Webull Orders

Webull orders

Read the exact endpoint entry in references/endpoints.json, follow its schema_ref into references/openapi.json, and read authentication rules in references/authentication.md before building any request. Use the official Webull Open API reference and current trading documentation.

First-use onboarding

Before any order-related request, check for WEBULL_APP_KEY and WEBULL_APP_SECRET in the secure environment. If the API Key is missing, ask the user to configure it securely and stop; never request credentials in chat. Require an active WEBULL_ACCESS_TOKEN before preview or any order operation.

Supported endpoints

• POST /openapi/trade/order/preview — preview only; gate with PREVIEW.
• POST /openapi/trade/order/place — write; require exact confirmation and PLACE.
• POST /openapi/trade/order/replace — write; require exact confirmation and REPLACE.
• POST /openapi/trade/order/cancel — write; require exact confirmation and CANCEL.
• GET /openapi/trade/order/history — read-only history.
• GET /openapi/trade/order/open — read-only open orders.
• GET /openapi/trade/order/detail — read-only detail.

All paths are documented in the official reference index.

Safety workflow

1. For preview, obtain the exact user-provided instrument, side, quantity, order type, price/trigger, time-in-force, account, and other catalog-required fields. Read the catalog before constructing the body, then ask for PREVIEW confirmation:

``bash python scripts/webull_api.py request --method POST --path /openapi/trade/order/preview --body-file ./order-preview.json --allow-write --write-confirmation PREVIEW ``

1. Before place, replace, or cancel, display a concise request-payload summary: environment, account (redacted), symbol, side, quantity, order type, price/trigger, time-in-force, client order id, and the exact operation. Do not execute until the user gives the corresponding exact gate: PLACE, REPLACE, or CANCEL.
2. Construct each body independently from references/endpoints.json; never copy preview output blindly into a write request and never infer missing fields. Invoke only after confirmation, using the documented method/path:

``bash python scripts/webull_api.py request --method POST --path /openapi/trade/order/place --body-file ./order-place.json --allow-write --write-confirmation PLACE ``

1. Treat history/open/detail as reads and redact private identifiers. Never infer a trade instruction from “analyze”, “research”, “compare”, “watch”, or “what should I buy?”
2. Surface rate-limit responses and avoid automatic retries for writes. State clearly that an accepted API request is not a guarantee of execution, fill, price, or market availability. Do not claim success until the API response confirms it.

Source & license

This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.

• Author: nutdnuy
• Source: nutdnuy/webull-openapi-AI-Plugin
• License: MIT

Install and usage instructions live in the source repository linked above.