May 7, 2026

Tradovate Trade Copier Guide: OAuth, Accounts, and Risk

What to know before copying trades across Tradovate accounts, including OAuth, account selection, token refresh, and risk lockouts.

OAuth is the clean path

Tradovate supports OAuth-style account authorization, which is better for users than typing broker passwords into a form. The user logs in through Tradovate, authorizes the app, and the copier stores encrypted tokens for routing.

Account selection matters

Many users have more than one account under the same login. A copier should store the correct broker account ID or account spec so a leader or follower points at the intended account, not just the first account returned by an API.

Token refresh is not optional

A short-lived access token is fine for login, but long-running copy sessions need refresh-token handling. Otherwise users would have to reconnect when a token expires, which is not acceptable for live trade copying.

Risk should be account-aware

A Tradovate copy group can contain accounts with different balances or evaluation rules. Use per-account max position and realized-P&L limits so one account's rules do not get ignored by a shared group setup.