When a service offers to run MetaTrader 5 for you, the first sensible question is "what does it need from me?" The honest answer is that "access" is not one thing. It is four separate things: the credentials the terminal signs in with, the operational control over the terminal process, custody of your money, and the way access ends when you want it to. Conflating them leads to both over-worry (imagining the provider can move your funds) and under-worry (assuming that cancelling a subscription erases a stored login).
This article separates the four, states what any hosted MT5 service technically requires for each, quotes what PineConnector publishes about PineConnector Edge, its managed MT5 hosting, and marks plainly where the public documentation does not answer a question. Those unanswered items are questions to put to support before you rely on any provider, PineConnector included. For the broader "how does hosted MT5 work" picture, start with TradingView to MT5 without leaving a computer on; this piece goes deeper on the access model only.
Who this is for, and who should read something else
This is for traders weighing any hosted MT5 terminal, from PineConnector Edge to a broker-bundled VPS to a friend's spare server, who want to understand exactly what they are handing over. If you run MT5 on your own computer or your own VPS, you hold all four kinds of access yourself and the questions below are mostly about your own setup. If your account is with a prop firm, read the section on third-party access rules before anything else, because the answer may be decided by your firm's terms rather than by any provider's security.
1. Credentials: what the terminal signs in with
Every MT5 terminal, hosted or not, signs in to a broker server with three things: an account login, a password and the server name. The Edge Guide lists exactly these as the setup inputs, an "MT5 account login, password, and broker server name".[1] There is no hosted arrangement that avoids this; a terminal that cannot sign in cannot place orders. So the question is never "does the provider need my login", it is "how is that login protected, and who can see it".
Two credentials exist on most MT5 accounts, and the difference matters. MetaQuotes' help describes them functionally: "Logging in using the master password gives full rights for working with the account. Investor authorization allows you to see the account status, analyze prices, and work with your own Expert Advisors, but not trade."[2] A hosted terminal that is supposed to execute your TradingView alerts therefore needs the master password. The investor password would let it watch, not act. Anyone who tells you a trading-capable hosted terminal works with investor access alone is describing something else.
On protection, PineConnector's Edge page states: "Credentials are encrypted in transit and at rest, and your instance is isolated to you."[3] That is the published claim. What the public pages do not say is who inside PineConnector can view a stored credential, under what conditions, or how that access is logged. The Edge Guide, which covers setup and controls, contains no section on credential storage at all.[1] Those are legitimate questions for support, and the same questions apply to every other provider.
One more credential rule sits upstream of any hosting decision. TradingView's own webhook guidance says: "When configuring webhooks, ensure that you don't include sensitive information such as login credentials or passwords in the webhook body."[4] A well-designed connector never asks you to put your broker password inside an alert message. If a setup guide does, stop there.
2. Operational access: who can start, stop and watch the terminal
Operational access is control over the process, not over your account. A provider running your terminal can, by definition, start it, stop it and see whether it is connected. What varies is how much of that control you also get, and what visibility comes with it.
For PineConnector Edge, the Edge Guide describes the trader-side controls as "manually restarting or terminating your Edge MT5 instance" from the Settings button, and says that "PineConnector monitors your hosted MT5 terminal to check that it is running".[1] The Bridge page lets you "send test signals and view their processing results, including the reported latency".[1] Those are the documented operational features today.
Equally important is what is not available yet. The Guide states that "EA settings currently use a fixed default configuration and cannot be edited" and that "Trading account data, including account balance, and the Experts and Journal logs are not yet available", with customisation "planned for a future update".[1] In access terms: the provider operates the terminal, you can restart or terminate it and test the signal path, but you cannot currently read the terminal's own logs or change the EA's parameters through the portal. If your operating model depends on reading the Experts tab, that is a reason to self-host for now.
Table: what each party can do on Edge today, per the Edge Guide.[1]
| Operation | You | PineConnector | Status |
|---|---|---|---|
| Create the instance with your broker login | Yes | No (you enter it) | Supported |
| Restart or terminate the instance | Yes, Settings | Yes (operates the machine) | Supported |
| Monitor that the terminal is running | Portal status, test signals | Yes | Supported |
| Edit EA settings | No | Fixed default configuration | Not available, planned |
| View Experts / Journal logs, account balance | No | Not exposed | Not available |
| Install other software or EAs | No | No | Not supported |
3. Custody: where your money is, and is not
Custody is the one that generates the most anxiety and has the clearest answer. A hosted MT5 terminal is a copy of the same program you would run at home, signed in to your broker. It can place, modify and close orders because the master password permits that. It cannot deposit, withdraw or transfer funds, because MetaTrader terminals do not have those functions; money movement happens through your broker's client area, with the broker's own verification, not through the trading platform.
PineConnector states this directly on the Edge page: "PineConnector does not hold your funds. Your money stays in your own brokerage account, in your own name."[3] And on the boundary of responsibility: "Edge is managed infrastructure, not managed execution."[3] The page continues: "You remain responsible for what that terminal is told to do. Your broker relationship, your funds and every trading decision stay entirely yours."[3]
What custody does not cover, and where the real operational risk sits, is order placement. A terminal with the master password can open positions. That is the point of it. So the custody question ("can they take my money?") has a reassuring answer, while the operational question ("what instructions reach this terminal, and from where?") deserves the attention. Your alerts, your Licence ID and your connector settings decide what the terminal does. That is why the verification checklist in the nine tests to run before going live matters more than any hosting decision.
