Connecting a broker

Setup execution

To route signals to a real account, you must link your own broker. VarianTrade uses MetaTrader 5 (MT5) for all execution paths.

1. Send the /broker command to @VarianTradeBot to open the connection menu.
2. Select the MetaTrader 5 option.
3. The bot will guide you through entering your connection parameters:
   • MT5 Server: The server address provided by your broker (e.g. ICMarketsSC-MT5-4).
   • MT5 Login: Your account number.
   • MT5 Password: The trading password associated with the account.

Security and credential storage

VarianTrade is designed to protect your broker access details:

• Encryption at rest: All credentials, passwords, and keys are encrypted using secure cryptographic functions before being written to the database.
• No plaintext exposure: Plaintext credentials are never displayed back in the chat interface, and they are invisible to system administrators and support staff.
• Never paste in chat: You must never type or paste your credentials or API keys into ordinary chat sessions or public groups. All credentials must be entered only when prompted by the specific setup flow.

Permission scopes

The broker connection operates under restricted scopes to limit potential exposure:

• Read and trade access: The system requires permissions to query account equity, monitor open positions, fetch history, and submit new trade orders.
• No withdrawals: VarianTrade does not request, store, or support withdrawal credentials. It is physically impossible for the platform to transfer or withdraw funds from your broker account.

Unlinking your broker

You can disconnect your broker at any time. To unlink:

1. Send the /broker command and select the active connection.
2. Confirm the removal, or use the /unlink command to clear the Telegram association entirely.
3. Disconnecting your broker immediately terminates all active monitoring, halts automated execution paths, and stops signal notifications for that broker.