> ## Documentation Index > Fetch the complete documentation index at: https://api-portal.etoro.com/llms.txt > Use this file to discover all available pages before exploring further. # Get cash account by id > **Rate limit:** 60 requests per 60 seconds. This is the **default shared quota** — it is shared with every other endpoint that has no dedicated limit, so requests across those endpoints all draw from the same budget. --- Returns a single cash account. The response body is identical in shape to one element of `accounts` from GET /api/v1/money/accounts/cash (CashAccount). Path accountId must match CashAccount.id for that element. ## OpenAPI ````yaml /api-reference/partners-openapi.json get /api/v1/money/accounts/cash/{accountId} openapi: 3.0.1 info: title: eToro Api version: v1.342.0 description: >- eToro’s public API provides access to real-time financial data, trading insights, and account management features, allowing developers to integrate eToro’s services into their applications. With access to market prices, historical data, and social trading information, the API empowers users to enhance their trading strategies. Designed for security and scalability, the eToro API ensures smooth and reliable integration for a variety of financial applications. For more details on integrating with eToro's public WebSocket service, please refer to the dedicated [WebSocket documentation](./websocket/websocket-doc.html). ## Authentication Every request must be authenticated with exactly one of two options: an OAuth 2.0 access token (`Authorization: Bearer `), or the non-interactive credential pair (`x-api-key` + `x-user-key` headers). The two options are mutually exclusive — a request carrying both is rejected. Each operation lists the OAuth scopes that grant access as alternative security requirements: a bearer token needs only ONE of them, and the same permissions govern the credential pair. servers: - url: https://public-api.etoro.com description: eToro Public API - Partners security: - apiKeyAuth: [] userKeyAuth: [] - oauth2: [] tags: - name: OPS - name: KYC - name: Cash Accounts - name: FTD - name: Crypto Deposit - name: Crypto Withdrawals - name: Registration - name: Sub-Accounts - name: Email Verification - name: Trusted Partner - name: Phone Verification - name: Verification paths: /api/v1/money/accounts/cash/{accountId}: get: tags: - Cash Accounts summary: Get cash account by id description: >- **Rate limit:** 60 requests per 60 seconds. This is the **default shared quota** — it is shared with every other endpoint that has no dedicated limit, so requests across those endpoints all draw from the same budget. --- Returns a single cash account. The response body is identical in shape to one element of `accounts` from GET /api/v1/money/accounts/cash (CashAccount). Path accountId must match CashAccount.id for that element. operationId: getCashAccountById parameters: - name: x-request-id in: header required: true schema: type: string format: uuid example: 3e25a086-b75e-4736-a42f-6a57338c4ec7 description: A unique request identifier. - name: accountId in: path required: true schema: type: string format: uuid description: Must equal CashAccount.id from the list endpoint. responses: '200': description: One cash account (same schema as list item) content: application/json: schema: $ref: '#/components/schemas/CashAccount' example: id: f0995efc-25a1-465e-bec3-d309aaf00ede currency: GBP status: Active bankAccount: id: 0f5270fe-200a-4c35-b788-bda212973fa2 accountName: John Doe identifiers: - type: bankAccountNumber value: '11549380' - type: ncc value: '041335' - type: iban value: GB08MRMI04133511549380 - type: bic value: MRMIGB22XXX region: UK countryCode: GB bankProvider: ClearBank institutionName: ClearBank cards: - id: 7f446164-57d8-4b87-9f0f-958083c7f459 status: Activated maskedPan: 459688******0196 isVirtual: false name: John Doe created: '2026-04-27T12:40:55.7766667' expirationDate: '2029-04-30T23:59:59' headers: RateLimit-Limit: description: >- Maximum number of requests allowed per window. This is the default shared pool used by every endpoint without a dedicated limit, so it is NOT per-endpoint — requests across those endpoints all draw from this one budget. schema: type: integer example: 60 RateLimit-Remaining: description: Requests remaining in the current window for this quota. schema: type: integer RateLimit-Reset: description: Seconds until the current window resets. schema: type: integer RateLimit-Policy: description: Quota policy in the form `;w=`. schema: type: string example: 60;w=60 '401': description: Unauthorized content: application/json: schema: $ref: '#/components/schemas/FiatbackApi_PublicErrorResponse' example: errorCode: Unauthorized errorMessage: Unauthorized '403': description: Forbidden - Insufficient permissions '404': description: Account not found or not owned by the user content: application/json: schema: $ref: '#/components/schemas/FiatbackApi_PublicErrorResponse' example: errorCode: AccountNotFound errorMessage: Account not found '429': description: Too Many Requests content: application/json: schema: $ref: '#/components/schemas/FiatbackApi_PublicErrorResponse' example: errorCode: TooManyRequests errorMessage: Too many requests headers: RateLimit-Limit: description: >- Maximum number of requests allowed per window. This is the default shared pool used by every endpoint without a dedicated limit, so it is NOT per-endpoint — requests across those endpoints all draw from this one budget. schema: type: integer example: 60 RateLimit-Remaining: description: Requests remaining in the current window for this quota. schema: type: integer RateLimit-Reset: description: Seconds until the current window resets. schema: type: integer RateLimit-Policy: description: Quota policy in the form `;w=`. schema: type: string example: 60;w=60 Retry-After: description: Seconds to wait before retrying. schema: type: integer example: 60 '500': description: Internal Server Error content: application/json: schema: $ref: '#/components/schemas/FiatbackApi_PublicErrorResponse' example: errorCode: GeneralError errorMessage: Internal server error. Please retry or contact support security: - apiKeyAuth: [] userKeyAuth: [] - oauth2: - etoro-public:money.accounts:read components: schemas: CashAccount: type: object description: >- A single cash account with bank details and cards (account type is implied by the cash-accounts API surface) required: - id - currency properties: id: type: string format: uuid description: Unique identifier of the cash account example: b2c3d4e5-f6a7-8901-bcde-f12345678901 currency: type: string description: ISO 4217 currency code (e.g. GBP, EUR, AUD, DKK) example: GBP status: type: string description: Cash account status enum: - Active - ReceiveOnly - SpendOnly - Suspended - Blocked example: Active bankAccount: $ref: '#/components/schemas/BankAccount' description: Bank account linked to this cash account cards: type: array description: Payment cards linked to this cash account items: $ref: '#/components/schemas/Card' FiatbackApi_PublicErrorResponse: type: object description: Error response with code and message required: - errorCode - errorMessage properties: errorCode: type: string description: Machine-readable error code example: GeneralError errorMessage: type: string description: Human-readable error message example: Internal server error. Please retry or contact support BankAccount: type: object description: Bank account linked to the cash account properties: id: type: string format: uuid description: Unique identifier of the bank account example: 0f5270fe-200a-4c35-b788-bda212973fa2 accountName: type: string description: Name on the bank account example: John Doe identifiers: type: array description: >- List of bank identifiers represented as key/value entries. Identifier type availability is bank and country specific. items: $ref: '#/components/schemas/BankAccountIdentifier' region: type: string description: Region of the bank account example: UK countryCode: type: string description: ISO 3166-1 alpha-2 country code example: GB bankProvider: type: string description: Banking provider name example: ClearBank institutionName: type: string description: Name of the banking institution example: ClearBank Card: type: object description: Payment card linked to the cash account required: - id - status properties: id: type: string format: uuid description: Unique identifier of the card example: c3d4e5f6-a7b8-9012-cdef-123456789012 status: type: string description: Current card status enum: - NotActivated - Activated - Blocked - Suspended - Risk - Stolen - Lost - Expired - Fraud example: Activated maskedPan: type: string description: Masked card number example: 459688******0196 isVirtual: type: boolean description: Whether this is a virtual card example: false name: type: string description: Card display name example: John Doe created: type: string format: date-time description: Date and time the card was created example: '2025-01-15T12:00:00' expirationDate: type: string format: date-time description: Card expiration date example: '2028-01-31T23:59:59' BankAccountIdentifier: type: object required: - type - value description: >- One bank identifier entry as key/value pair. `type` defines the identifier kind and `value` contains the identifier as a string. properties: type: type: string description: >- Identifier type key. Allowed examples include bankAccountNumber, ncc, iban, bic, sortCode, and bsbCode. example: iban value: type: