What this is

☁️ Cloud broker — runs directly in the container via the official tigeropen SDK. Covers US, HK, and A-share markets.

Auth is RSA-signed static key: a tiger_id + a local PKCS#1 private key (PEM) + your account number. No OAuth, no token refresh.

Paper/live guard: a Tiger paper (sandbox) account number is exactly 17 numeric digits (e.g. 20191106192858300); standard/global accounts are not. The chosen --profile must match the account format or the command fails closed. Live placement additionally requires --confirm-live. Note: paper accounts don't support GTC, so it's auto-forced to DAY.

Get your credentials

Open a Tiger account and apply for API access at the Tiger Open Platform (登录 → 开发者 / API).

Generate an RSA key pair (the platform requires PKCS#1). On any machine:

openssl genrsa -out tiger_private_key.pem 2048      # PKCS#1 private key
openssl rsa -in tiger_private_key.pem -pubout -out tiger_public_key.pem

On the Open Platform, paste the public key content (between the BEGIN/END lines) to bind it. Note your tiger_id (developer id) shown there.
Find your account number: paper account from the sandbox/模拟 section (17 digits); live/standard account from your real account page.
Keep the private key safe — it never leaves your machine. Provide either its file path or paste the PEM contents via secure input.