErrorResponse: type: object properties: errorCode: type: string errorMessage: type: string UserTokenItem: type: object properties: userTokenId: type: string format: uuid description: The unique identifier of the user token. example: 3fa85f64-5717-4562-b3fc-2c963f66afa6 userTokenName: type: string description: The friendly display name assigned to the token. example: my-trading-bot clientId: type: string format: uuid description: The OAuth client identifier associated with the token. example: 7c9e6679-7425-40de-944b-e07fc1f90ae7 ipsWhitelist: type: array items: type: string description: The IPv4 addresses the token is restricted to, if any. example: - 192.168.1.1 scopes: type: array items: $ref: '#/components/schemas/ScopeNameItem' description: The scopes granted to the token. expiresAt: type: string format: date-time nullable: true description: The UTC expiration of the token, if one was set. example: '2026-12-31T23:59:59Z' createdAt: type: string format: date-time nullable: true description: When this user token was created, if known. example: '2026-06-06T10:15:00Z' ScopeNameItem: type: object properties: name: type: string description: The permission scope name. example: etoro-public:trade.real:read securitySchemes: apiKeyAuth: type: apiKey in: header name: x-api-key description: >- API key of the application. Only valid together with the x-user-key header — the pair is an alternative to OAuth bearer authentication, never sent alongside it. The pair is granted the same permissions the operation's OAuth scopes describe. Demo credential for trying the API from these docs: `lhgfaslk21490FAScVPkdsb53F9dNkfHG4faZSG5vfjndfcfgdssdgsdHF4663` userKeyAuth: type: apiKey in: header name: x-user-key description: >- User-specific authentication key. Only valid together with the x-api-key header — the pair is an alternative to OAuth bearer authentication, never sent alongside it. Demo credential for trying the API from these docs: `eyJlYW4iOiJVbnJlZ2lzdGVyZWRBcHBsaWNhdGlvbiIsImVrIjoiOE5sZ2cwcW5EUVdROUFNWGpXT2lmOWktZnpidG5KcUlqWGJ3WHJZZkpZcldrbG90ZEhvLVBjSWhQaU8xU1ZtMW84aU1WZGZqN2xWNzFjLXFxLmcybXE1dnh4Q1hUT25xaWRUaTFlcEhmVk1fIn0_` oauth2: type: oauth2 description: >- eToro OAuth2 — send the access token as `Authorization: Bearer `. Each operation lists the scopes that grant access as separate `security` requirements (OpenAPI OR semantics): the caller's token only needs ONE of them — you do NOT need all of them. Mutually exclusive with the x-api-key/x-user-key credential pair: never send both. flows: authorizationCode: authorizationUrl: https://www.etoro.com/sso tokenUrl: https://www.etoro.com/api/sso/v1/token scopes: etoro-public:agent-portfolio:read: Grants access to the 'etoro-public:agent-portfolio:read' scope. etoro-public:agent-portfolio:write: Grants access to the 'etoro-public:agent-portfolio:write' scope. etoro-public:club:read: Grants access to the 'etoro-public:club:read' scope. etoro-public:demo:read: Grants access to the 'etoro-public:demo:read' scope. etoro-public:demo:write: Grants access to the 'etoro-public:demo:write' scope. etoro-public:feed:read: Grants access to the 'etoro-public:feed:read' scope. etoro-public:feed:write: Grants access to the 'etoro-public:feed:write' scope. etoro-public:market-data:read: Grants access to the 'etoro-public:market-data:read' scope. etoro-public:money.balance:read: Grants access to the 'etoro-public:money.balance:read' scope. etoro-public:money.cash-transactions:read: >- Grants access to the 'etoro-public:money.cash-transactions:read' scope. etoro-public:money.transfer:read: Grants access to the 'etoro-public:money.transfer:read' scope. etoro-public:money.transfer:write: Grants access to the 'etoro-public:money.transfer:write' scope. etoro-public:money:transfer: Grants access to the 'etoro-public:money:transfer' scope. etoro-public:notifications:read: Grants access to the 'etoro-public:notifications:read' scope. etoro-public:notifications:write: Grants access to the 'etoro-public:notifications:write' scope. etoro-public:pi-data:read: Grants access to the 'etoro-public:pi-data:read' scope. etoro-public:price-alerts:read: Grants access to the 'etoro-public:price-alerts:read' scope. etoro-public:price-alerts:write: Grants access to the 'etoro-public:price-alerts:write' scope. etoro-public:real:read: Grants access to the 'etoro-public:real:read' scope. etoro-public:real:write: Grants access to the 'etoro-public:real:write' scope. etoro-public:sso-applications:read: Grants access to the 'etoro-public:sso-applications:read' scope. etoro-public:sso-applications:write: Grants access to the 'etoro-public:sso-applications:write' scope. etoro-public:sso-scopes:read: Grants access to the 'etoro-public:sso-scopes:read' scope. etoro-public:sso-scopes:write: Grants access to the 'etoro-public:sso-scopes:write' scope. etoro-public:sub-accounts:read: Grants access to the 'etoro-public:sub-accounts:read' scope. etoro-public:sub-accounts:write: Grants access to the 'etoro-public:sub-accounts:write' scope. etoro-public:trade.demo:read: Grants access to the 'etoro-public:trade.demo:read' scope. etoro-public:trade.demo:write: Grants access to the 'etoro-public:trade.demo:write' scope. etoro-public:trade.real:read: Grants access to the 'etoro-public:trade.real:read' scope. etoro-public:trade.real:write: Grants access to the 'etoro-public:trade.real:write' scope. etoro-public:user-info:read: Grants access to the 'etoro-public:user-info:read' scope. etoro-public:watchlist:read: Grants access to the 'etoro-public:watchlist:read' scope. etoro-public:watchlist:write: Grants access to the 'etoro-public:watchlist:write' scope. ```` This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.