What an analysis tool can, and cannot, do on your MT5 account

Updated on September 15, 2026

Two levels, enforced by the broker

The starting point is the most important one, and the least explained: these limits are not a setting inside the tool. They are enforced by your broker’s server, on every request, whatever application is connecting.

The difference is considerable. A limit enforced by software is a promise, worth whatever the software is worth, and it falls if the software is badly written or compromised. A limit enforced by the broker’s server is an impossibility: a program holding an investor password cannot trade your account, even if it wanted to, even if it were hacked.

So the question « do I trust this tool » turns into a far simpler one: « which password am I giving it ». It is covered in detail in our guide on which password to give an analysis tool.

What read-only access allows

With an investor password, a tool can read your balance and equity, which lets it compute a position size matched to your real risk rather than to a rough figure. It sees your open positions and pending orders, your history, and live prices for the instruments your broker exposes to you.

That is enough for everything to do with analysis. In AlphaGPT’s case it covers reading the chart, computing the plan, sizing the position and keeping the journal up to date.

What does not get through: any attempt to place an order is refused by the server. Not delayed, not queued, refused.

What the master password adds

It adds exactly one thing: acting on the market. Opening a position, modifying one, placing or cancelling a pending order, moving a stop.

That is what makes one-click placement at the computed levels possible, and it is also what asks for more trust, since the technical barrier is gone. The reasonable approach is therefore sequential: start read-only, judge the tool on its actual work for a few weeks, and move to the master password only if the convenience of execution justifies it.

Nothing obliges you to take that step. A numbered plan is perfectly easy to place by hand in your own platform.

What neither of them ever allows

This is the most reassuring list, and almost nobody provides it.

• withdrawing money, to any destination whatsoever;
• making a transfer between your accounts;
• changing your bank details or your address;
• reaching the broker’s client area, where those operations live;
• closing the account, or opening another one.

The reason is structural: MetaTrader is an execution platform, not a cashier’s desk. Movements of funds go through the broker’s client area, protected by entirely separate credentials and usually by an extra verification step. A MetaTrader password, master included, gives no access to it.

How to revoke access

By changing the password concerned, and the effect is immediate because it applies at the level of the broker’s server. Changing the investor password is enough to cut off a read-only tool, without disturbing your own connection at all.

One trap is worth knowing before you start: resetting the master password resets the investor one too, which silently cuts off the tools that were using it. The procedure and the order to follow are covered in our guide on the MT5 investor password.

It remains worth checking your account history in your own platform from time to time, simply because it is the one source that depends on no third-party tool.

What this does not cover

The permission model protects your money against an unauthorised action; it says nothing about the quality of what you are being shown. A tool that is perfectly harmless technically can still produce mediocre analysis, and that is a risk of a different nature, against which only trying it over a long enough period protects.

Nor does it say anything about what happens to the data being read. What a tool sees is your trading activity, which remains personal information even without any power to act. The privacy policy of the service concerned is the right place to check what it does with it.