Rico data API: carteira, Tesouro Direto and card limit
Rico: só vantagem pra investir is the Android brokerage client of RICO.COM.VC, XP Inc's retail DTVM that trades as Rico (legal entity XP Investimentos CCTVM, rico.com.vc). After login, Brazilian retail investors open a Rico account, browse monthly Rentabilíssimas fixed-income shelves — Tesouro Direto, CDB, LCI, LCA, CRI and CRA — plus funds, FIIs, BDRs, mini contracts and B3 stocks with zero brokerage, run Super Daytrade on the home broker, hold a Rico digital account for Pix, salary credits and bill pay, and collect up to 1% Investback on the Rico Card. ChartIQ charts, Riconnect analyst notes, FaceTec identity checks, consórcio and Open Finance consent sit around that carteira. The app is Brazil-only (Play rating 3.9 from 271 thousand ratings) and competes with XP Investimentos, BTG Pactual, NuInvest, Inter Invest and Ágora under CVM rules.
Carteira lots stamp quota and quantity next to accountId and walletId, while ticker rows fill the B3 watchlist and yield prices COE notes. Onboarding carries registrationStatus plus customerID, email and document; digital-account overdraft returns status and enabled. Wealth dashboards, Open Finance aggregators and Rico Card limit alerts consume those objects — openData Studio turns them into callable open data.
Screenshots
API surface
The endpoints and request/response examples below are reconstructed from the app's interface — illustrative, not a live capture.
Issue OAuth token
POST
/v1/investor/sessions/tokenopenbankingMints accessToken and refreshToken for the retail Rico session used on later carteira calls.
Auth: OAuth token request (no prior Bearer).
- accessToken
- refreshToken
POST /v1/investor/sessions/token HTTP/1.1 Content-Type: application/json {}{ "accessToken": "eyJhbGciOiJSUzI1NiJ9.access", "refreshToken": "eyJhbGciOiJSUzI1NiJ9.refresh" }Issue DTVM OAuth token
POST
/v1/investor/sessions/dtvm-tokenopenbankingMints DTVM-session accessToken and refreshToken for the Rico CCTVM session.
Auth: OAuth token request on the DTVM session variant (no prior Bearer).
- accessToken
- refreshToken
POST /v1/investor/sessions/dtvm-token HTTP/1.1 Content-Type: application/json {}{ "accessToken": "eyJhbGciOiJSUzI1NiJ9.dtvm", "refreshToken": "eyJhbGciOiJSUzI1NiJ9.refresh" }Access-controller user
GET
/v1/investor/sessions/meopendataReads the signed-in user from the access controller used after Rico login.
Auth: Bearer accessToken from POST /v1/investor/sessions/token.
GET /v1/investor/sessions/me HTTP/1.1 Authorization: Bearer <accessToken>{}Portfolio summary
GET
/v1/holdings/overviewopenfinanceReads the carteira snapshot: accountId, walletId, quota and quantity for the holdings home.
Auth: Bearer accessToken from POST /v1/investor/sessions/token.
- accountId
- walletId
- quota
- quantity
GET /v1/holdings/overview HTTP/1.1 Authorization: Bearer <accessToken>{ "accountId": "12345678", "walletId": "w-9f21", "quota": 1500.25, "quantity": 200 }Portfolio risk
GET
/v1/holdings/risk-profileopenfinanceReads the risk view tied to the same accountId as the portfolio summary.
Auth: Bearer accessToken from POST /v1/investor/sessions/token.
- accountId
- status
GET /v1/holdings/risk-profile HTTP/1.1 Authorization: Bearer <accessToken>{ "accountId": "12345678", "status": "OK" }Watchlist tickers
GET
/v1/market/watchlistopendataLists ticker rows on the stocks watchlist used by trading and quote screens.
Auth: Bearer accessToken from POST /v1/investor/sessions/token.
- ticker
GET /v1/market/watchlist HTTP/1.1 Authorization: Bearer <accessToken>{ "tickers": [ {"ticker": "PETR4"}, {"ticker": "VALE3"} ] }Investment home screen
GET
/v1/home/investmentsopendataLoads the wealth-layer investment home screen that sits above the product shelves.
Auth: Bearer accessToken from POST /v1/investor/sessions/token.
GET /v1/home/investments HTTP/1.1 Authorization: Bearer <accessToken>{}Home investment banners
GET
/v1/home/investments/promosopendataReturns the investment-home banner slots for the investment home.
Auth: Bearer accessToken from POST /v1/investor/sessions/token.
GET /v1/home/investments/promos HTTP/1.1 Authorization: Bearer <accessToken>{}Tesouro shelf header
GET
/v1/shelves/treasury/headeropenfinanceLoads the Tesouro Direto shelf header for the treasury product browse.
Auth: Bearer accessToken from POST /v1/investor/sessions/token.
GET /v1/shelves/treasury/header HTTP/1.1 Authorization: Bearer <accessToken>{}Investment-fund shelf filters
GET
/v1/shelves/funds/filtersopenfinanceReturns shelf filters for the funds catalog, including the bypassSuitability flag.
Auth: Bearer accessToken from POST /v1/investor/sessions/token.
- bypassSuitability
GET /v1/shelves/funds/filters HTTP/1.1 Authorization: Bearer <accessToken>{ "bypassSuitability": false }Fixed-income filter options
GET
/v1/shelves/fixed-income/filtersopenfinanceLoads filter options for the fixed-income offering shelf (CDB, LCI, LCA, CRI, CRA and Rentabilíssimas).
Auth: Bearer accessToken from POST /v1/investor/sessions/token.
