Questrade Skill

Interact with a Questrade brokerage account and Canadian/US market data via
the Questrade REST API.

Setup

1. Activate API Access

Log in to Questrade → App Hub → API Centre → Activate API.
Generate a manual authorization token (this is your initial refresh token,
valid for 7 days).

2. Store Credentials

Option A — environment variables (recommended):

CODEBLOCK0

Option B — credentials file (~/.openclaw/credentials/questrade.json):

CODEBLOCK1

Important: Questrade refresh tokens rotate — every time the token is
used to obtain a new access token, Questrade issues a new refresh token.
This script automatically saves the new refresh token back to the credentials
file, so you only need to paste the initial token once.

3. Install Dependencies

CODEBLOCK2

Or manually:

CODEBLOCK3

Quick Reference

Server Time

CODEBLOCK4

Accounts

CODEBLOCK5

Balances

CODEBLOCK6

Positions

CODEBLOCK7

Orders

CODEBLOCK8

Order Detail

CODEBLOCK9

Executions

CODEBLOCK10

Account Activities

CODEBLOCK11

Symbol Search

CODEBLOCK12

Note: Questrade market data endpoints use integer symbol IDs, not
ticker strings. Always run symbol-search first to get the correct ID
before calling quote or candles.

Symbol Info

CODEBLOCK13

Level 1 Quotes

CODEBLOCK14

Historical Candles (OHLCV)

CODEBLOCK15

Markets

CODEBLOCK16

Place Order (partner API access required)

CODEBLOCK17

Order Guardrails:

1. 1. Live quote fetch — retrieves current bid/ask before submitting
2. Price sanity check — warns if buy limit > ask or sell limit < bid
3. Order summary — shows notional cost and requires y/n confirmation
4. Use --force to skip all prompts (automated use only)

Note: Order placement and cancellation require Questrade partner
API access. Personal API tokens are read-only (GET requests only).

Cancel Order

CODEBLOCK18

Workflow: Finding a Symbol and Getting a Quote

Because Questrade quotes use integer IDs rather than tickers, the typical
two-step flow is:

CODEBLOCK19

Script Location

All commands use: scripts/questrade_cli.py (relative to this skill directory)

API Reference

See references/api.md for full endpoint documentation and response schemas.

Known Limitations

• - Level 1 quotes and candles (quote, candles) may return 403 out of allowed OAuth scopes if your Questrade account does not have a market data subscription or the token was not generated with market data scope enabled. Account data commands (accounts, balances, positions, orders, executions, activities) work with all personal tokens.
• Activities endpoint has a maximum window of 30 days — always provide both --start and --end. If --end is omitted it defaults to today.

Safety Notes

• - Personal API tokens cannot place trades. Questrade restricts order placement

• - The order and cancel-order commands are included for completeness but will

• - The refresh token rotates on every use; do not share the credentials file.
• Access tokens expire in ~30 minutes; the script caches and refreshes them automatically.