Connect a broker · Zerodha
Kite Connect gives you an API key and secret from a developer account that sits beside your trading account. The free Personal plan places orders; live and historical data is the paid one.
The redirect URL has to match exactly, character for character, whatever While25 sends. http://127.0.0.1:8000 is fine while you are testing on your own machine.
request_token when you log in, and While25 exchanges it for an access_token using a checksum of your key, that token and your secret. The access token expires at 6 AM the next morning, by regulation. So the first thing you do each trading day is log in again.An access token also dies if you log out of Kite Web, or if anyone does a master logout on the account.
The URL in the app registration and the one being sent differ somewhere: http against https, a port, a trailing slash. They must be identical.
The access token expired at 6 AM. Log in again; this is a regulatory requirement, not a bug, and no refresh token exists.
You are on the free Personal plan, which carries no market data. The ₹500 a month plan adds live and historical data.
The checksum is SHA-256 over api_key plus request_token plus api_secret, in that order, with no separators. A stale secret is the usual cause.
Also trade through Upstox? The Upstox guide is the same shape. New to all of this and want a risk-free first look? Alpaca paper takes five minutes.