Build copy-trading into
your product.
REST API + signed outbound webhooks + multi-tenant architecture. Skip 6 months of broker integration, EA development, and risk infrastructure. Ship copy-trading as a feature, not a project.
What you get
Three pillars that turn CopyBridge into a real backend you can build on top of.
REST API
Provider, follower, trade, and master endpoints — all behind two API-key headers (X-API-Key, X-Subscriber-Key) plus JWT for dashboard operations. Multi-tenant by design: every query is scoped by provider.
Outbound Webhooks
Get notified on follower.created and follower.deactivated — signed with Standard Webhooks (HMAC-SHA256). Any standard library verifies them out of the box.
Multi-tenant
Every provider has isolated API keys, follower lists, and event streams. Build a SaaS layer on top without leaking data between your customers. Provider-scoped at the database level — not just the application layer.
Auth model →Who this is for
SaaS builders who don't want to build a broker stack
You're building a trading product (signal marketplace, prop-firm dashboard, social trading app) and copy-trading is one feature — not your entire engineering year. CopyBridge ships the MT4/MT5 EAs, the <50ms latency layer, the risk caps, and the broker-agnostic execution. You ship the rest.
White-label platforms with their own dashboard
You already have a customer-facing dashboard or member portal. You want to add copy-trading without rebuilding broker integrations from scratch. Use our API + webhooks behind your UI — your customers never see CopyBridge.
Marketplace scripts looking for a real backend
Selling a copy-trading script on CodeCanyon / your own site? Replace the fragile broker-poll glue with CopyBridge as the execution layer. Customers get production-grade infrastructure; you get a real product to sell.
Verify a webhook in five lines
Standard Webhooks (HMAC-SHA256). Any production webhook library works — here's the manual form for Node:
import { createHmac } from 'node:crypto';
function verifyCopyBridge(rawBody, headers, secret) {
const id = headers['webhook-id'];
const ts = headers['webhook-timestamp'];
const sig = (headers['webhook-signature'] || '').replace(/^v1,/, '');
const key = Buffer.from(secret.slice(6), 'base64'); // strip 'whsec_'
const expected = createHmac('sha256', key)
.update(`${id}.${ts}.${rawBody}`)
.digest('base64');
return sig === expected;
}How it fits into your stack
Provision a provider
Register once — your customers' accounts become "providers" you create programmatically. Each gets an API key + dashboard JWT.
Wire your webhook
Configure your endpoint via dashboard or PUT /me/outbound-webhook. Verify the signing secret returned once.
Receive events
Every follower lifecycle event lands on your URL with full audit trail in CopyBridge's webhook_deliveries log.
Ready to integrate?
The full API reference + outbound webhook spec is in the docs. For volume integration, partnership terms, or a quick technical chat — drop us a line.