eToro: what this connector can do

Member·7 minutes to read

What this page is for

What eToro lets a bot do once it is connected to your eToro account, what it asks you for along the way, its limits, and how to take the connection away again, in Botseon and at eToro.

Look up instruments and live prices, read your portfolio, closed trades, orders and watchlists, and — only after you allow it — change your watchlists and open, close or cancel trades. Every trade waits for your approval, every time.

What you need on the eToro side

Only your eToro account. You do not create anything at eToro and you never paste a key: you sign in at eToro itself and approve what Botseon asks for. Your eToro password never reaches Botseon.

When you add the plugin, the sheet asks one question first:

eToro account — real or demo. eToro gives every person a real account and a demo account with virtual money. The bot reads and trades in the one you name, and only that one. Start with demo if you want to see what the bot does before it touches real money; you can change it on the plugin sheet at any time, without signing in again.

Then press Authenticate. Botseon sends you to eToro's sign-in page; after you approve, eToro sends you back and the account shows as connected. That first sign-in asks eToro for reading only, and no write tool below exists for your bots. When you want the bot to change watchlists or trade, press Allow sending on the connected account: a second eToro sign-in adds the write permissions, on the same account.

What a bot can do with it

Read — eToro tells a bot things, nothing changes

Tool	What it does
`etoro.get_profile`	Read the connected eToro username, account ids and granted scopes.
`etoro.search_instruments`	Search eToro instruments by name or symbol, for their instrument ids.
`etoro.get_rates`	Read the current bid and ask rates of eToro instruments by instrument id.
`etoro.get_portfolio`	Read the eToro portfolio: open positions, pending orders, copied investors and available cash.
`etoro.list_trade_history`	List closed eToro trades since a date, less than a year back.
`etoro.get_order`	Read one eToro order: its status and the positions it opened.
`etoro.list_watchlists`	List the eToro watchlists and their items.

etoro.get_profile returns your username and account numbers, never your name, gender or date of birth, even though eToro would answer with them.

Write — eToro lets a bot change things

Tool	What it does
`etoro.add_to_watchlist`	Add instruments to an eToro watchlist.
`etoro.remove_from_watchlist`	Remove instruments from an eToro watchlist.
`etoro.place_order`	Open an eToro position at market price, by amount in USD or by units.
`etoro.close_position`	Close an eToro position at market price, whole or some of its units.
`etoro.cancel_order`	Cancel an eToro order that has not executed yet.

etoro.place_order opens a long (buy) or short (sellShort) position. Leverage above 1 and every short need a stop-loss rate, and the bot is refused before anything reaches eToro without one. eToro answers an order, a close or a cancel as soon as it has accepted it, not when it has executed; the bot then reads etoro.get_order to see what happened.

The permissions it asks for, in plain words

Every call a bot makes through this connector is tagged with what kind of thing it is. Only the tags below ever apply here — a tag this connector's tools never carry is not listed, because it can never ask you for it.

read — Looks something up. Nothing changes, and nothing is sent anywhere. A bot never has to ask first for this.
write — Changes something inside the connected account — creates, edits or files something. Asks you first, unless you have told Botseon to always allow that exact action.
spend — Spends your money in the real world. Always asks first — there is no always-allow rule that ever covers this.

Opening and closing a position are spend. Watchlist changes and cancelling a pending order are write.

At eToro, the connection asks for these scopes — eToro's own names, shown on its consent screen:

Sign-in	eToro scopes
Authenticate (reading)	`etoro-public:real:read`, `etoro-public:demo:read`
Allow sending (reading and writing)	the two above, plus `etoro-public:real:write`, `etoro-public:demo:write`

Both accounts are in each pair so that switching between real and demo never needs a new sign-in.

Limits

One eToro account per connection: the one the eToro account setting names.
Market orders that open a position, and closes of a whole position or some of its units. No limit orders, no copy trading, no transfers or withdrawals, no social posts.
Closed trades go back less than a year per request (eToro's own rule).
eToro allows about 60 reads and 20 trades or watchlist changes a minute per account. Past that, eToro asks the bot to wait and the bot is told how long.

When something goes wrong

What you see	What it means	What to do
The account shows Expired or Needs auth	eToro no longer accepts the sign-in (you revoked it, or it expired and could not be renewed)	Press Authenticate again
"the eToro plugin needs its account set to real or demo"	The eToro account setting is empty or misspelled	Set it to `real` or `demo` on the plugin sheet
"eToro refused the request for this connection"	The sign-in lacks a permission for that action — usually a read-only connection asked to trade	Press Allow sending, or leave it read-only on purpose
"eToro is rate-limiting this connection"	Too many calls this minute	Nothing; the bot waits and retries
"eToro rejected that request as invalid"	eToro refused the order itself — for example the market is closed or the amount is below eToro's minimum	Ask the bot to read `etoro.get_order` or try different values

Disconnecting

In Botseon

Open Plugins from the sidebar, press this connector's card to open its detail page, and under Accounts press Remove next to the account — or Uninstall to remove the plugin and every account connected to it at once. Either one deletes the stored connection immediately: nothing more is read or traded through it from that moment on. Install a plugin walks through the same screen step by step.

At eToro

Removing the account in Botseon also asks eToro to revoke the sign-in at eToro's revocation endpoint, when this deployment's connector is configured with its revoke URL (the setup page does that). eToro lets you revoke an application's access yourself at any time as well; doing it there takes effect at eToro even if you can no longer reach Botseon. Revoking does not undo an order that has already executed.

What Botseon keeps, and how your data is used

Whatever a bot reads or writes through this connector becomes part of your conversations and the record of that run — the same records, and the same retention schedule, as everything else a bot works on. Botseon is the processor for that content; your organisation decides what it may read and remember, and can delete it sooner than the schedule would on its own.

Your data is sent to a model provider only to produce the bot's answer, and for nothing else — it is not used to train any model. The Privacy Policy's Models and How long we keep it sections have the full detail, including exactly how long each kind of record is kept for.

Nothing a bot does here is investment advice. A trade the bot proposes is a trade you approve.