Operator sign-in
Changes — watchlists, journal trades, presets, refreshes, TradingBot intents — go through this site's write proxy, which only forwards the backend token for a signed-in operator. Reading the dashboard needs no sign-in.
Status: checking…
The passcode is the server's OPERATOR_PASSCODE when set, otherwise its API_TOKEN. The session is an HttpOnly cookie signed with the API token — rotating the token signs every browser out.