# API key, access token **URL:** \ **Category:** Community Support\ **Created:** [July 17, 2021, 9:23am UTC](https://community.tradovate.com/t/api-key-access-token/2726 "2021-07-17T09:23:13Z")\ **Posts on this page:** 9\ **Page:** 1
**Author:** ![Csaba\_Csaba](https://avatars.discourse-cdn.com/v4/letter/c/46a35a/32.png) [@Csaba\_Csaba](https://community.tradovate.com/u/Csaba_Csaba)\ **Post date:** [July 17, 2021, 9:23am UTC](https://community.tradovate.com/t/api-key-access-token/2726/1 "2021-07-17T09:23:13Z")
Hello Everyone, I have a question about the API key which is a bit confusing for me. The short story is I am a developer trying to set up a platform for testing strategies for my client. So basically I just need some permission to do it, firstly access data through the API. Since everything works with a live account, my client needs to create the API key with that. **I am trying to find out is there a way to build a platform using API without knowing my clients login credentials?** I read the API doc partly and find the API key authorization. So I got confused. On Github it seems I need only the API key to get a token. That would be perfect, since the key can be restricted so I wouldn’t see any more info then I need. But on the other hand in the doc request body I found this: { **"name": “string”,** **"password": “string”,** “appId”: “string”, “appVersion”: “string”, “deviceId”: “string”, “cid”: “string”, “sec”: “string” } So now I am not sure how could I make it. Can you help me? ---
**Author:** ![biggy8133](https://avatars.discourse-cdn.com/v4/letter/b/dfb087/32.png) [@biggy8133](https://community.tradovate.com/u/biggy8133)\ **Post date:** [July 21, 2021, 2:25pm UTC](https://community.tradovate.com/t/api-key-access-token/2726/2 "2021-07-21T14:25:12Z")
@BWeis can you help give us some feedback on this please. Much appreciated. ---
**Author:** ![BWeis](https://sea1.discourse-cdn.com/flex015/user_avatar/community.tradovate.com/bweis/32/27_2.png) [@BWeis](https://community.tradovate.com/u/BWeis)\ **Post date:** [July 21, 2021, 2:28pm UTC](https://community.tradovate.com/t/api-key-access-token/2726/3 "2021-07-21T14:28:07Z")
Did the client generate a Key + Password for you to use? > [@Should I Use OAuth, an API Key, or an API Key with a Dedicated Password?](https://community.tradovate.com/t/should-i-use-oauth-an-api-key-or-an-api-key-with-a-dedicated-password/2398): > > Deciding whether to choose OAuth or an API Key can be difficult. You should choose whichever use case suits your situation the best. Potential use cases and the benefits and drawbacks of each method are detailed in the table below. ---
**Author:** ![Csaba\_Csaba](https://avatars.discourse-cdn.com/v4/letter/c/46a35a/32.png) [@Csaba\_Csaba](https://community.tradovate.com/u/Csaba_Csaba)\ **Post date:** [July 21, 2021, 2:55pm UTC](https://community.tradovate.com/t/api-key-access-token/2726/4 "2021-07-21T14:55:52Z")
Not yet, we were waiting for the response. So it means we will need a key+password combination right? So what goes to the request body name and password? In the doc it was obligatory. ---
**Author:** ![Alexander](https://sea1.discourse-cdn.com/flex015/user_avatar/community.tradovate.com/alexander/32/988_2.png) [@Alexander](https://community.tradovate.com/u/Alexander)\ **Post date:** [July 21, 2021, 3:06pm UTC](https://community.tradovate.com/t/api-key-access-token/2726/5 "2021-07-21T15:06:32Z")
As outlined in that chart, ideally the client would give you an _API key with a dedicated password_ - the intended use is to obscure that client’s real credentials in the case that they are giving this key to a third party such as yourself. In this case you just use the key+password combination that the client generated for you using the API Key with dedicated password option. The password isn’t (or shouldn’t be!) the user’s real master password, so you’re safe to use these values. ---
**Author:** ![biggy8133](https://avatars.discourse-cdn.com/v4/letter/b/dfb087/32.png) [@biggy8133](https://community.tradovate.com/u/biggy8133)\ **Post date:** [July 21, 2021, 3:36pm UTC](https://community.tradovate.com/t/api-key-access-token/2726/6 "2021-07-21T15:36:54Z")
@BWeis @Alexander Thanks for the reply. We wanted to make sure that a programmer can work and build with API for a client without having to ask the client for their login credentials. As Alexander has graciously informed us that it is possible, do you have a link or could you please let us know how to create the API key with dedicated password for the programmer, after client has logged into his/her main account. Much appreciated. ---
**Author:** ![Alexander](https://sea1.discourse-cdn.com/flex015/user_avatar/community.tradovate.com/alexander/32/988_2.png) [@Alexander](https://community.tradovate.com/u/Alexander)\ **Post date:** [July 21, 2021, 3:51pm UTC](https://community.tradovate.com/t/api-key-access-token/2726/7 "2021-07-21T15:51:38Z")
In order to make calls using the client’s user account, you need to use credentials created by the client. To have your client create a key that they can then pass on to you (for you or dev to use) you can direct them to [How Do I Access the API?](https://community.tradovate.com/t/how-do-i-access-the-api/2380) and also [Understanding How To Change API Permissions Scope](https://community.tradovate.com/t/understanding-how-to-set-permission-scope-on-your-api-key/2127/3) may be helpful. ---
**Author:** ![Scott\_Masters](https://avatars.discourse-cdn.com/v4/letter/s/7feea3/32.png) [@Scott\_Masters](https://community.tradovate.com/u/Scott_Masters)\ **Post date:** [January 29, 2022, 11:10pm UTC](https://community.tradovate.com/t/api-key-access-token/2726/8 "2022-01-29T23:10:34Z")
From a google search, I found your post from July 2021 entitled ’ Access Tradovate API using Tradingview Webhooks. I am a developer who just finished a pinescript strategy that I want to start trading live. I was planning on recoding the strategy in NinjaScript to run on NinjaTrader, then I saw your post, hoping there was a Tradovate solution, as I already have a Tradovate account that I have been using, just to get live data. I don’t want to reinvent the solution as it may be easier for me to convert my 1.5k pinescript to NinjaScript , which which I am intimately familiar. On the other hand, I cherish the idea of actually trading with TradingView, so I am wondering if your solution is up and running and if there is posted anywhere your solution or a similar one that would avoid me having to reinvent the webhook-tradingview api interface? Even a prototype or just plain examples of the necessary components would great. Thanks in advance! Scott ---
**Author:** ![Hanzala\_Moulvi](https://avatars.discourse-cdn.com/v4/letter/h/96bed5/32.png) [@Hanzala\_Moulvi](https://community.tradovate.com/u/Hanzala_Moulvi)\ **Post date:** [February 23, 2024, 9:56am UTC](https://community.tradovate.com/t/api-key-access-token/2726/9 "2024-02-23T09:56:28Z")
Am I able to access the clients account with just their username and password? They don’t have API access unlocked since they are on a demo account. Am I able to use OAuth with their username and password even though they don’t have API access?