Given the sensitive nature of investing online there are inherent risks in exposing brokerage services to the public. These risks can be mitigated by using a strong authentication strategy.
While some of the authentication methods we use may be more difficult to implement, it is with our customers’ security and privacy in mind that we enforce strict standards on account access. With that in mind, we require that each request to a critical brokerage function be encrypted, signed and verified (See Security).
Every call made to the API must be signed using credentials from both the application and the user (See the Security section for more information). If you have improperly implemented the request headers, the API will respond with an authentication error.
The API will respond accordingly when a call lacks the proper authentication for it to be successful. In the event that a user has revoked access to your application, or if you attempt to perform an action against an account that does not belong to the user you are authenticated as, the API will respond with an authentication error. OAuth
We support the OAuth protocol for authentication. You must use OAuth to authenticate with the API.
To create an application, you can visit https://www.ally.com/api/invest/documentation. Once there you can sign-in and register your account for access to the API. Once properly registered and agreements have been signed, you can create applications associated with your account. This will give you everything you need to begin making requests on behalf of your own account.
In order to access a user's information and make calls on a user's behalf (or your own), your application will need to obtain that user's credentials. We support the OAuth Core 1.0 Revision A standard and you can find more information about our implementation in the OAuth section.
Any mention of actual symbols are to be used for coding purposes only and do not imply a recommendation or solicitation to buy or sell a particular security or to engage in any particular investment strategy.
At the time of publication and in the preceding month, Ally Invest did not have ownership greater than 1% in any stocks mentioned here and does not have any other actual, material conflict of interest known at the time of publication.
Ally Invest did not receive compensation from a public offering or from investment banking services related to any companies mentioned here within the past 12 months, or expects to receive any in the next 3 months. Ally Invest did not engage in market making in the securities mentioned here.
Ally Invest Securities' background can be found at FINRA's BrokerCheck. Options involve risk and are not suitable for all investors.
Review the Characteristics and Risks of Standardized Options brochure (PDF) before you begin trading options. Options investors may lose the entire amount of their investment in a relatively short period of time.