Build copy trading into your product.

A REST API, signed outbound webhooks and a multi-tenant backend, so you can skip the broker integration, EA development and risk infrastructure.

Read the API docsTalk to us

What you get

REST API

Provider, follower, trade and master endpoints behind two API-key headers (X-API-Key, X-Subscriber-Key) plus JWT for dashboard operations. Every query is scoped by provider.

View endpoints

Outbound webhooks

Get notified on follower.created and follower.deactivated, signed with Standard Webhooks (HMAC-SHA256). Any standard library verifies them.

Signature spec

Multi-tenant

Every provider has isolated API keys, follower lists and event streams, so you can build a SaaS layer without leaking data between your customers.

Auth model

Who this is for

SaaS builders

You are building a signal marketplace, prop-firm dashboard or social trading app, and copying is one feature. CopyBridge provides the MT4 and MT5 EAs, the risk caps and the broker-agnostic execution. You build the rest.

Platforms with their own dashboard

You already have a member portal and want to add copying without rebuilding broker integrations. Use the API and webhooks behind your own UI.

Script sellers

You sell a copy-trading script and want a real execution layer in place of fragile broker polling.

Verify a webhook

Any Standard Webhooks library works. This is the manual form for Node.

Outbound webhook reference
import { createHmac } from 'node:crypto';

function verifyCopyBridge(rawBody, headers, secret) {
  const id  = headers['webhook-id'];
  const ts  = headers['webhook-timestamp'];
  const sig = (headers['webhook-signature'] || '').replace(/^v1,/, '');
  const key = Buffer.from(secret.slice(6), 'base64'); // strip 'whsec_'
  const expected = createHmac('sha256', key)
    .update(`${id}.${ts}.${rawBody}`)
    .digest('base64');
  return sig === expected;
}

How it fits into your stack

  1. Provision a provider

    Register once. Your customers’ accounts become providers you create programmatically, each with an API key and dashboard JWT.

  2. Wire your webhook

    Configure your endpoint in the dashboard or with PUT /me/outbound-webhook, and verify the signing secret returned once.

  3. Receive events

    Every follower lifecycle event lands on your URL, with a full audit trail in the webhook_deliveries log.

Tutorial: build in 1 hourAPI ExplorerStatus

Ready to integrate?

The API reference and webhook spec are in the docs. For volume or partnership terms, email [email protected].

Open the docs