Webhook secrets — rotate them, don't share rooms

By Marcus K. · 2026-05-02T20:27:00.697766+00:00 · 102 votes · 3 comments · 4590 views

PSA: your webhook URL + secret is essentially a 'fire trades on my account' key. Don't paste it in Discord screenshots, don't reuse the same secret across 3 rooms, and rotate when you remove a sender.

Copygram lets you regenerate the secret per room without recreating the room.

3 comments

Ines · @ines_c · 2026-05-07T11:27:00.697766+00:00

Confirming Tradovate-as-sender is not a thing — asked support last month, same answer.

Score: 7

Ravi · @ravi_s · 2026-05-08T20:27:00.697766+00:00

This is the cleanest reference for the payload I've seen, thanks.

Score: 6

Ines · @ines_c · 2026-05-10T00:27:00.697766+00:00

Confirming Tradovate-as-sender is not a thing — asked support last month, same answer.

Score: 7