Security and account access

Know what you're connecting.

Broker connections need care. We'll explain the access required for your test and the checks still in progress before you connect an account.

§ 01

Signing in

The app supports two-step verification and session controls.

Optional authenticator-app codes add a second step to sign-in.
You can review sessions and revoke access from other signed-in sessions.
Repeated failed sign-in attempts are limited.
API keys and browser sessions have different permissions; a key is not unrestricted access to the app.

§ 02

Keys saved through the app's connection flow are encrypted in the database. The application must be able to use them to contact the provider.

Do not send keys, passwords, or account numbers by email or through this public website.
Only add keys through the signed-in connection flow after access has been arranged.
Review the permissions granted by your broker and revoke a key there if it should no longer work.
Encryption does not make a connection risk-free. Use only the access agreed for your test.

§ 03

The software checks configured limits before submitting supported orders. We are still testing the full order lifecycle.

Tests cover rejected requests, repeated submissions, and several recovery paths.
Partial fills, account-wide limits, and recovery after interruptions require further validation before trading readiness can be claimed.
An order request being accepted is different from the broker confirming a fill or cancellation.
Live trading is not part of the pilot offer.

§ 04

This is a small private pilot, not a claim of an independent security audit or complete protection.

Passing automated tests does not prove that a broker integration is ready for real-money use.
Workspace sharing and multiple-workspace access are still being built and tested.
Tell us about suspected security issues using the security contact linked below. Do not include secrets in the report.

Next step

Ask before connecting. We'll explain the intended setup and the limits of the current pilot.