开发者 API：你的信号，你的 APIDeveloper API: your signals, your API

EA 在你电脑上每一次 AI-1 分析、AI-2 审核、AI-3 持仓判断、实际开平仓，都会同步到 copilotrade.com。这套 API 让你用自己的程序把你自己的这些信号拉走（REST）或实时推到你的服务器（Webhook），再按你自己的规则去币安、OKX、券商或任何平台下单。

Every AI-1 analysis, AI-2 review, AI-3 position check and real open/close your EA makes on your computer is synced to copilotrade.com. This API lets your own program pull your own signals (REST) or receive them in real time on your server (Webhook), then place orders on Binance, OKX, a broker or any platform by your own rules.

概述Overview

快速开始Quick start

1. 登录 用户中心 → 展开「开发者 API」→「生成 API Key」。Key 只显示一次，形如 cpt_live_…，请立即保存。
2. 先测一下：

1. Sign in to the dashboard → expand “Developer API” → “Create API key”. The key (cpt_live_…) is shown only once; save it right away.
2. Test it:

curl -H "Authorization: Bearer cpt_live_XXXXXXXX" https://copilotrade.com/api/v1/me

3. 拉最近的 AI-1 决策：GET /api/v1/signals?type=analysis&limit=20，或者直接配一个 Webhook 地址，让信号一产生就 POST 到你的服务器。
4. 在你的程序里把 decision（buy / sell / hold）、confidence、levels（估算的入场 / 止损 / 止盈价）映射成你平台上的下单参数。

3. Pull recent AI-1 decisions: GET /api/v1/signals?type=analysis&limit=20, or configure a Webhook URL so each signal is POSTed to your server as soon as it is produced.
4. In your program map decision (buy / sell / hold), confidence and levels (estimated entry / SL / TP prices) to order parameters on your platform.

鉴权与限速Authentication & rate limits

Authorization: Bearer cpt_live_XXXXXXXX
# or
X-API-Key: cpt_live_XXXXXXXX

接口一览Endpoints

机器可读的接口定义：/openapi.json（OpenAPI 3.0，可直接导入 Postman / Swagger UI 生成客户端）。

Machine-readable definition: /openapi.json (OpenAPI 3.0, import into Postman / Swagger UI or generate a client).

{
  "ok": true, "server_time": 1761900000000,
  "data": {
    "user_id": 123, "username": "alice",
    "membership": { "expire_date": "2027-03-01", "days_left": 120 },
    "key": { "id": 7, "name": "binance bot", "prefix": "cpt_live_Ab1…", "created_at": 1761800000000 },
    "rate_limit_per_min": 120,
    "accounts": [35850021]
  }
}

{ "ok": true, "data": { "accounts": [
  { "account": 35850021, "server": "ICMarkets-Live", "remark": "", "active": true,
    "ea_online": true, "ea_last_seen": 1761900000000, "ea_version": "1.3.14",
    "symbol": "XAUUSD", "ea_state": "running", "has_position": false, "last_signal_at": 1761899000000 }
] } }

EA 每 2~5 秒上报一次的快照（status_at 是上报时间）。ea_online=false 时内容是最后一次看到的，可能已过时。

The snapshot the EA uploads every 2–5 s (status_at is the upload time). When ea_online=false the content is the last seen and may be stale.

{ "ok": true, "data": {
  "account": 35850021, "ea_online": true, "status_at": 1761900000000, "ea_version": "1.3.14", "ea_state": "running",
  "waiting_config": false, "analysis_in_progress": false,
  "account": { "balance": 10234.5, "equity": 10250.1, "free_margin": 9800.0, "currency": "USD", "server": "ICMarkets-Live", "company": "…" },
  "symbol": { "name": "XAUUSD", "bid": 2650.31, "ask": 2650.52, "spread_points": 21, "point": 0.01, "digits": 2, "atr_points": 412, "atr_timeframe": "M15" },
  "ai1": { "model": "gpt-5", "status": "…", "decision": "buy", "confidence": 78, "enabled": true,
           "market_state": "trending", "sl_points": 300, "tp_points": 600, "reason": "…", "next_analysis_in_sec": 540 },
  "ai2": { "model": "…", "status": "…", "decision": "approve", "confidence": null, "enabled": true },
  "ai3": { "model": "…", "status": "…", "decision": "hold", "confidence": 70, "enabled": true },
  "position": { "ticket": 123456, "direction": "buy", "open_price": 2650.5, "lots": 0.1, "sl": 2647.5, "tp": 2656.5, "profit": 12.3, "open_time": "…", "break_even": false },
  "today": { "trades": 2, "wins": 1, "losses": 1, "profit": 15.2 },
  "filters": { "trading_paused": false, "session_blocked": false, "session_status": "…" },
  "license": { "authorized": true, "blocked": false, "days_left": 120 },
  "ai_error": null
} }

