How it works

1. Add your trading accounts. Account number, broker server name and password, once. One of them is the sender you already trade; the others are receivers.
2. The engine sets up a terminal. A private MetaTrader folder — 4 or 5, whichever that account needs — is created for that account on an engine machine, signed in, with Algo Trading enabled. You watch the state change on the Accounts page.
3. Create a pipeline. Pick sender and receiver, choose how lots are sized and which symbols are allowed. It is created switched off.
4. Turn it on when you are ready. From then on, every position your sender opens, changes or closes is mirrored to the receiver within the age window you set.

Where your password lives

The website and the engine are separate machines with a deliberate one-way trust between them. When you type a broker password, the website encrypts it immediately to the engine's public key and writes only the sealed result. The matching private key exists on the engine machine and is never uploaded here.

That is not a policy that could be relaxed later by editing a permission check: there is no function anywhere in this website that decrypts a broker password. Support cannot read it, an administrator cannot read it, and a full copy of this database does not contain it in a usable form.

Which way the connection goes

The engine machines accept no incoming connections. They reach out to the website, ask whether there is anything to do, and push back what they saw. Every one of those requests is signed with that machine's own key, timestamped, and carries a nonce that is accepted exactly once — so a captured request cannot be replayed, and one compromised engine cannot speak for another.

Things it will refuse to do

• Copy a trade older than the age window, so a reconnect never replays yesterday.
• Start a pipeline whose sender or receiver is not connected and ready.
• Use an investor password on a receiver — it cannot place orders, so it is rejected at the point you try to build the pipeline rather than silently failing later.
• Accept broker credentials on an account without two-factor authentication.
• Run anything at all while your kill switch is on.

What you should still do yourself

Use a receiver you can afford to be wrong on, start on demo, keep the daily loss limit at a number you would accept losing, and check the trade log after the first session. The engine is accurate about doing what you told it; it has no opinion about whether that was a good idea.