Log into app.invoapp.com
in Chrome → open DevTools (F12 / ⌘⌥I).
Invo refresh token (monitor / feed auth)
The token in Local Storage is encrypted. Decryption needs
two values from the same browser:
-
Application → Local Storage →
https://app.invoapp.com
-
Copy value of
FlutterSecureStorage.REFRESH_TOKEN
→ paste into Invo refresh token
(looks like base64….base64… — two parts, not a JWT)
-
Copy value of
FlutterSecureStorage
→ paste into FlutterSecureStorage key
(the AES key used to encrypt the token)
Without the key, the server cannot decrypt the refresh token and Invo API calls
return 401 Refresh failed. A plaintext JWT (three
.-separated segments starting with eyJ…) still works
without the key field.
HL agent private key + wallet (live trading)
-
Application → IndexedDB →
invo_hl_agents → agents → current
- Copy
privateKey (0x…) → HL agent private key
- Copy your wallet address from Invo profile (or JWT payload) → Wallet address