> ## Documentation Index > Fetch the complete documentation index at: https://docs.oms.verolabs.co/llms.txt > Use this file to discover all available pages before exploring further. # Place a new order > Send all order fields as path segments and no JSON body. ## OpenAPI ````yaml openapi.docs.en.json POST /api/v1/orders/new/{refOrderID}/{accountID}/{symbol}/{orderSide}/{price}/{qty}/{orderType} openapi: 3.0.3 info: title: Vero OMS REST API version: 1.0.24 description: >- REST API documentation for Vero OMS. Paths are aligned with the active KrakenD gateway config under k8s-dev-gitops/vero-algo/tools/krakend and response schemas are expanded from backend/frontend source models. servers: - url: https://api-gw.verolabs.co description: API gateway security: [] tags: - name: Auth description: Authentication flows and app logout - name: Signup description: APIs used during account signup - name: Accounts description: User accounts, balances, positions, deposits and withdrawals - name: Bank Accounts description: Saved bank account management - name: Orders description: Order placement, cancellation, modification and order history - name: History description: Account orders, trades and cash transactions. - name: Market Data description: Watchlists, symbol search, product master and OHLCV history - name: Notifications description: In-app notifications - name: Referral description: Referral code, rebate and commission summary APIs - name: Diagnostics description: Health and diagnostic endpoints paths: /api/v1/orders/new/{refOrderID}/{accountID}/{symbol}/{orderSide}/{price}/{qty}/{orderType}: post: tags: - Orders summary: Place a new order description: >- Place a normal order. KrakenD forwards the authenticated user from JWT and sends all order fields as path parameters; there is no JSON request body. operationId: placeOrder parameters: - name: refOrderID in: path required: true schema: type: string description: >- Client-generated order reference used for tracking and duplicate detection. - name: accountID in: path required: true schema: type: string description: >- Trading account identifier. The authenticated user must be allowed to access this account. - name: symbol in: path required: true schema: type: string description: Trading symbol or product code such as FPT or VN30F1M. - name: orderSide in: path required: true schema: type: string description: 'Order side. Accepted values: B for buy, S for sell.' - name: price in: path required: true schema: type: number description: >- Order price. For market-style orders, backend interpretation depends on orderType. - name: qty in: path required: true schema: type: integer format: int64 description: Order quantity in shares/contracts/lots accepted by the broker. - name: orderType in: path required: true schema: type: string description: Order type. Common accepted values include LO, MTL, ATO, and ATC. responses: '200': description: Normal order placement result. content: application/json: schema: $ref: '#/components/schemas/PlaceOrderResponse' examples: success: summary: Success response value: isSuccess: true detail: Order placed successfully data: ORDER-V1StGXR8_Z5jdHi6B-myT '400': $ref: '#/components/responses/ErrorResponse' description: Error response. content: application/json: schema: $ref: '#/components/schemas/AnyErrorBody' application/problem+json: schema: oneOf: - $ref: '#/components/schemas/ValidationProblemDetails' - $ref: '#/components/schemas/ProblemDetails' text/plain: schema: type: string description: Plain-text backend or gateway error message. '401': $ref: '#/components/responses/ErrorResponse' description: Error response. content: application/json: schema: $ref: '#/components/schemas/AnyErrorBody' application/problem+json: schema: oneOf: - $ref: '#/components/schemas/ValidationProblemDetails' - $ref: '#/components/schemas/ProblemDetails' text/plain: schema: type: string description: Plain-text backend or gateway error message. '404': $ref: '#/components/responses/ErrorResponse' description: Error response. content: application/json: schema: $ref: '#/components/schemas/AnyErrorBody' application/problem+json: schema: oneOf: - $ref: '#/components/schemas/ValidationProblemDetails' - $ref: '#/components/schemas/ProblemDetails' text/plain: schema: type: string description: Plain-text backend or gateway error message. '500': $ref: '#/components/responses/ErrorResponse' description: Error response. content: application/json: schema: $ref: '#/components/schemas/AnyErrorBody' application/problem+json: schema: oneOf: - $ref: '#/components/schemas/ValidationProblemDetails' - $ref: '#/components/schemas/ProblemDetails' text/plain: schema: type: string description: Plain-text backend or gateway error message. security: - bearerAuth: [] components: schemas: PlaceOrderResponse: type: object additionalProperties: true description: Normal