GET /api/v1/signals?account=35850021&type=analysis&since_id=9000&limit=100

{ "ok": true, "server_time": 1761900000000, "data": {
  "signals": [ { "id": 9001, "type": "analysis", "account": 35850021, "symbol": "XAUUSD", "parent_id": null,
                 "ea_time": "2026-11-01T10:20:50+08:00", "created_at": 1761899250000, "time": "2026-11-01T02:20:50.000Z",
                 "data": { "decision": "buy", "confidence": 78, "market_state": "trending",
                           "sl_points": 300, "tp_points": 600,
                           "levels": { "entry": 2650.52, "sl": 2647.52, "tp": 2656.52 },
                           "reason": "…", "duration_sec": 21.4,
                           "quote": { "bid": 2650.31, "ask": 2650.52, "spread_points": 21, "point": 0.01, "digits": 2 },
                           "atr_points": 412, "atr_timeframe": "M15", "model": "gpt-5" } } ],
  "count": 1, "next_since_id": 9001, "has_more": false
} }

每个账号该类型的最新一条（默认 type=analysis）。适合「我现在该做什么」这种查询；要不漏信号请用上面的游标。

The latest signal of that type per account (default type=analysis). Good for “what should I do right now”; to never miss a signal use the cursor above.

EA 在 MT5 里的实际成交，一笔一行（开仓事件、平仓事件、成交历史核对结果合并而成）。open=1 只看未平的。

Real trades the EA made in MT5, one row per position (open event, close event and history reconciliation merged). open=1 shows open positions only.

{ "ok": true, "data": { "trades": [
  { "account": 35850021, "ticket": 123456, "symbol": "XAUUSD", "direction": "buy", "lots": 0.1,
    "open_price": 2650.5, "sl": 2647.5, "tp": 2656.5, "quote_price": 2650.52, "slippage_points": -2, "actual_rr": 2.0,
    "ai1_confidence": 78, "ai2_verdict": "approve", "magic": 20250101,
    "open_at": 1761899300000, "open_time": "…", "close_at": 1761902000000, "close_time": "…",
    "close_price": 2656.5, "profit": 58.7, "close_reason": "tp", "is_open": false }
], "count": 1 } }

信号类型与字段Signal types & fields

analysis — AI-1 决策— AI-1 decision

review — AI-2 审核— AI-2 review

monitor — AI-3 持仓判断— AI-3 position check

trade_open / trade_close / trade_result

轮询（游标）Polling with a cursor

# Python 3 — poll new AI-1 decisions and hand them to your own order logic
import requests, time

KEY  = "cpt_live_XXXXXXXX"
BASE = "https://copilotrade.com/api/v1"
H    = {"Authorization": f"Bearer {KEY}"}

r = requests.get(f"{BASE}/signals", headers=H, params={"limit": 1}, timeout=10).json()
cursor = r["data"]["next_since_id"]            # start from "now"

while True:
    r = requests.get(f"{BASE}/signals", headers=H,
                     params={"since_id": cursor, "limit": 100}, timeout=10)
    if r.status_code == 429:
        time.sleep(int(r.headers.get("Retry-After", "5"))); continue
    body = r.json()
    if not body.get("ok"):
        print("error:", body["error"]); time.sleep(30); continue
    for s in body["data"]["signals"]:
        d = s["data"]
        if s["type"] == "analysis" and d["decision"] in ("buy", "sell") and d["confidence"] >= 70:
            print(s["id"], s["account"], s["symbol"], d["decision"], d["confidence"], d["levels"])
            # → your_exchange.place_order(symbol_map[s["symbol"]], d["decision"], qty, sl=d["levels"]["sl"], tp=d["levels"]["tp"])
        if s["type"] == "review" and d["verdict"] == "reject":
            print("AI-2 rejected analysis", s["parent_id"])
    cursor = body["data"]["next_since_id"]
    time.sleep(5 if body["data"]["has_more"] is False else 0)

