May 7, 2026
Tradovate Trade Copier Guide: OAuth, Accounts, and Risk
What to know before copying trades across Tradovate accounts, including OAuth, account selection, token refresh, and risk lockouts.
Published by Copiera Oy. Written as product and technical education, not trading or investment advice.
Key takeaways
- +OAuth lets the user authorize COPIERA without entering a Tradovate password into COPIERA.
- +The copier should import the eligible accounts returned by the authorized login instead of guessing an account ID.
- +Long-running sessions require refresh-token handling and a clear reconnect state when authorization can no longer be renewed.
OAuth is the clean path
Tradovate supports OAuth-style account authorization, which is better for users than typing broker passwords into a form. The user logs in through Tradovate, authorizes the app, and the copier stores encrypted tokens for routing.
Account selection matters
Many users have more than one account under the same login. A copier should store the correct broker account ID or account spec so a leader or follower points at the intended account, not just the first account returned by an API.
Token refresh is not optional
A short-lived access token is fine for login, but long-running copy sessions need refresh-token handling. Otherwise users would have to reconnect when a token expires, which is not acceptable for live trade copying.
Risk should be account-aware
A Tradovate copy group can contain accounts with different balances or evaluation rules. Use per-account max position and realized-P&L limits so one account's rules do not get ignored by a shared group setup.