Secure market data

Connection & setup

Connect official Upstox V3 data to this NSE F&O stock scanner without exposing your API access token.

The published site still serves an earlier version. Click Publish in the builder, then reload the published app before testing this connection fix. The recorded backend HTTP 403 happened before Upstox authentication; it does not prove your token is invalid.

Your supported free features

Backend Functions and secure server-side Secrets are enabled for this app and are sufficient for this integration on your current free setup. No paid feature or Code Editor is used. Functions cannot keep a persistent WebSocket (120-second execution limit), so they authorize the connection securely and the browser receives the V3 feed directly, without the access token.

Scanner backend invocation failed before Upstox authentication could be checked. Click Publish to deploy this draft, reload the app, then use Check secure setup. If it still fails, check the latest upstox Function log. No live data has been verified.

Setup is not verified. Sample data stays SIMULATED; no fabricated live prices.

Market feed connection

SIMULATED

Sample session. Connect Upstox for real market data.

SIMULATED demo data is displayed. These static prices are not Upstox live quotes.

Data provider

Upstox Market Data Feed V3

Instrument universe

Official NSE F&O-eligible equities

Candle history

5-minute intraday candles

Last verified update

Not received

Set up real-time data

No credentials configured? Follow these steps. Prices are never fabricated as live.

Create or open your Upstox developer app

Use your own Upstox account and a market-data-enabled developer application. Complete Upstox authorization to obtain an access token.

Store the token in server Secrets

In the app builder’s Secrets panel, set UPSTOX_ACCESS_TOKEN. Paste your access token there only. No Code Editor, paid add-on, chat message, or in-app token form is required.

Secret name: UPSTOX_ACCESS_TOKEN

Verify the live feed

Select Check secure setup, then Connect Upstox. LIVE appears only after a fresh V3 live-feed frame contains a valid official instrument key and recent exchange trade timestamp. Outside market hours or without verified updates, the connection displays DISCONNECTED.

Keep your token valid according to your Upstox token type. If authorization fails, replace it in server Secrets and reconnect. There is intentionally no token input in this app.

Official Upstox V3 documentation

Secure by design

Access token stays in server Secrets. Public visitors can request read-only market data; no secret or order endpoint is exposed.
Browser receives an authorized Upstox WebSocket URL (a short-lived feed credential), not your API access token.
Instrument keys are validated against the official daily NSE list; the feed scans up to 50 eligible equities per connection.
Only market-data endpoints are used. No real orders.

Connection states

LIVE

Fresh, decoded Upstox prices received with valid instrument keys and recent timestamps.

DISCONNECTED

No active verified stream, missing credentials, or stale updates. Cached quotes are not live.

SIMULATED

A static, clearly labelled sample session for exploring the scanner.

Add to Home screen

Install the published scanner on Android with a supported browser. Live prices require a connection; the app shell is available offline.

Feed architecture

Server Secret
Upstox access token

→

Secure function
Authorize & validate keys

→

One-use WebSocket URL
V3 binary market feed

Functions are short-lived and do not hold WebSockets. The browser connects directly to the authorized Upstox endpoint and decodes the official Protobuf schema. No long-running server or token-bearing browser request is used. The server-side proxy protects your secret, and Upstox account connection limits still apply across your open tabs.