Webhook

推送内容Payload

POST {your_url}
Content-Type: application/json
User-Agent: CopiloTrade-Webhook/1.0
X-CopiloTrade-Event: analysis
X-CopiloTrade-Delivery: 55021           # unique per delivery; retries reuse the same id
X-CopiloTrade-Timestamp: 1761899251     # unix seconds, used in the signature
X-CopiloTrade-Signature: t=1761899251,v1=5f3c…e9

{
  "delivery_id": 55021,
  "type": "analysis",                   # same as signal.type; "ping" for the test button
  "key_id": 7,
  "sent_at": "2026-11-01T02:20:51.000Z",
  "signal": { …exactly one item of /signals… },
  "test": true                          # only present on ping
}

签名验证Signature verification

// Node.js (Express) — receive, verify, act
const express = require('express'), crypto = require('crypto');
const SECRET = process.env.CPT_WEBHOOK_SECRET;        // whsec_...
const app = express();
app.post('/copilotrade-hook', express.raw({ type: 'application/json' }), (req, res) => {
  const sig = String(req.get('X-CopiloTrade-Signature') || '');
  const t = (sig.match(/t=(\d+)/) || [])[1], v1 = (sig.match(/v1=([a-f0-9]+)/) || [])[1];
  if (!t || !v1 || Math.abs(Date.now() / 1000 - Number(t)) > 300) return res.status(400).end('bad timestamp');
  const expected = crypto.createHmac('sha256', SECRET).update(`${t}.${req.body}`).digest('hex');
  if (!crypto.timingSafeEqual(Buffer.from(expected), Buffer.from(v1))) return res.status(401).end('bad signature');
  const evt = JSON.parse(req.body);
  res.status(200).end();                               // ack fast (within 8 s), do the work after
  if (evt.type === 'ping') return;
  if (seen.has(evt.signal.id)) return; seen.add(evt.signal.id);   // idempotency: retries carry the same signal.id
  if (evt.type === 'analysis' && evt.signal.data.decision !== 'hold') {
    // placeBinanceOrder(evt.signal.symbol, evt.signal.data.decision, evt.signal.data.levels) — your code
  }
});
const seen = new Set();
app.listen(8080);

# Python (Flask) — same thing
import hmac, hashlib, time, json
from flask import Flask, request, abort
app = Flask(__name__); SECRET = b"whsec_..."

@app.post("/copilotrade-hook")
def hook():
    sig = dict(p.split("=", 1) for p in request.headers.get("X-CopiloTrade-Signature", "").split(","))
    t = sig.get("t"); v1 = sig.get("v1", "")
    if not t or abs(time.time() - int(t)) > 300: abort(400)
    expected = hmac.new(SECRET, f"{t}.".encode() + request.get_data(), hashlib.sha256).hexdigest()
    if not hmac.compare_digest(expected, v1): abort(401)
    evt = request.get_json(force=True)
    if evt["type"] == "analysis" and evt["signal"]["data"]["decision"] in ("buy", "sell"):
        pass  # → your exchange call
    return "", 200

重试与停用规则Retries & auto-disable

• 你的接口需在 8 秒内返回 2xx 才算成功；3xx 不跟随，视为失败。建议先返回 200 再异步处理。
• 失败最多重试 4 次（共 5 次尝试），间隔 30 秒 → 2 分钟 → 10 分钟 → 30 分钟。重试带同一个 delivery_id 与同一条 signal，请按 signal.id 去重。
• 连续失败 100 次（约 1 天无人处理）自动停用推送，用户中心会显示原因，修好后重新开启即可。单个 Key 积压超过 200 条待推送时不再新增。
• 会员到期期间不推送（失败记录标注 membership expired），续费后新信号恢复推送；到期前积压的不补发。
• 推送记录保留 7 天 / 每个 Key 最近 500 条；信号本身保留 90 天。

• Your endpoint must answer 2xx within 8 seconds; redirects are not followed and count as failure. Return 200 first, process asynchronously.
• Up to 4 retries (5 attempts in total) at 30 s → 2 min → 10 min → 30 min. Retries carry the same delivery_id and the same signal; de-duplicate by signal.id.
• After 100 consecutive failures (about a day unattended) the webhook is auto-disabled; the dashboard shows why and you can re-enable it once fixed. No new deliveries are queued while a key has more than 200 pending.
• Nothing is pushed while your membership is expired (deliveries are marked “membership expired”); new signals resume after renewal, the backlog is not replayed.
• Delivery records are kept for 7 days / last 500 per key; signals themselves for 90 days.

