TradeAdapter security
Credential handling in the current My Brokers workflow, and practical checks for your automated trading setup.
Saved broker credentials
Broker credentials saved through the current My Brokers workflow are encrypted before storage. TradeAdapter uses the connection for the account-data and trading operations your configuration requires.
This describes saved My Brokers connections. Follow the setup guide for the API version and broker you use.
Keep alerts and access private
In the current Strategy-based workflow, TradingView alerts reference a configured Strategy. The alert message does not need your broker API key or broker API secret.
Treat your TradeAdapter API key and webhook URL as private. Use the official HTTPS site, a unique account password and a protected recovery email. Remove private values from screenshots or messages shared with others.
Limit broker permissions
Grant only the API permissions specified in your broker's setup guide. Keep withdrawal permissions disabled wherever the broker provides that option; withdrawals are not required for the documented trading workflow.
Use broker IP restrictions where supported and follow the integration's instructions. Check that the key belongs to the intended live, demo or testnet account.
Test and verify execution
Test the complete alert-to-order workflow on a suitable demo, paper or testnet account where available. Check the symbol, direction, size and exit behaviour before using live funds.
Successful webhook delivery alone does not confirm a broker fill. Verify orders and positions with the broker or MetaTrader terminal, and continue monitoring your automation.
Check order controls
Stop loss, take profit, trailing stops, position sizing and other controls depend on the broker and market. The feature matrix identifies supported combinations.
Trading settings and protective orders do not remove market risk or guarantee an execution price. Check your broker's minimum sizes, account permissions and order behaviour.
Keep MetaTrader running
The MT4/MT5 route needs a running terminal, the TradeAdapter Expert Advisor and permission for algorithmic trading. A VPS is one way to host the terminal; it is separate from TradeAdapter's direct API route.
You control the terminal's hosting, network access and broker settings. Follow the Expert Advisor guide and check execution after any terminal or configuration change.
Disable or revoke access
You can disable a saved connection in My Brokers and revoke the corresponding API key at your broker. If a key may have been exposed, revoke it at the broker and review the account's activity.
Disabling a connection does not close existing positions or cancel orders already held by the broker. Review those orders and positions separately in your broker account or terminal.
Report a problem
Contact TradeAdapter support if you notice unexpected account activity, a possible security issue or an execution problem. Include the approximate time, affected broker and a description of what happened.
Share sanitised screenshots or error messages. Do not include passwords, broker API secrets or private webhook credentials in the message.
Help and setup
Related pages
Last reviewed .