I use Kite Connect for a personal trading dashboard that pulls live NSE data. I understand the daily manual re-authentication is a SEBI-mandated 2FA control, and I'm not asking to remove or bypass it.
What I'd like to ask about is the mechanism: today, Kite Connect's login flow requires opening kite.zerodha.com/connect/login in a browser and manually typing user ID, password, and TOTP each day. I believe some other brokers with API offerings (e.g. Angel One's SmartAPI, Dhan's API) satisfy the same daily 2FA requirement through a direct API call — the user still supplies a fresh TOTP each day, but it's POSTed to an endpoint rather than typed into a hosted login page. That removes the need for a browser session entirely while keeping the "manual, same-day, fresh TOTP" control intact.
Is this something Zerodha has considered or has on a roadmap for Kite Connect? If there's a technical or regulatory reason the browser-redirect flow is required specifically (versus an equivalent API endpoint), I'd appreciate understanding it — and if there's an existing feature-request thread I should follow instead of opening a new one, please point me to it.
