I use Kite Connect for a personal trading dashboard that pulls live NSE data. I understand the daily manual re-authentication is a SEBI-mandated 2FA control, and I'm not asking to remove or bypass it.
What I'd like to ask about is the mechanism: today, Kite Connect's login flow requires opening kite.zerodha.com/connect/login in a browser and manually typing user ID, password, and TOTP each day. I believe some other brokers with API offerings (e.g. Angel One's SmartAPI, Dhan's API) satisfy the same daily 2FA requirement through a direct API call — the user still supplies a fresh TOTP each day, but it's POSTed to an endpoint rather than typed into a hosted login page. That removes the need for a browser session entirely while keeping the "manual, same-day, fresh TOTP" control intact.
Is this something Zerodha has considered or has on a roadmap for Kite Connect? If there's a technical or regulatory reason the browser-redirect flow is required specifically (versus an equivalent API endpoint), I'd appreciate understanding it — and if there's an existing feature-request thread I should follow instead of opening a new one, please point me to it.
As per exchange requirements, users must log in manually at least once each day. For this reason, we do not recommend automating the Kite Connect login flow.
That said, we understand the need for a smoother authentication experience, and we are exploring ways to make the token generation more seamless.
That said, we understand the need for a smoother authentication experience, and we are exploring ways to make the token generation more seamless.