string description: Identifier value as returned by the bank. example: GB08MRMI04133511549380 securitySchemes: apiKeyAuth: type: apiKey in: header name: x-api-key description: >- API key of the application. Only valid together with the x-user-key header — the pair is an alternative to OAuth bearer authentication, never sent alongside it. The pair is granted the same permissions the operation's OAuth scopes describe. Demo credential for trying the API from these docs: `lhgfaslk21490FAScVPkdsb53F9dNkfHG4faZSG5vfjndfcfgdssdgsdHF4663` x-default: lhgfaslk21490FAScVPkdsb53F9dNkfHG4faZSG5vfjndfcfgdssdgsdHF4663 userKeyAuth: type: apiKey in: header name: x-user-key description: >- User-specific authentication key. Only valid together with the x-api-key header — the pair is an alternative to OAuth bearer authentication, never sent alongside it. Demo credential for trying the API from these docs: `eyJlYW4iOiJVbnJlZ2lzdGVyZWRBcHBsaWNhdGlvbiIsImVrIjoiOE5sZ2cwcW5EUVdROUFNWGpXT2lmOWktZnpidG5KcUlqWGJ3WHJZZkpZcldrbG90ZEhvLVBjSWhQaU8xU1ZtMW84aU1WZGZqN2xWNzFjLXFxLmcybXE1dnh4Q1hUT25xaWRUaTFlcEhmVk1fIn0_` x-default: >- eyJlYW4iOiJVbnJlZ2lzdGVyZWRBcHBsaWNhdGlvbiIsImVrIjoiOE5sZ2cwcW5EUVdROUFNWGpXT2lmOWktZnpidG5KcUlqWGJ3WHJZZkpZcldrbG90ZEhvLVBjSWhQaU8xU1ZtMW84aU1WZGZqN2xWNzFjLXFxLmcybXE1dnh4Q1hUT25xaWRUaTFlcEhmVk1fIn0_ oauth2: type: oauth2 description: >- eToro OAuth2 — send the access token as `Authorization: Bearer `. Each operation lists the scopes that grant access as separate `security` requirements (OpenAPI OR semantics): the caller's token only needs ONE of them — you do NOT need all of them. Mutually exclusive with the x-api-key/x-user-key credential pair: never send both. flows: authorizationCode: authorizationUrl: '' tokenUrl: '' scopes: etoro-public:demo:read: Grants access to the 'etoro-public:demo:read' scope. etoro-public:kyc:answers:read: Grants access to the 'etoro-public:kyc:answers:read' scope. etoro-public:kyc:answers:write: Grants access to the 'etoro-public:kyc:answers:write' scope. etoro-public:kyc:questions:read: Grants access to the 'etoro-public:kyc:questions:read' scope. etoro-public:kyc:read: Grants access to the 'etoro-public:kyc:read' scope. etoro-public:kyc:regulations:read: Grants access to the 'etoro-public:kyc:regulations:read' scope. etoro-public:kyc:write: Grants access to the 'etoro-public:kyc:write' scope. etoro-public:money.accounts:read: Grants access to the 'etoro-public:money.accounts:read' scope. etoro-public:money.accounts:write: Grants access to the 'etoro-public:money.accounts:write' scope. etoro-public:money.deposit.crypto:read: >- Grants access to the 'etoro-public:money.deposit.crypto:read' scope. etoro-public:money.deposit.crypto:write: >- Grants access to the 'etoro-public:money.deposit.crypto:write' scope. etoro-public:money.ftd:read: Grants access to the 'etoro-public:money.ftd:read' scope. etoro-public:money.ftd:write: Grants access to the 'etoro-public:money.ftd:write' scope. etoro-public:money.withdraw.crypto:read: >- Grants access to the 'etoro-public:money.withdraw.crypto:read' scope. etoro-public:money.withdraw.crypto:write: >- Grants access to the 'etoro-public:money.withdraw.crypto:write' scope. etoro-public:partner-default: Grants access to the 'etoro-public:partner-default' scope. etoro-public:partner:registration:read: >- Grants access to the 'etoro-public:partner:registration:read' scope. etoro-public:partner:registration:write: >- Grants access to the 'etoro-public:partner:registration:write' scope. etoro-public:real:read: Grants access to the 'etoro-public:real:read' scope. etoro-public:sub-accounts:delete: Grants access to the 'etoro-public:sub-accounts:delete' scope. etoro-public:verification.address:read: >- Grants access to the 'etoro-public:verification.address:read' scope. etoro-public:verification.address:write: >- Grants access to the 'etoro-public:verification.address:write' scope. etoro-public:verification.email:write: >- Grants access to the 'etoro-public:verification.email:write' scope. etoro-public:verification.personaldetails:read: >- Grants access to the 'etoro-public:verification.personaldetails:read' scope. etoro-public:verification.personaldetails:write: >- Grants access to the 'etoro-public:verification.personaldetails:write' scope. etoro-public:verification.phone:write: >- Grants access to the 'etoro-public:verification.phone:write' scope. etoro-public:verification.trusted.email:write: >- Grants access to the 'etoro-public:verification.trusted.email:write' scope. etoro-public:verification.trusted.phone:write: >- Grants access to the 'etoro-public:verification.trusted.phone:write' scope. etoro-public:verification:trusted:user:write: >- Grants access to the 'etoro-public:verification:trusted:user:write' scope. ````