How connections work
What a connection is, how each platform signs in, and how your credentials stay safe.
A connection links a broker platform to Lune so it can read your accounts and place orders. This page covers what a connection is, how the different platforms sign in, and how Lune keeps your credentials safe.
Pick your platform#
One-click authorize. No API key to paste.
Uses the Tradovate connection.
Username, password, and system name.
Username and a prop firm API key.
Paper trading with no broker. Set any starting balance.
What a connection holds#
One connection can hold several trading accounts. For example, a single Tradovate login might expose a live account and a few funded accounts, and they all come in under one connection. You choose which accounts to activate after you connect.
Lune Paper is always available and needs no external broker or credentials. You set any starting balance, and orders fill at live market prices with no real money. You can edit or reset the balance anytime.
Your plan sets how many connections and accounts you can use. See the pricing page for current limits.
Connection health#
Every active connection shows a live status so you always know if Lune can reach your broker:
GreenConnectedOptionalLune has a healthy session and is receiving updates.
SpinningReconnectingOptionalThe session dropped and Lune is restoring it. This is normal after a broker restart.
RedDisconnectedOptionalLune cannot reach the broker. Automations and copying pause for that account until it recovers.
If a connection keeps dropping, see Broker keeps disconnecting.
How your credentials are protected#
Lune encrypts every credential with AES-256-GCM, using a fresh random value for each encryption. Credentials are only decrypted at the moment an order runs, inside the execution service that holds your broker sessions. Lune never shows your credentials back to you or to your browser.
When you reconnect, Lune rebuilds your positions from your broker's live state before it resumes any automation or copying. Your accounts are reconciled against broker truth, not stale data.