完整示例：接到币安Full example: wiring to Binance

# pip install flask ccxt
import hmac, hashlib, time, ccxt
from flask import Flask, request, abort

SECRET  = b"whsec_..."
SYMBOLS = {"XAUUSD": "PAXG/USDT"}                      # your mapping
ex = ccxt.binance({"apiKey": "...", "secret": "...", "enableRateLimit": True})   # YOUR exchange keys, on YOUR server
app = Flask(__name__); handled = set()

def verify(req):
    sig = dict(p.split("=", 1) for p in req.headers.get("X-CopiloTrade-Signature", "").split(","))
    if abs(time.time() - int(sig.get("t", "0"))) > 300: abort(400)
    exp = hmac.new(SECRET, f"{sig['t']}.".encode() + req.get_data(), hashlib.sha256).hexdigest()
    if not hmac.compare_digest(exp, sig.get("v1", "")): abort(401)

@app.post("/copilotrade-hook")
def hook():
    verify(request)
    evt = request.get_json(force=True)
    if evt["type"] != "analysis": return "", 200
    s = evt["signal"]; d = s["data"]
    if s["id"] in handled or d["decision"] not in ("buy", "sell") or d["confidence"] < 70: return "", 200
    handled.add(s["id"])
    pair = SYMBOLS.get(s["symbol"])
    if not pair: return "", 200
    usdt = 50                                           # your sizing rule
    price = ex.fetch_ticker(pair)["last"]
    amount = ex.amount_to_precision(pair, usdt / price)
    ex.create_order(pair, "market", d["decision"], amount)
    return "", 200

app.run(port=8080)

错误码Error codes

注意事项Notes

• 延迟：EA 每 2~5 秒同步一次，信号到服务器通常比 EA 本地晚 1~5 秒；AI 调用本身可能要 10~60 秒，这是策略固有的。
• 点数与价格：MT5 的 SL/TP 是点数，levels 是按当时报价的换算估算。到别的平台请按该平台的价格精度与合约规则自行换算。
• hold 也会推：analysis 每轮都有，包括 hold。想只要可交易信号就过滤 decision in (buy, sell)；想更稳就等 review.verdict == approve 或直接用 trade_open（EA 真下单了）。
• 一个账号同时只有一个持仓：EA 本身是单仓位策略，有持仓时不会产生新的 analysis，而是 monitor。
• Key 安全：Key 等同于你账号的只读权限（能看到你的余额、持仓、成交）。不要放进前端网页或公开仓库，泄露请立即撤销。
• 解绑 MT5：该账号的信号与成交记录随通道一并删除。

• Latency: the EA syncs every 2–5 s, so a signal reaches the server 1–5 s after the EA; the AI call itself may take 10–60 s, which is inherent to the strategy.
• Points vs prices: MT5 SL/TP are in points; levels is an estimate from the quote at that moment. Convert to the other platform's precision and contract rules yourself.
• hold is pushed too: analysis arrives every round including hold. Filter decision in (buy, sell) for tradable signals; for extra safety wait for review.verdict == approve or act on trade_open (the EA really traded).
• One position per account: the EA is a single-position strategy; while in position it produces monitor instead of new analysis.
• Key safety: a key equals read-only access to your account (balance, positions, trades). Keep it out of front-end pages and public repos; revoke immediately if leaked.
• Unbinding an MT5 account deletes its signals and trade records along with the channel.

更新记录Changelog

• 2026-11-02 — EA 网络超时后重发的同一批日志不再产生重复信号 / 重复推送；Webhook 推送按 Key 并行，一个用户的端点慢不影响别人；429 也用统一错误格式（rate_limited）；since_id 非法返回 400。Log lines the EA re-sends after a network timeout no longer create duplicate signals / pushes; webhook deliveries run per key in parallel so one slow endpoint does not delay others; 429 now uses the common error format (rate_limited); invalid since_id returns 400.
• v1.0 · 2026-11-01 — 首次发布：API Key、/me /accounts /status /signals /trades、Webhook（HMAC 签名、重试）、OpenAPI 文件。Initial release: API keys, /me /accounts /status /signals /trades, Webhooks (HMAC signature, retries), OpenAPI file.