Broker API and Onyx: Secure Connection Without Sharing Password

Discover how the broker API connects Onyx to your terminal without sharing your password. Enterprise security, full control, frictionless and risk-free.

The Problem: How to Connect a Trading Journal Safely?

When you're looking for a risk manager or a multi-platform trading journal, the most important question is always the same: how do I trust my money to an external tool?

Many older solutions asked for your username and password directly. That's an unnecessary risk. Your broker, your platform, your money: everything is at stake if you share those credentials. Onyx works differently. It uses your broker's API as a secure bridge between your terminal and our risk manager, without us ever having access to your login data.

What is the Broker API and Why Is It More Secure?

The API (Application Programming Interface) is an authorized communication channel that your broker puts at your disposal. It works like this:

You generate an API key in your broker account (usually under "Accounts" or "Security").
That key has limited permissions: it can only read and execute trades; it can never change passwords or withdraw money.
The key is pasted into your connector (the EA in MetaTrader or the cBot in cTrader).
The connector sends your trades to Onyx, and Onyx applies Guardian rules without ever touching your password.

It's like giving Onyx a temporary access pass to a specific door, not the master key to your house.

How the Connection Works Step by Step

1. Generate the API Key in Your Broker

Log into your broker's control panel, look for "Accounts," "Security," or "API" and create a new key. Be careful: some brokers allow multiple keys (one per terminal), others only one. Store it somewhere safe.

2. Download the Correct Connector

Onyx has connectors for each platform:

MetaTrader 4 and 5: you download an Expert Advisor (EA).
cTrader: you download a cBot.
MatchTrader (coming soon): connects automatically via broker API, no installation needed.

3. Install and Configure the Connector

You open your terminal, install the EA or cBot, and in the settings paste your API key. On the first trade execution, the key becomes tied to that account number. One key per account.

4. Guardian Takes Control

From that moment on, every trade you open in your terminal goes through Onyx. Guardian checks:

Daily loss limit.
Total loss limit.
Profit protection.
High-impact news alerts.
Allowed symbols and lot sizes.

Everything is applied automatically; you keep trading normally.

Security by the Numbers: Why Onyx Never Touches Your Password

Onyx has no access to:

Your broker password.
Your login email.
Withdrawal functions or password changes.
Your bank balance or payment methods.

The broker API is read-only and trade-only by default. If you revoke it at any time, the connector stops working instantly. There are no backdoors.

This is especially important in funded accounts and prop firms, where control and verification are critical. Guardian helps you comply with the firm's rules without Onyx having power over your money.

Compatibility: Onyx Works With Any Broker

One of the advantages of using an API is that Onyx is broker-agnostic:

Does your broker offer MetaTrader 4 or 5? → Install the EA.
Does it use cTrader? → Install the cBot.
Are you a prop firm trader with MT4/MT5 or cTrader? → Exactly the same.

It doesn't matter which broker you use or if you switch firms: the connection works with the same secure method.

What if You Need to Change Accounts or Brokers?

It's simple:

1. Revoke the old API key on your previous broker (for extra security). 2. Generate a new key on your new account at the new broker. 3. Update the key in your connector (in your EA or cBot settings). 4. Done: Onyx keeps protecting your trading without friction.

No personal data is stored in Onyx; only your operation history and account rules.

Copy Trading Also Uses the API Securely

If you use Onyx's copy trading (available in Elite and Black Onyx plans) to copy trades between your own accounts, it also works via API. The master and slave accounts communicate in an encrypted and authenticated way; we never share passwords or sensitive data between them.

Also, the random delay (jitter) that Onyx adds to reduce ban risk in prop firms is another layer of security that protects your operations.

Frequently Asked Questions About API and Onyx

Can Onyx withdraw money from my account?

No. The broker API has limited permissions: it only opens, closes, and modifies trades. Withdrawals and password changes require direct authentication on the broker, something Onyx never touches.

What if I lose or my API key is leaked?

Log into your broker, revoke that key, and generate a new one. The connector stops working instantly. The key has no access to your password or personal data.

Does the API slow down my trades?

No. The connector executes locally on your terminal; it only sends data to Onyx after the trade is already open. Latency is minimal (milliseconds) and doesn't affect your execution.

Will it work on MatchTrader when it launches?

Yes. MatchTrader will connect directly via broker API without any installation needed, equally secure but even simpler.

The Summary: Security Without Sacrificing Functionality

Onyx protects your money for real:

No password: connects via broker API, enterprise-level authentication.
Limited permissions: trades only, no withdrawals or sensitive changes.
Revocable instantly: if you distrust it, terminate the connection in two clicks.
Compatible with any broker: MetaTrader, cTrader, and soon MatchTrader.
Guardian keeps watching: prop firm rules, daily limits, news, everything under control.

This is the modern and safe way to scale your trading with professional tools. Your money remains yours, under your control, protected by the same security practices that banks use.