TradeBricksDocsOpen the Lab →
Live & data

Connecting providers

To run a strategy against live and account data you connect a provider — a prop firm or a broker. Connecting unlocks the capabilities its data supplies. A direct-API key is verified with the provider and then stored encrypted in a server-side vault so your live-trading worker can act on it — it is never shown back to you or kept in your browser.

How your credentials are handled

When you connect a direct broker API (for example a Topstep / ProjectX API key), the key is sent over HTTPS — with your sign-in and App Check — to a TradeBricks Cloud Function that verifies it with the provider and then stores it encrypted in Google Secret Manager, a server-side vault used only by your own live-trading worker. We never display the key back to you, and it is not kept in your browser (only a non-secret marker, such as your username, is stored locally to show the connection as active). When you connect through SnapTrade instead, the aggregator holds the brokerage link and we never receive a raw broker key at all. Disconnecting deletes the stored credential.

Why connect at all?

Building and backtesting in the Lab needs no connection — the engine replays historical prices, and the built-in alt-data bricks (Congress, SEC) use public data. You connect a provider when you want one of two things:

  • Live data bricks — option greeks, dealer gamma, IV rank, put/call, unusual flow. These need an options-capable provider. See Live & alt-data.
  • A real account view — live equity, positions, and prop-firm rule tracking in The Trader, and the ability for the Watcher to act on your behalf.

The providers

These are the providers you can connect today. Each draws a clean lettered monogram in its brand color on the Connect page; adding more later is a one-line registry change.

Topstep
Prop firm

Funded futures (TopstepX) — connects via the ProjectX Gateway API.

Unlocks
Funded prop account, positions & ordersFutures market data — specific contracts (ProjectX)Level 2 / depth — requires a paid market-data add-on
You enter
ProjectX usernameProjectX API key
SnapTrade
Broker link

Securely link your brokerage in a few clicks — no API keys to manage.

Unlocks
Link your brokerageAccount & positionsOptions & market data
You enter

Which one do you need?

  • Topstep (Prop firm) — a funded futures prop firm, connected through the ProjectX Gateway. It supplies the account and futures capabilities: live equity, positions, prop-firm rule tracking, and futures market data for specific contracts. (Level-2 depth needs a paid market-data add-on.) It does not supply options or fundamentals.
  • SnapTrade — one secure link to 20+ brokerages (Schwab, Robinhood, Fidelity, Webull, and more). It supplies account, options, and fundamentals: brokerage positions, option chains and greeks, dealer gamma, IV, and flow. Connect SnapTrade for the alt-data bricks at full strength — no API keys to manage.
  • No connection — the congress, sec capabilities are built in. Congress disclosures and SEC EDGAR filings are public data, so those bricks work even signed out of any broker.

What each provider unlocks

Bricks never hard-code a broker. Each live brick declares a capability it needs — a plain string like options or account — and TradeBricks matches that against whatever you have connected. Connect a provider that supplies a capability and every brick needing it turns on at once. This is the capability model, and it’s what keeps strategies portable: a graph using option_greeks declares it needs options, not “Schwab”, so anyone with any options-capable provider can run it unchanged.

CapabilitySupplied by
optionsSnapTrade
fundamentalsSnapTrade
accountTopstep or SnapTrade
futuresTopstep
ohlcvTopstep or SnapTrade
congressBuilt-in — no connection
secBuilt-in — no connection
A note on fundamentals

You’ll see a fundamentals capability above — company financial data a SnapTrade-linked brokerage supplies once connected. It’s wired into the provider/capability model and ready to gate bricks, but no brick consumes it yet: the current catalog is built around price, options, and the built-in Congress/SEC feeds. Connecting SnapTrade still unlocks its options and accountcapabilities in full; fundamentals simply has no brick to light up today. See the live brick family on Live & alt-data.

How connecting works

Go to the Connect page, pick a provider, and fill in its credential fields. A direct-API key is verified with the provider and then stored encrypted server-side, and the provider flips to connected — no account-size questionnaire; your real account details sync from the provider, so there’s nothing to type in by hand.

  1. Open Connect and choose a provider.
  2. Enter its fields (e.g. your ProjectX username + API key for Topstep). They’re masked password inputs.
  3. The key is sent over HTTPS to a TradeBricks Cloud Function, verified with the provider, and stored encrypted in Google Secret Manager. Only a non-secret marker (your username) is kept in localStorage to show the connection as active.
  4. Capabilities light up: every brick needing them is now live, and The Trader can show your account.
what's stored, and where
// browser localStorage — non-secret marker only:
localStorage["tb-conn-topstep"] = {
  "userName": "your-username",
  "connectedAt": 1718380800000
}
// the API key itself lives ENCRYPTED in Google Secret Manager,
// readable only by your own live-trading worker. deleted on Disconnect.
Why store it server-side?

Your live-trading worker must be able to act on the broker API even when your browser is closed, so the key can’t live only on your device. Instead of keeping it in plaintext or in the browser, we verify it and store it encrypted in Google Secret Manager, behind least-privilege service-account permissions so only your own worker can read it. The same model covers The Trader and the Watcher.

Disconnecting

Each connected provider has a Disconnect control on the Connect page. Disconnecting deletes the stored credential from Google Secret Manager, clears the local connection marker, and turns off the capabilities it supplied — any brick that needed them goes back to locked. All stored credentials are also deleted when you delete your account.

Connecting is not a green light to trade

A connected account lets the tooling read your numbers and, through the Watcher, act on signals you approve. It is not advice and not a recommendation. Validate a strategy on the holdout first, forward-test small, and never risk money you can’t afford to lose.

Related reading