order placement response. required: - isSuccess - detail - data properties: isSuccess: type: boolean description: >- Whether service.orderapi accepted the request and submitted the order to the broker. detail: type: string description: >- Result message. On success this is usually "Order placed successfully"; on failure it contains the reject or validation reason. data: type: string pattern: ^ORDER- example: ORDER-V1StGXR8_Z5jdHi6B-myT description: >- System order id generated by service.orderapi for the newly created order. Use this id with cancel APIs, execution reports, and order streams. This is not the external broker order id and not the client-supplied refOrderID. AnyErrorBody: oneOf: - $ref: '#/components/schemas/ErrorResponse' - $ref: '#/components/schemas/ValidationProblemDetails' - $ref: '#/components/schemas/ProblemDetails' - $ref: '#/components/schemas/AuthFlow' description: >- Structured error body returned by gateway, ASP.NET services, or backend validation handlers. ValidationProblemDetails: allOf: - $ref: '#/components/schemas/ProblemDetails' - type: object additionalProperties: true properties: errors: type: object additionalProperties: oneOf: - type: array items: type: string - type: string description: Validation errors keyed by request field name. description: >- Validation problem response returned when request parameters or body fields are invalid. ProblemDetails: type: object additionalProperties: true description: RFC 7807-style problem response returned by ASP.NET/gateway services. properties: type: type: string description: Problem type URI. title: type: string description: Short problem title. status: type: integer description: HTTP status code. detail: type: string description: Detailed error message. traceId: type: string description: Trace id for backend diagnostics. ErrorResponse: type: object additionalProperties: true description: >- Error body returned by gateway or backend services. Backends can return either JSON objects or plain text errors. properties: error: oneOf: - type: string - type: object additionalProperties: true properties: id: type: string description: gateway error id when supplied. code: type: integer description: HTTP-like error code. status: type: string description: HTTP status text, for example Unauthorized. reason: type: string description: >- Detailed reason returned by the authentication service or gateway. message: type: string description: Human-readable error message. description: Error code/message string or nested gateway error object. message: type: string description: Human-readable error message. detail: type: string description: Detailed backend error message when available. details: oneOf: - type: string - type: object additionalProperties: true - type: array items: type: object additionalProperties: true description: Additional validation or backend details. nullable: true status: type: integer description: HTTP status code when included by the backend. AuthFlow: type: object additionalProperties: true properties: id: type: string description: >- Flow id. Use this value as the flow query parameter when submitting or updating the flow. type: type: string description: Flow type returned by the system, for example browser or api. expires_at: type: string format: date-time description: Timestamp when the flow expires. Submit the flow before this time. issued_at: type: string format: date-time description: Timestamp when created the flow. ui: type: object additionalProperties: true description: >- UI payload containing action URL, method, nodes, messages, and CSRF node when required. state: type: string description: >- Current flow state, such as choose_method, sent_email, passed_challenge, or success. request_url: type: string description: Original request URL used to create the flow. organization_id: type: string nullable: true description: organization id for organization-scoped flows, when supplied. created_at: type: string description: Flow creation timestamp. format: date-time updated_at: type: string description: Flow update timestamp. format: date-time refresh: type: boolean description: Whether the flow is a refresh flow. requested_aal: type: string description: Requested authenticator assurance level for the flow. identity: allOf: - 9cb587e8-c15a-435c-916a-4854d0ffa2c6 description: Identity attached to settings flows when the system includes it. description: >- self-service flow object returned by login, registration, recovery, and settings create/update endpoints. responses: ErrorResponse: description: Error response containing an error code, message, detail, or plain text. content: application/json: schema: $ref: '#/components/schemas/ErrorResponse' text/plain: schema: type: string securitySchemes: bearerAuth: type: http scheme: bearer description: Bearer token used for protected REST API requests. ````