tossinvest-openapi for Python

Unofficial sync Python SDK for Toss Securities Open API.

Status

Requirements

• Python 3.12+
• Toss Securities Open API client credentials

Installation

pip install tossinvest-openapi

Quick Start

from tossinvest_openapi import TossInvestClient

with TossInvestClient(
    client_id="...",
    client_secret="...",
) as client:
    accounts = client.get_accounts()
    prices = client.get_prices(symbols="005930,AAPL")

print(
    {
        "account_count": len(accounts),
        "price_count": len(prices),
    }
)

Authentication

The SDK handles OAuth2 Client Credentials internally. It issues an access token on the first business API call, caches it in memory, and refreshes it after expiry.

Prefer one TossInvestClient instance per credential set.

Responses

Business methods return the unwrapped result payload by default.

accounts = client.get_accounts()

Use with_response=True when you need the raw envelope or HTTP metadata.

response = client.get_accounts(with_response=True)

print(
    {
        "account_count": len(response.data),
        "status_code": response.response.status_code,
        "request_id": response.response.request_id,
    }
)

Avoid logging response.raw unless you have reviewed and redacted the payload. It may contain account data, order data, or other sensitive fields.

Lifecycle

Use a context manager or call close() explicitly.

with TossInvestClient(client_id="...", client_secret="...") as client:
    accounts = client.get_accounts()

client = TossInvestClient(client_id="...", client_secret="...")
try:
    accounts = client.get_accounts()
finally:
    client.close()

Errors

The SDK exposes domain exceptions such as TossInvestAPIError, TossInvestAuthenticationError, TossInvestRateLimitError, TossInvestConnectionError, and TossInvestTimeoutError.

from tossinvest_openapi import TossInvestAPIError, TossInvestConnectionError

try:
    client.get_accounts()
except TossInvestAPIError as error:
    print(error.status_code, error.code, error.request_id)
except TossInvestConnectionError as error:
    print(error.cause)

Do not log full error objects or HTTP metadata. They may contain secrets, tokens, account data, or order data.

Orders

Order methods are exposed because they are part of the official OpenAPI document. They can change real account state. Add explicit user confirmation at the application layer before calling create_order, modify_order, or cancel_order.

The SDK does not retry automatically.

Development

From this package directory:

mise run check

From the repository root:

mise run check