Authentication

One key in a header calls every data endpoint.

Every request carries the X-API-Key header. Create, rotate, and revoke keys yourself in the dashboard — no need to contact us.

curl "https://api.twmarketdata.com/v2/datasets/monthly-revenue?symbol=2330" \
  -H "X-API-Key: $TWMD_API_KEY"

A few habits

Keep the key in the header, not the URL — So it doesn't end up in server logs or browsing history.
One key per environment — Keep development and production separate, so you revoke only the leaked one (multiple keys are available by plan).
Quota follows your plan — Each key's per-minute requests and monthly usage are metered by plan.

Common errors

401 missing_api_key — API key missing or invalid (except the five no-key symbols 2330/2317/2454/0050/2603, which return 200 directly).
402 not_entitled_for_dataset — your plan is not entitled to this dataset (paywall).
429 — quota or rate limit exceeded.

A 402 body is more than “not included”: it names the plan that covers the dataset, lists what your current plan can already read, and gives one command that returns data with no key at all.

{
  "error": "not_entitled_for_dataset",
  "message": "income-statement is not in your plan. The pro plan covers it. 3 datasets are readable on the free tier meanwhile. The example below returns data with no key at all.",
  "needs_plan": "pro",
  "your_free_plan_includes": [],
  "free_plan_dataset_count": 3,
  "try_this_example": "curl \"https://api.twmarketdata.com/v2/datasets/twse-daily-price?symbol=2330&limit=1\"",
  "upgrade_url": "https://twmarketdata.com/pricing",
  "docs_url": "https://twmarketdata.com/docs/api-reference/errors"
}

Next → Source policy