Skip to main content
POST
Create a watchlist

Authorizations

x-api-key
string
header
required

Raw API key shown once when created in the Allocait app (Settings > API keys). Send it verbatim in this header; the server stores and compares only its SHA-256 hash. Allocait generates every key: alc_ followed by 64 lowercase hex characters. Keys issued before 2026-10-10 are 64 hex characters with no prefix and keep working. A key may carry an expiry (90 days or 1 year, or never). A malformed, unknown, revoked or expired key gets 401 with no further detail, and a malformed one is refused before any lookup. Keys cannot be created through this API.

Body

application/json
name
string
required
Maximum string length: 100
items
object[]

The symbols in display order. A duplicate symbol is INVALID_INPUT.

Maximum array length: 200

Response

The watchlist was created

success
boolean
watchlist_id
string<uuid>
name
string
created
boolean

True when this call created the watchlist.

items
object[]

The symbols in display order, after this call.

added
string[]
removed
string[]