Connecting providers
To run a strategy against live and account data you connect a provider — a prop firm or a broker. Connecting unlocks the capabilities its data supplies. A direct-API key is verified with the provider and then stored encrypted in a server-side vault so your live-trading worker can act on it — it is never shown back to you or kept in your browser.
When you connect a direct broker API (for example a Topstep / ProjectX API key), the key is sent over HTTPS — with your sign-in and App Check — to a TradeBricks Cloud Function that verifies it with the provider and then stores it encrypted in Google Secret Manager, a server-side vault used only by your own live-trading worker. We never display the key back to you, and it is not kept in your browser (only a non-secret marker, such as your username, is stored locally to show the connection as active). When you connect through SnapTrade instead, the aggregator holds the brokerage link and we never receive a raw broker key at all. Disconnecting deletes the stored credential.
Why connect at all?
Building and backtesting in the Lab needs no connection — the engine replays historical prices, and the built-in alt-data bricks (Congress, SEC) use public data. You connect a provider when you want one of two things:
- Live data bricks — option greeks, dealer gamma, IV rank, put/call, unusual flow. These need an options-capable provider. See Live & alt-data.
- A real account view — live equity, positions, and prop-firm rule tracking in The Trader, and the ability for the Watcher to act on your behalf.
The providers
These are the providers you can connect today. Each draws a clean lettered monogram in its brand color on the Connect page; adding more later is a one-line registry change.
Funded futures (TopstepX) — connects via the ProjectX Gateway API.
ProjectX usernameProjectX API keySecurely link your brokerage in a few clicks — no API keys to manage.
Which one do you need?
- Topstep (Prop firm) — a funded futures prop firm, connected through the ProjectX Gateway. It supplies the
accountandfuturescapabilities: live equity, positions, prop-firm rule tracking, and futures market data for specific contracts. (Level-2 depth needs a paid market-data add-on.) It does not supply options or fundamentals. - SnapTrade — one secure link to 20+ brokerages (Schwab, Robinhood, Fidelity, Webull, and more). It supplies
account,options, andfundamentals: brokerage positions, option chains and greeks, dealer gamma, IV, and flow. Connect SnapTrade for the alt-data bricks at full strength — no API keys to manage. - No connection — the
congress,seccapabilities are built in. Congress disclosures and SEC EDGAR filings are public data, so those bricks work even signed out of any broker.
What each provider unlocks
Bricks never hard-code a broker. Each live brick declares a capability it needs — a plain string like options or account — and TradeBricks matches that against whatever you have connected. Connect a provider that supplies a capability and every brick needing it turns on at once. This is the capability model, and it’s what keeps strategies portable: a graph using option_greeks declares it needs options, not “Schwab”, so anyone with any options-capable provider can run it unchanged.
| Capability | Supplied by |
|---|---|
options | SnapTrade |
fundamentals | SnapTrade |
account | Topstep or SnapTrade |
futures | Topstep |
ohlcv | Topstep or SnapTrade |
congress | Built-in — no connection |
sec | Built-in — no connection |
You’ll see a fundamentals capability above — company financial data a SnapTrade-linked brokerage supplies once connected. It’s wired into the provider/capability model and ready to gate bricks, but no brick consumes it yet: the current catalog is built around price, options, and the built-in Congress/SEC feeds. Connecting SnapTrade still unlocks its options and accountcapabilities in full; fundamentals simply has no brick to light up today. See the live brick family on Live & alt-data.
How connecting works
Go to the Connect page, pick a provider, and fill in its credential fields. A direct-API key is verified with the provider and then stored encrypted server-side, and the provider flips to connected — no account-size questionnaire; your real account details sync from the provider, so there’s nothing to type in by hand.
- Open Connect and choose a provider.
- Enter its fields (e.g. your ProjectX
username+API keyfor Topstep). They’re masked password inputs. - The key is sent over HTTPS to a TradeBricks Cloud Function, verified with the provider, and stored encrypted in Google Secret Manager. Only a non-secret marker (your username) is kept in
localStorageto show the connection as active. - Capabilities light up: every brick needing them is now live, and The Trader can show your account.
// browser localStorage — non-secret marker only:
localStorage["tb-conn-topstep"] = {
"userName": "your-username",
"connectedAt": 1718380800000
}
// the API key itself lives ENCRYPTED in Google Secret Manager,
// readable only by your own live-trading worker. deleted on Disconnect.Your live-trading worker must be able to act on the broker API even when your browser is closed, so the key can’t live only on your device. Instead of keeping it in plaintext or in the browser, we verify it and store it encrypted in Google Secret Manager, behind least-privilege service-account permissions so only your own worker can read it. The same model covers The Trader and the Watcher.
Disconnecting
Each connected provider has a Disconnect control on the Connect page. Disconnecting deletes the stored credential from Google Secret Manager, clears the local connection marker, and turns off the capabilities it supplied — any brick that needed them goes back to locked. All stored credentials are also deleted when you delete your account.
A connected account lets the tooling read your numbers and, through the Watcher, act on signals you approve. It is not advice and not a recommendation. Validate a strategy on the holdout first, forward-test small, and never risk money you can’t afford to lose.
Related reading
- The live bricks a connection unlocks → Live & alt-data
- Your account, against its rules → The Trader
- Acting on live feeds → The Watcher

