Skip to main content

Trading API FAQ

1. Why am I receiving an HTTP 403 error (Forbidden)?​

A 403 error is returned when:

  • The request is missing authentication headers
  • The authentication credentials are invalid
  • Your account does not have sufficient permissions

Make sure your request includes all required headers. See Authentication Overview for details.

2. Do I need to handle signatures when using the Webull SDK?​

No. The SDK handles signature generation automatically. You only need to provide your App Key and App Secret when initializing the client.

3. How long does API application approval take?​

The review and approval process typically takes 1–2 business days. You can install the SDK and explore the test environment while waiting. See Getting Started for details.

4. What order types are supported for each asset class?​

Asset ClassSupported Order Types
StocksMARKET, LIMIT, STOP_LOSS, STOP_LOSS_LIMIT, TRAILING_STOP_LOSS
OptionsLIMIT, STOP_LOSS, STOP_LOSS_LIMIT
FuturesMARKET, LIMIT, STOP_LOSS, STOP_LOSS_LIMIT, TRAILING_STOP_LOSS
CryptoMARKET, LIMIT, STOP_LOSS_LIMIT
Event ContractsLIMIT only
info

Options do not support MARKET or TRAILING_STOP_LOSS order types. Options sell-side orders only support DAY as time in force (GTC is buy-side only).

See each asset class page for full details: Stocks, Options, Futures, Crypto, Event Contracts.

5. Why was my order rejected?​

Common reasons:

  • Insufficient buying power or margin
  • The market is closed for the asset you're trading
  • Invalid order parameters (e.g., price outside allowed range, unsupported order type)
  • Missing required trading agreements (especially for event contracts and options)

Check the error message in the API response for specific details.

6. What is a client_order_id and why is it required?​

The client_order_id is a unique identifier you generate for each order. It allows you to track, modify, and cancel orders. Each client_order_id must be unique across all your orders. Use a UUID to ensure uniqueness.

7. Can I place orders outside of regular market hours?​

It depends on the asset class:

  • Stocks: Yes, set support_trading_session to ALL for extended hours trading
  • Futures: Yes, futures markets are open nearly 24/6
  • Crypto: Yes, crypto trading is available 24/7
  • Event Contracts: Varies by contract type — see Event Contracts for specific hours

8. How do I receive real-time order status updates?​

Use the Trade Event Subscription via gRPC streaming. It pushes updates for fills, cancellations, modifications, and failures in real time. See Getting Started for a code example.

9. Why is physical delivery not allowed for futures?​

Webull does not support physical delivery of futures contracts. You must close or roll your position before expiration. If you hold a position through expiration, it will be subject to forced liquidation.

10. Are there any fees for using the Trading API?​

There are no additional charges for trading via the OpenAPI. Trading fees are the same as those in the Webull App. For the current fee schedule, see Webull Pricing.

11. Why am I getting INVALID_TOKEN even though my token is valid?​

This error can be misleading. In many cases, it actually indicates a signature mismatch rather than a token issue. Common causes:

  • The JSON body used for MD5 computation differs from what's actually sent in the request (e.g., using json=body in Python's requests.post() instead of serializing manually)
  • Extra whitespace in the JSON body
  • Incorrect URL encoding of the signature string

See Signature — JSON Body Serialization for detailed debugging steps.