GET /v1/shelves/fixed-income/filters HTTP/1.1 Authorization: Bearer <accessToken>{}COE yield assets
GET
/v1/shelves/structured-notes/assetsopenfinanceLists COE (Certificado de Operações Estruturadas) assets with yield for the structured-note shelf.
Auth: Bearer accessToken from POST /v1/investor/sessions/token.
- ticker
- yield
GET /v1/shelves/structured-notes/assets HTTP/1.1 Authorization: Bearer <accessToken>{ "assets": [ {"ticker": "COE-1", "yield": 12.4} ] }Digital-account overdraft status
GET
/v1/accounts/me/overdraftopenbankingReads overdraft status and enabled for the logged-in Rico digital-account customer.
Auth: Bearer accessToken from POST /v1/investor/sessions/token.
- status
- enabled
GET /v1/accounts/me/overdraft HTTP/1.1 Authorization: Bearer <accessToken>{ "status": "AVAILABLE", "enabled": true }Rico Card home limit
GET
/v1/cards/me/limitopenbankingReads the Rico Card home-screen limit for the logged-in customer (Investback card).
Auth: Bearer accessToken from POST /v1/investor/sessions/token.
GET /v1/cards/me/limit HTTP/1.1 Authorization: Bearer <accessToken>{}Navigation profile
GET
/v1/investor/me/profileopendataReturns the mobile-first navigation profile: customerID, email, document and phone.
Auth: Bearer accessToken from POST /v1/investor/sessions/token.
- customerID
- document
- phone
GET /v1/investor/me/profile HTTP/1.1 Authorization: Bearer <accessToken>{ "customerID": "c-4412", "email": "[email protected]", "document": "12345678901", "phone": "+5511999990000" }Personal-data registration status
GET
/v1/onboarding/personal-dataopendataReads registrationStatus for the personal-data onboarding step.
Auth: Bearer accessToken from POST /v1/investor/sessions/token.
- registrationStatus
GET /v1/onboarding/personal-data HTTP/1.1 Authorization: Bearer <accessToken>{ "registrationStatus": "COMPLETE" }
Data categories
- portfolio
- watchlists
- treasury
- funds
- fixed-income
- structured-notes
- overdraft
- cards
- profile
- onboarding
- banners
Where teams use this data
Wealth dashboard on carteira lots
A family-office or PFM-style board pulls quota and quantity with accountId from the portfolio summary and overlays portfolio risk status for the same walletId.
Watchlist and COE yield sync
A research terminal mirrors ticker rows from the stocks watchlist and joins COE assets on yield for structured-note coverage.
Investment-home catalog
An allocator copies the wealth-layer investment screen, N1_HOME_INVESTIMENTO banners, Tesouro header and funds filters — including bypassSuitability — into an internal product matrix.
Card limit and overdraft alerts
A treasury bot reads digital-account overdraft status and enabled plus the Rico Card home limit and pages operations when either flips.
Frequently asked questions
What holdings fields does Rico return on the carteira summary?
The portfolio summary carries accountId, walletId, quota and quantity for the holdings home, with a sibling risk view on the same accountId.
How does Rico authenticate API calls?
Retail sessions mint accessToken and refreshToken from a token-issuing call; a sibling DTVM session token covers the CCTVM session. Later carteira, shelf and card calls send the accessToken as Bearer.
Which investment shelves are exposed besides stocks?
Tesouro Direto has a treasury shelf header; funds and fixed income expose shelf filters (including bypassSuitability), and COE assets include yield. The wealth-layer investment screen and its promotional banner slots sit above those shelves.
Does the app cover banking products as well as brokerage?
Yes. Digital-account overdraft reports status and enabled, and the Rico Card home returns a limit used with Investback, alongside Pix and Open Finance consent screens in the client.
Apps similar to Rico: só vantagem pra investir
- XP Investimentos — XP Investimentos is XP Inc.'s Brazilian brokerage app that combines investments with a digital account, Pix and payments in one login.
- BTG Pactual Investimentos — BTG Pactual Investimentos is BTG Pactual's Brazilian brokerage app for fixed and variable income, with advertised zero brokerage on shares, FIIs and BDRs.
- Nubank — Nubank houses brokerage inside the main Nu app, listing Tesouro Direto from R$30, CDBs, funds, FIIs, ETFs and Brazilian stocks with no brokerage fee.
- Inter — Inter's Super App includes a brokerage that sells CDBs from R$1 plus Tesouro Direto, funds, cryptocurrencies, and stocks in Brazil and abroad.
- Ágora Investimentos — Ágora Investimentos is Bradesco's investment-house app, covering fixed income through variable income with a dedicated stock-market environment and trading tools.
- Santander Corretora — Santander Corretora (the former Toro Investimentos app) is Santander's Brazilian brokerage for fixed income, B3 stocks, funds, BDRs and ETFs with advertised zero brokerage.
- Clear — Clear is XP Inc.'s trading-oriented brokerage app for B3 stocks, ETFs, minicontracts and Tesouro Direto, with Home Broker orders and advertised zero brokerage.
Topics
- Rico API
- Rico carteira portfolio
- Tesouro Direto shelf
- Rico Card limit
- B3 watchlist tickers
- Brazilian brokerage data
- COE yield
- Rico digital account overdraft
Need this app's data API integrated?
We deliver scoped integrations for any named app — from USD 500 with source-code handoff, or hosted access billed per call. Tell us the data you need.
- NDA + SOW on every engagement
- Delivery in 3–7 days
- Payment only after acceptance
- Work scoped to authorized use