> ## Documentation Index
> Fetch the complete documentation index at: https://mam-api.exuratech.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Integration model

> How to define responsibilities between your backend, the MAM API, and MetaTrader 5.

The API must be consumed from a secure backend. The integrator maintains users, products, business limits, and permissions in its own source of truth; the ExuraCopy MAM API manages MAM accounts and their operational relationships.

```mermaid theme={"theme":{"light":"github-light","dark":"github-dark"}}
flowchart TB
  A["CRM or backend · source of truth"] -->|"HTTPS + Bearer API key"| B["ExuraCopy MAM API"]
  B -->|"Authorized operations"| C["MetaTrader 5"]
  B -->|"HMAC-SHA256 events"| D["Integrator webhook"]
```

## Fields you should normally omit

* `user_id` and `metatrader_account_product_id`: internal references for full-platform solutions; they are not CRM IDs.
* `payment_account_login` when creating a new leader: omit it or send `null` to create the PAYMENT account automatically.
* Reserved fields such as `equity_limit`, `min_free_margin`, `copy_sl`, `copy_tp`, and `copy_existing_positions`: they do not enable currently contracted behavior.

> [!WARNING]
>
> The presence of a field in Swagger does not mean you should send it. Send only the fields documented for the integration workflow.

## Omitted fields, `null`, and empty strings

* Omitting an optional field allows its default value to apply.
* Sending `null` is valid only when the field contract explicitly allows it.
* An empty string is not equivalent to omission and normally produces `422` for names or logins.
* For numeric fields, `0` is a real value; it does not mean “no value.”

## Security rule

Do not expose the API key, MT5 credentials, `payment_account_login`, or `signing_secret` in frontends, mobile applications, public logs, or analytics tools.

## Continue

> [card] [Previous: Overview](https://mam-api.exuratech.com/getting-started/overview.md)
>
> Review the concepts and identifiers that the integrator must retain.

> [card] [Next: Authentication and environments](https://mam-api.exuratech.com/getting-started/authentication.md)
>
> Configure the base URL, API key, and headers for each request.


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.