4. Revocation: how access ends
Revocation has two layers, and only one of them is under the provider's control.
The first is at the provider: stopping or removing the instance. PineConnector's Edge page says "You can stop your instance from the portal whenever you want."[3] The Edge Guide documents the terminate control.[1]
The second is at your broker, and it is the one that does not depend on trusting anyone: change the account password. The Edge page states it plainly: "Because the account is yours, you can also change the password at your broker at any time, which cuts off access at your broker."[3] A stored credential that no longer matches the broker's record is inert. This works against every hosted provider, every VPS you have ever logged into, and every old laptop, which is why it is the step to take whenever you retire a setup.
What the public documentation does not answer for PineConnector, and what you should ask any provider: after you terminate an instance or cancel a subscription, are the stored credentials deleted, and when? Is deletion confirmed to you? Neither the Edge Guide nor the Edge page describes a retention or offboarding procedure.[1][3] Until that is documented, the broker-side password change is the step that is fully in your hands.
Prop firm accounts: the rule that may decide it for you
If the account is an evaluation or funded account with a proprietary trading firm, the access question may be answered by the firm's terms before any provider's security matters. FTMO's forbidden practices state: "You must not allow any third party to access or otherwise use your FTMO Account or your FTMO Challenge/Verification account".[5] The same page notes the only carve-out is for legal entities sharing with "members of top management".[5]
Whether a hosted terminal that holds your login counts as a third party accessing the account is a question for the firm, in writing, not for a blog. PineConnector has not verified this with FTMO or any other firm; you need to confirm it with your firm before connecting an evaluation or funded account. That applies equally to any VPS provider's managed setup service, a broker-bundled VPS with pre-configured terminals, and PineConnector Edge. Our FTMO connection guide covers the workflow and says the same thing: get FTMO's answer first.
Questions to ask any hosted MT5 provider, including PineConnector
The general list lives in the hosted MT5 explainer. These are the access-specific additions, with PineConnector's published position beside each.
| Question | Why it matters | PineConnector, per public pages |
|---|---|---|
| Which password does the terminal use? | Master permits trading; investor is watch-only.[2] | Setup requires the account login and password; a trading terminal needs the master password.[1] |
| Are credentials encrypted in transit and at rest? | Baseline for any stored secret. | Stated: yes, and "your instance is isolated to you".[3] |
| Who at the provider can view a stored credential, and is access logged? | Encryption at rest says nothing about staff access. | Not documented. Ask support. |
| What controls do I have over the terminal? | You should be able to stop it yourself. | Restart and terminate from Settings; test signals from the Bridge page.[1] |
| Can I read the terminal's logs? | Needed to diagnose broker-side rejections. | Experts and Journal logs "not yet available".[1] |
| Can the provider move funds? | Custody boundary. | "PineConnector does not hold your funds."[3] MT5 terminals cannot transfer money. |
| How do I revoke access? | Should not depend on the provider acting. | Stop the instance in the portal; change the broker password "at any time".[3] |
| Are credentials deleted after termination or cancellation, and when? | Retention is the gap most policies skip. | Not documented. Ask support. |
| Does my prop firm permit a hosted terminal? | May be forbidden regardless of provider.[5] | Not PineConnector's call; get the firm's written answer. |
Frequently asked questions
Can a hosted MT5 provider withdraw money from my broker account?
Not through MetaTrader. The terminal places and manages orders; deposits and withdrawals go through the broker's client area with its own verification. PineConnector states it does not hold your funds.[3] The realistic risk with any terminal that has the master password is unwanted orders, not transfers, which is why instruction verification matters.
Can I use my investor password with a hosted terminal so it cannot trade?
You can, but then it cannot execute your alerts either. MetaQuotes describes investor authorisation as allowing you to see the account and work with your own EAs "but not trade".[2] For a terminal whose job is executing TradingView alerts, that defeats the purpose.
If I cancel, is my broker login deleted from PineConnector's systems?
The public Edge Guide and Edge page do not describe a deletion or retention procedure.[1][3] Ask support for the policy in writing, and change your broker password when you retire the instance regardless of the answer.
Is running my terminal on someone else's server allowed by my prop firm?
Check the firm's terms. FTMO forbids allowing "any third party to access or otherwise use your FTMO Account".[5] Whether a hosted terminal falls under that is for the firm to say.
Next step
If you are evaluating PineConnector Edge, read what PineConnector Edge is and who it is for, check the current scope in the Edge Guide, and put the two "not documented" questions above to support before you connect a live account. Start on a demo account, which the Edge Guide itself recommends for a first setup.[1]
Reviewed 10 September 2026. Facts and quotations were checked against the linked sources on that date.
Sources
- PineConnector Docs – Edge (Early Access) Guide, accessed 10 September 2026.
- MetaQuotes – MetaTrader 5 Help: Authorization (master and investor passwords), accessed 10 September 2026.
- PineConnector – PineConnector Edge: Managed MT5 Hosting, accessed 10 September 2026.
- TradingView – How to configure webhook alerts, accessed 10 September 2026.
- FTMO – Forbidden Trading Practices, accessed 10 September 2026.
PineConnector executes the instructions you send it. It does not select trades, manage money, or hold funds. Trading carries risk, and past performance of any strategy does not indicate future results.
