Import the full NorenRESTAPI OAuth Postman collection — every endpoint pre-built as a ready-to-run request.
Overview
The NorenRESTAPI_oAuth Postman collection covers every documented endpoint as a pre-configured request, using collection variables for your domain and credentials so you're not retyping URLs and payloads for each test call.
Download
NorenRESTAPI_oAuth.postman_collection.json
Postman Collection v2.1 — 40 endpoints
Import
Click Download above to save the collection JSON.
In Postman: File → Import, then select the downloaded file.
Set up the collection variables (below) before running any request.
Collection variables
Set these under the collection's Variables tab so every endpoint picks them up automatically:
Variable
Description
Domain_Name
API host — defaults to api.shoonya.com, used as {{Domain_Name}} in every request URL.
USER_ID
Your Shoonya user ID, used as uid in most request bodies.
ACCT_ID
Your account ID, used as actid where required (orders, holdings, reports).
PAN
Used only by the Forgot Password requests.
access_token
Your susertoken from GenAcsTok — every authenticated request reads this variable for its Bearer token, so set it once after logging in rather than editing 40 requests individually.
Authentication
Every request except GenAccessToken uses Postman's per-request Bearer Token auth, sourced from the {{access_token}} collection variable. Get that token first by running GenAccessToken — see Manual Login (OAuth) for how to obtain code and compute the checksum it needs — then paste the returned susertoken into the access_token variable.
Auth & account
Request
Endpoint
GenAccessToken
POST GenAcsTok
Forgot Password
POST ForgotPassword
Forgot Password OTP
POST FgtPwdOTP
Change Password
POST Changepwd
User Detail
POST UserDetails
ClientDetails
POST ClientDetails
Watchlist
Request
Endpoint
Get Watchlist Names
POST MWList
Get Watchlist Scrips
POST MarketWatch
Search Scrip
POST SearchScrip
Add Scrip To Watchlist
POST AddMultiScripsToMW
ReorderMWScrips
POST ReorderMWScrips
Delete Scrip to Watch List
POST DeleteMultiMWScrips
PreDefinedMW
POST PreDefinedMW
PreDefinedMWList
POST PreDefinedMWList
RenameMW
POST RenameMW
Orders & trades
Request
Endpoint
Place Order
POST PlaceOrder
Modify Order
POST ModifyOrder
Cancel Order
POST CancelOrder
ExitSNOOrder
POST ExitSNOOrder
GetOrderMargin
POST GetOrderMargin
GetBasketMargin
POST GetBasketMargin
OrderBook
POST OrderBook
MultiLegOrderBook
POST MultiLegOrderBook
Single order Hist
POST SingleOrdHist
single ord status
POST SingleOrdStatus
TradeBook
POST TradeBook
Product Conversion
POST ProductConversion
SpanCalc
POST SpanCalc
Positions, holdings & funds
Request
Endpoint
PositionBook
POST PositionBook
InteropPosition book
POST InteropPositionBook
Holdings
POST Holdings
Holdings Conversion
POST HoldingsConv
Limits
POST Limits
GetSubLimits
POST GetSubLimits
GetMaxPayoutAmount
POST GetMaxPayoutAmount
Reports
Request
Endpoint
GetOrderReport
POST GetOrderReport
GetTradeReport
POST GetTradeReport
Market data & reference
Request
Endpoint
Get SecurityInfo
POST GetSecurityInfo
GetQuotes
POST GetQuotes
EODChartData
POST EODChartData
GetIndexList
POST GetIndexList
GetOptionChain
POST GetOptionChain
GetOptionGreek
POST GetOptionGreek
GetLinkedScrips
POST GetLinkedScrips
GetUnderlyingExchToken
POST GetUnderlyingExchToken
ExchMsg
POST ExchMsg
GetBrokerMsg
POST GetBrokerMsg
ExchStatus
POST ExchStatus
AMOStatusFlag
POST AMOStatusFlag
TPSeries
POST TPSeries
Notes
All request bodies use jData=<JSON> as raw text, per API Structure — every request's body tab is set to raw / text; don't switch it to JSON mode or the jData= prefix will be dropped from the send.
GetOptionGreek's sample body uses placeholder values (<expiry>, <strike_price>, etc.) — fill these in before sending, it won't return anything meaningful as-is.
Order-referencing requests (Modify/Cancel/ExitSNOOrder/order history/status) use a <order_number> placeholder for norenordno — replace with a real order number from Order Book before testing.
Overview
The
NorenRESTAPI_oAuthPostman collection covers every documented endpoint as a pre-configured request, using collection variables for your domain and credentials so you're not retyping URLs and payloads for each test call.Download
Import
Collection variables
Set these under the collection's Variables tab so every endpoint picks them up automatically:
Domain_Nameapi.shoonya.com, used as{{Domain_Name}}in every request URL.USER_IDuidin most request bodies.ACCT_IDactidwhere required (orders, holdings, reports).PANaccess_tokensusertokenfrom GenAcsTok — every authenticated request reads this variable for its Bearer token, so set it once after logging in rather than editing 40 requests individually.Authentication
Every request except GenAccessToken uses Postman's per-request Bearer Token auth, sourced from the
{{access_token}}collection variable. Get that token first by running GenAccessToken — see Manual Login (OAuth) for how to obtaincodeand compute thechecksumit needs — then paste the returnedsusertokeninto theaccess_tokenvariable.Auth & account
POST GenAcsTokPOST ForgotPasswordPOST FgtPwdOTPPOST ChangepwdPOST UserDetailsPOST ClientDetailsWatchlist
POST MWListPOST MarketWatchPOST SearchScripPOST AddMultiScripsToMWPOST ReorderMWScripsPOST DeleteMultiMWScripsPOST PreDefinedMWPOST PreDefinedMWListPOST RenameMWOrders & trades
POST PlaceOrderPOST ModifyOrderPOST CancelOrderPOST ExitSNOOrderPOST GetOrderMarginPOST GetBasketMarginPOST OrderBookPOST MultiLegOrderBookPOST SingleOrdHistPOST SingleOrdStatusPOST TradeBookPOST ProductConversionPOST SpanCalcPositions, holdings & funds
POST PositionBookPOST InteropPositionBookPOST HoldingsPOST HoldingsConvPOST LimitsPOST GetSubLimitsPOST GetMaxPayoutAmountReports
POST GetOrderReportPOST GetTradeReportMarket data & reference
POST GetSecurityInfoPOST GetQuotesPOST EODChartDataPOST GetIndexListPOST GetOptionChainPOST GetOptionGreekPOST GetLinkedScripsPOST GetUnderlyingExchTokenPOST ExchMsgPOST GetBrokerMsgPOST ExchStatusPOST AMOStatusFlagPOST TPSeriesNotes
jData=<JSON>as raw text, per API Structure — every request's body tab is set to raw / text; don't switch it to JSON mode or thejData=prefix will be dropped from the send.GetOptionGreek's sample body uses placeholder values (<expiry>,<strike_price>, etc.) — fill these in before sending, it won't return anything meaningful as-is.<order_number>placeholder fornorenordno— replace with a real order number from Order Book before testing.