POST
Open a Squid widget session for the account's Party

Authorizations

Authorization
string
header
required

The authorization field takes the session bearer returned by sign-in, or an API key where the route allows keys. Paste the token itself into the authorization field. When invitation-only access is enabled, private operations require the account's sign-in email to be invited. Sign-in can complete without an invitation, but private HTTP, MCP and FIX operations refuse with access_not_allowlisted (HTTP 403): "Private access is limited to invited accounts. Contact support to request access." Public market data remains available. Invitation changes apply to the next private operation, including existing FIX sessions. Do not retry until support confirms access.

Path Parameters

accountId
string
required
Minimum string length: 1

Response

Success

apiUrl
string
required

Base URL for the official Squid widget's apiUrl setting. It carries a short-lived token bound to the account, so keep it private to the signed-in page.

expiresAtEpochMs
integer
required
partyId
string
required

The account's own Canton Party, read on the server. Every route this session serves delivers to it; stop if the Party the page shows differs.

Minimum string length: 1