Quickstart

This guide takes you from zero to your first API response in a few minutes: you get a token and make a real first call.

Requirements

• Credentials (clientId and clientSecret) provided by Max Capital.

• The Base URL of the environment. For testing, use the development environment:

  https://openapi-dev.max.capital

  Within the Base URL, login sits under /auth/api and business endpoints under /gateway-openapi/api (see Conventions).

1. Get an access token

Authenticate with your credentials to obtain an accessToken (JWT). Every other call uses it in the Authorization header.

curl -X POST 'https://openapi-dev.max.capital/auth/api/v1/login' \
  -H 'Content-Type: application/json' \
  -d '{
    "clientId": "demo-client-dev",
    "clientSecret": "<CLIENT_SECRET>"
  }'

Response:

{
  "accessToken": "<ACCESS_TOKEN>",
  "expiresIn": 720,
  "expiresAt": "2024-06-01T14:15:59.999Z",
  "tokenType": "Bearer"
}

Save the accessToken: it is valid for the time indicated in expiresIn (in seconds). When it expires, request a new one.

2. Make your first call

With the token, query the movements of a current account. Pass the token in the Authorization header using the Bearer {token} format:

curl -X GET 'https://openapi-dev.max.capital/gateway-openapi/api/v1/current-account/instruments?accountHolderNumber=12345678&dateFrom=2025-04-01&dateTo=2025-04-30&dateType=OPERATION' \
  -H 'Authorization: Bearer <ACCESS_TOKEN>'

If everything is correct, you receive a 200 OK with the movements for the period. That is your first working integration!

3. Next steps

• API Reference — all endpoints, with "Try it".
• Concepts — investment account, instruments, positions.
• Conventions — environments, versioning, dates and errors.

Need development credentials? Contact us.