Skip to content
NyriaDocs

Security and your money

What a broker connection lets Nyria do, why it can't withdraw your money, how to revoke access, and how tokens and API keys are encrypted at rest.

Your money stays at your broker

A broker connection lets Nyria read balances and positions, place orders, and cancel orders it placed. It can't withdraw money or securities, or move them between accounts. If Nyria shut down tomorrow, your cash and positions would still be at your broker.

How brokers connect

You connect a broker either through its own sign-in page (OAuth) or with an API key you create in the broker's dashboard. Nyria never sees your broker password.

How to revoke access

You can revoke from either side, and it takes effect immediately:

  1. In Nyria, open Integrations, select the broker's card, select Remove account on each account, then Remove.
  2. In your broker's app or API-key settings, revoke Nyria's authorization or delete the key.

The two behave differently. Removing an account in Nyria deletes every bot on it. If you connect the same account again within 30 days, Nyria restores those bots. Revoking at the broker keeps the bots, but the connection shows Disconnected and the bots place no orders, exits included. Neither one closes your open positions, so close them first.

What is encrypted

All traffic between you, Nyria and your broker uses TLS.

Broker access and refresh tokens, and broker API keys and secrets, are encrypted at rest with AES-256-GCM. Nyria encrypts each one before it is written to the database, and the encryption key is stored outside the database. Whop and Stripe API keys and webhook secrets are encrypted at rest the same way. The database itself is hosted on PlanetScale, which encrypts it at rest.

What is still your risk

A strategy can lose money, and a failed order can leave a position open. Read the known limitations and the risk disclosure before you trade live.

Next steps

Your edge, on autopilot.

Trading carries risk. Read the risk disclosure.

© 2026 Nyria LLC. All rights reserved.