Developers › API reference › Portfolio Center

GET /api/v1/accounts/{id}/risk

Concentration, exposures and factor betas.

  • Scope portfolio:read
  • operationId portfolioRisk

The token needs the scope portfolio:read, and the person or service account behind it needs the matching privileges and account permissions, exactly as on the screens. See Scopes.

Request

GET /api/v1/accounts/{id}/risk

Path parameters

NameDescriptionExample
idThe id of the account.12

Headers

HeaderRequiredValue
AuthorizationyesBearer <token>: an OAuth access token (vat_…) or a personal access token (vpt_…). Get a token

Examples

Keep the token in an environment variable (VESTORIS_TOKEN), never in the script.

curl

curl "https://vestoris.com/api/v1/accounts/12/risk" \
  -H "Authorization: Bearer $VESTORIS_TOKEN"

Python (requests)

import os, requests

r = requests.get(
    "https://vestoris.com/api/v1/accounts/12/risk",
    headers={
        "Authorization": f"Bearer {os.environ['VESTORIS_TOKEN']}",
    },
    timeout=30,
)
r.raise_for_status()  # errors are application/problem+json with a stable "code"
print(r.json())

JavaScript (fetch)

const res = await fetch("https://vestoris.com/api/v1/accounts/12/risk", {
  method: "GET",
  headers: {
    Authorization: `Bearer ${process.env.VESTORIS_TOKEN}`,
  },
});
const data = await res.json();
if (!res.ok) throw new Error(`${data.code}: ${data.detail}`); // problem+json
console.log(data);

Response

200 OK, application/json: Risk. Rate-limit headers: RateLimit-Limit, RateLimit-Remaining, RateLimit-Reset.

Response fields
FieldTypeDescription
account_idid (string)The account's id.
valuedecimal string or nullValue at the latest (simulated) closes.
cash_pctdecimal string or nullCash as a percent of the account's value.
holdingsintegerNumber of positions.
top_positionobject or nullThe largest position.
top5_pctdecimal string or nullWeight of the five largest positions, in percent.
hhidecimal string or nullHerfindahl-Hirschman concentration index of the weights.
effective_ndecimal string or nullEffective number of holdings (1 / HHI).
sectorsobjectWeights by sector, in percent.
issuersobjectWeights by issuer, in percent.
factor_betasanySimulated factor betas (market, size, value, momentum).
volatility_pctdecimal string or nullAnnualised volatility of the simulated returns, in percent.
correlation_spikeslistPairs of holdings whose recent correlation jumped.
simulatedbooleanAlways true: simulated data, paper trading.

Example response

HTTP/1.1 200 OK
Content-Type: application/json

{
    "account_id": "12",
    "value": "5240000.00",
    "cash_pct": "3.10",
    "holdings": 24,
    "top_position": {
        "symbol": "AAPL",
        "weight_pct": "6.2"
    },
    "top5_pct": "28.4",
    "hhi": "0.054",
    "effective_n": "18.4",
    "sectors": {
        "Information Technology": "31.2"
    },
    "issuers": {
        "AAPL": "6.2"
    },
    "factor_betas": {
        "market": "1.08"
    },
    "volatility_pct": "18.2",
    "correlation_spikes": [],
    "simulated": true
}

Example values. Your values depend on your firm's data; prices, orders and fills are simulated.

Status codes and errors

Errors are application/problem+json (RFC 9457) with a stable code to program against; the detail says what to fix. See Errors.

StatusWhenProblem codes
200Success
400The request is malformedinvalid_request
401No token, or it is invalid or expiredinvalid_token
403The token lacks the scope, or the person or service account behind it lacks the privilege or account permissioninsufficient_scope forbidden ip_not_allowed
404Not found, or not visible to you (the API never confirms what you may not see)not_found
429Rate limited: wait for Retry-After secondsrate_limited
{
    "type": "https://vestoris.com/developers/errors#validation_failed",
    "title": "Validation failed",
    "status": 422,
    "detail": "Quantity must be greater than zero.",
    "code": "validation_failed",
    "instance": "/api/v1/accounts/12/risk"
}

On the screens

The same thing in the app is explained in: