What is an API Token?
An API token is a secure key that authenticates your MT4/MT5 Expert Advisor with InnovaTrading. Think of it as a password specifically for your trading terminal. Key features:- Each token is unique and can only be used by one MT4/MT5 account
- Tokens auto-lock to the first account that uses them
- You can have multiple tokens for multiple accounts
- Tokens can be revoked at any time
Generate a New Token
Go to Connections
Navigate to innova-trading.com/dashboard/connect
Name Your Token (Optional)
Enter a descriptive name like:
- “ICMarkets Demo”
- “Pepperstone Live”
- “VPS Account”
Token States
Your tokens can be in different states:| State | Description | Icon |
|---|---|---|
| Pending | Token created but not yet used by any EA | 🔑 Yellow |
| Connected | Token is linked to an account and EA is online | ▶️ Green |
| Offline | Token is linked but EA is currently not running | ▶️ Gray |
| Revoked | Token has been deleted and can no longer be used | 🗑️ Red |
Token Locking
When you first use a token in your EA, it automatically locks to that specific MT4/MT5 account: Why locking?- Prevents token theft - if someone steals your token, they can’t use it on a different account
- Ensures data integrity - each account’s data stays separate
- Security - compromised tokens have limited blast radius
If you need to use a token with a different account, you must disconnect the current account first, or generate a new token.
Disconnect an Account
If you want to reuse a token with a different account:Go to Connections
Navigate to innova-trading.com/dashboard/connect
Choose History Option
- Keep history: Your trade history remains in the Audit section
- Delete all: Permanently removes all data (cannot be undone!)
Revoke a Token
If you suspect a token has been compromised, or you simply don’t need it anymore:Go to Connections
Navigate to innova-trading.com/dashboard/connect
Best Practices
Use descriptive names
Use descriptive names
Name your tokens clearly so you know which account they belong to:
- ✅ “ICMarkets Live #12345”
- ✅ “Demo Account - Testing”
- ❌ “Token 1”
- ❌ “asdfgh”
One token per account
One token per account
Don’t try to use the same token on multiple terminals for the same account. Generate separate tokens if needed.
Revoke unused tokens
Revoke unused tokens
If you’re no longer using an account, revoke its token to keep your dashboard clean and secure.
Store tokens securely
Store tokens securely
Treat tokens like passwords:
- Don’t share them
- Don’t post them in forums or screenshots
- Don’t commit them to git repositories
Token Expiration
Tokens expire 1 year after creation. Before expiration:- You’ll see a warning in your dashboard
- Generate a new token
- Update your EA with the new token
- The old token stops working at expiration
FAQ
I lost my token, what do I do?
I lost my token, what do I do?
Generate a new token. There’s no way to recover a lost token (by design, for security).
Can I see my existing tokens?
Can I see my existing tokens?
No. For security, tokens are only shown once at creation. You can see which tokens exist and what accounts they’re linked to, but not the token values themselves.
How many tokens can I have?
How many tokens can I have?
There’s no hard limit. Create as many as you need for your accounts.
What happens if my token is compromised?
What happens if my token is compromised?
Immediately revoke it from your dashboard. The attacker won’t be able to use it after revocation. Then generate a new token for your EA.