Build your trading appWe run the connections

const r = await fetch(`${API}/accounts/acc_7d2f`  + `/history/deals?from=2026-09-01&cursor=${cursor}`,  { headers: { Authorization: `Bearer ${key}` } });

{  "items": [    {      "ticket": "8842107",      "symbol": "XAUUSD",      "type": "buy",      "price": "4571.30",      "profit": "84.10"    }  ],  "nextCursor": "eyJ0aWNrZXQiOjg4NDIxMDd9"}

Read observed deals by cursor
Available history depends on what the connected terminal reports

await fetch(`${API}/accounts/acc_7d2f/trades`, {  method: "POST",  headers: { ...auth, "Idempotency-Key": "ord_7f3a91c2" },  body: JSON.stringify({ action: "market", symbol: "XAUUSD",    side: "buy", volume: "1.50", stopLoss: "4560.00" }) });

{  "id": "cmd_lx3k9a2fq8b1",  "accountId": "acc_7d2f",  "state": "queued",  "result": null}

202 means accepted, not filled
Read the command outcome or subscribe to updates for the broker result
Reuse the same idempotency key when retrying a request

const r = await fetch(`${API}/accounts/acc_7d2f`  + `/symbols/XAUUSD/price`,  { headers: { Authorization: `Bearer ${key}` } });// the contract specification sits next to it

{  "symbol": "XAUUSD",  "bid": "4584.02",  "ask": "4584.24",  "time": "2026-09-17T14:02:11.418Z",  "ageSeconds": 0.4, "stale": false}

A quote read from the account's own terminal, with its age and whether it is stale, and the contract specification beside it
Candle, tick-history and depth reads are not available on this connection

await post(`${API}/copies`, {  masterAccountId: "acc_7d2f",  followerAccountId: "acc_c19e",  sizing: { mode: "proportional", ratio: "0.48" },  copyStopLoss: true });

{  "id": "cp_91ab",  "masterAccountId": "acc_7d2f",  "followerAccountId": "acc_c19e",  "sizing": { "mode": "proportional", "ratio": "0.48" },  "status": "mirroring",  "active": true}

Status names the exact precondition a link is missing, never a bare "active"
Positions come from full snapshots, never diffs

const r = await fetch(`${API}/audit/events`  + `?type=order.refused&limit=1`,  { headers: { Authorization: `Bearer ${key}` } });

{  "items": [    {      "type": "order.refused",      "requestId": "b08301bf",      "summary": "9.00 lots is above the limit of 2.00 lots per order",      "evidence": { "requestedLots": "9.00", "maxLots": "2.00" }    }  ]}

Every event carries the snapshot and arithmetic behind it
Review the recorded details before contacting support

const acc = await post(`${API}/accounts`, {  platform: "mt5", name: "Atlas 50k", login: "40188",  server: "AtlasFunded-Server3", password: env.MT5_PW });await post(`${API}/accounts/${acc.id}/deploy`); // bills

{  "id": "acc_9b31",  "platform": "mt5",  "name": "Atlas 50k",  "broker": "Atlas Funded",  "server": "AtlasFunded-Server3",  "state": "DEPLOYED",  "connection": "CONNECTED",  "consent": "none"}

MetaTrader 4 and 5 account plans include hosting; uncovered deployed hours are metered
cTrader and TradeLocker have separate signed-in connection flows; GET /platforms names them in selfOnboard.via
Secrets go into a vault and are never returned

await post(`${API}/accounts/acc_7d2f/consent`, {  traderName: "Dev Trader",  traderEmail: "dev@mirroapi.test",  statement: "I authorise trading on account 51234567." });

{  "accountId": "acc_7d2f",  "traderName": "Dev Trader",  "traderEmail": "dev@mirroapi.test",  "statement": "I authorise trading on account 51234567.",  "recordedAt": "2026-08-28T14:02:11Z"}

Trade scope on a live account is refused until this record exists
It is also the audit artefact prop firms ask for

const r = await fetch(`${API}/platforms`,  { headers: { Authorization: `Bearer ${key}` } });

[  { "id": "mt5", "authorisation": "terminal" },  { "id": "mt4", "authorisation": "terminal" },  { "id": "ctrader", "authorisation": "oauth" },  { "id": "tradelocker", "authorisation": "credentials" }]

Cloud MetaTrader 4 and 5 terminals with a reachable broker server and valid account credentials
cTrader and TradeLocker need no hosted terminal
Their signed-in connection flows verify access; live accounts need broker access checks and the account holder’s approval
No standby terminal is in service: every account runs on standard reliability

const ws = new WebSocket(`${WS}/stream`);ws.send(JSON.stringify({ op: "auth", token: key }));ws.send(JSON.stringify({ op: "subscribe", accountId: "acc_7d2f",  channels: ["positions", "orders", "commands"] }));

{  "op": "snapshot", "seq": 1041,  "accountId": "acc_7d2f", "ch": "positions",  "terminalFresh": true,  "data": [{ "ticket": "8842131", "symbol": "XAUUSD", "volume": "1.50" }]}

One plain WebSocket from any language: the account, its positions, orders and commands as full snapshots with sequence numbers and a five-minute resume buffer
Replay is bounded and process-local, with explicit resets
Signed, retried webhooks for server-to-server delivery

await put(`${API}/accounts/acc_7d2f/risk`, {  maxLotsPerOrder: "2.00", maxDailyLossPercent: "4",  maxOpenLots: "6.00", tradingHours: "Mon-Fri 07:00-21:00 Europe/London" });// a 9.00-lot order on this account now returns:

{  "error": {    "code": "RISK_MAX_LOTS",    "message": "9.00 lots is above the limit of 2.00 lots per order",    "details": {      "arithmetic": { "requestedLots": "9.00", "maxLots": "2.00" }    }  }}

Refuse-to-send is the only mode: a command that would breach is refused with the numbers, never sent and flattened afterwards
A rule the gateway cannot enforce is refused, not stored