Back to Blog
Algorithmic Trading on Prop Firm Accounts: What's Allowed in 2026

Algorithmic Trading on Prop Firm Accounts: What's Allowed in 2026

·Windra Thio, Co-Founder·13 min read
StrategiesAdvanced

Algorithmic trading on crypto prop firm accounts is allowed on most major firms in 2026, but the rule that matters isn't "are bots allowed?" It's "are bots allowed via API or only via frontend?" On SizeProp, the rule is explicit: bots and automation are allowed via the frontend (browser-driven automation on our terminal), but direct API access for automated execution is not permitted. Other firms split differently: HyroTrader routes through a linked Bybit account, so API bots on Bybit are fine. FTMO, FundedNext and CFT allow MT4/MT5 Expert Advisors. This article maps the full 2026 landscape, explains why the frontend/API distinction exists on SizeProp, and gives you the honest framing on whether algorithmic edge actually survives contact with live markets.

Originally published: April 24, 2026 · Last verified: April 2026 · By Windra Thio, Co-Founder of SizeProp

Key Takeaways

  • Frontend vs API is the real question. "Are bots allowed?" is too vague. Every firm has conditions.
  • SizeProp allows frontend automation, not API automation. Browser-driven bots (Puppeteer, Selenium, TamperMonkey-style scripts against our UI) are permitted. Direct API order placement is not.
  • Why the distinction exists: frontend-only prevents execution-speed arbitrage where one trader's API latency advantage becomes profit extracted from the firm at the expense of other users.
  • Competitor rules vary: HyroTrader (direct Bybit API), CFT (MT5 EAs), FTMO (MT4/MT5 EAs), FundedNext (MT4/MT5 EAs), Breakout (whitelabel terminal, limited).
  • Over $50M in funded capital granted on SizeProp, built for discretionary traders. Algo is allowed but not the recommended path.
  • Honest framing: personally, I don't think bots work long-term on crypto prop accounts. The marketing says otherwise. The P&L data says something quieter.

SizeProp is a crypto prop trading firm founded in October 2025 by Windra Thio, backed by Igloo Inc (parent of Pudgy Penguins), offering $33 entry challenges with same-day USDT payouts and zero denied payouts.

What "Algorithmic Trading" Actually Means (In 2026)

"Algorithmic trading" in a crypto prop firm context splits into five distinct categories in 2026: MetaTrader Expert Advisors (EAs), signal copiers, API execution bots, frontend browser automation, and copy trading. Each carries different rules at different firms. A blanket "bots allowed" answer obscures this — SizeProp permits only frontend automation, while HyroTrader allows direct Bybit API execution.

The term "bot" covers too many things to be useful. Before breaking down firm rules, here's the real taxonomy:

1. EAs (Expert Advisors): code that runs inside MetaTrader 4 or MetaTrader 5. Strategy logic, indicator-based entries, trailing stops, basket management. MQL4/MQL5 codebases. Widely used in forex prop trading.

2. Signal copiers: a bot that receives signals (from Telegram, Discord, a webhook) and copies the trade onto your account. This is automation by signal, not algorithmic strategy. The strategy is elsewhere.

3. API execution bots: Python/Node scripts that hit the exchange or prop firm's REST/WebSocket API directly. Fast, scriptable, and the typical vehicle for market-making, arbitrage and high-frequency strategies.

4. Frontend automation: browser automation (Puppeteer, Selenium) or userscripts that interact with the prop firm's web interface the same way a human would. Slower than API, limited to UI-exposed actions, but indistinguishable in effect from a human clicking fast.

5. Copy trading: mirroring another trader's account. Different legal status at most firms. Usually banned as a distinct rule.

Each firm treats these differently. A blanket "yes, bots allowed" answer hides that.

SizeProp's Rule: Frontend Yes, API No

SizeProp permits frontend browser automation (Puppeteer, Playwright, Selenium, TamperMonkey userscripts) but does not allow direct API trading automation as of April 2026. We don't expose a public trading API, and reverse-engineering private endpoints is against the rules. This line prevents execution-speed arbitrage — direct API bots with millisecond advantages would systematically extract fills from discretionary traders sharing the same orderbook.

Our rule is explicit:

  • Frontend automation: allowed. If you want to run a browser bot that reads the SizeProp terminal, detects a VWAP reclaim on BTC, and clicks the buy button for you, that's within the rules. Same with userscripts that size positions for you, or trigger stop-losses based on indicator values.
  • API automation: not allowed. We don't expose a public trading API. Reverse-engineering our private endpoints to hit them programmatically is against the rules. Signal-copier bots that rely on API hooks are also out.

Why this line specifically?

Execution-speed arbitrage. In a crypto prop firm, multiple traders share the same orderbook (we source from Binance, Bybit, Hyperliquid). If a handful of users run direct API bots with millisecond execution advantages over everyone else, they can systematically take fills that would otherwise belong to discretionary traders. That's not an edge from strategy. It's an edge from pipeline speed, and it extracts value from the firm and its users, not from the market.

Frontend automation preserves roughly human-scale latency. A well-written Puppeteer script is still slower than a co-located API bot. The playing field stays within a reasonable spread for discretionary traders.

This is also why we don't have public API access.. That will remain our stance unless we build a tiered program for it specifically.

100+ payouts processed · zero denied · over $50M in funded capital granted (as of April 2026)

Setup for Compliant Algo Trading on SizeProp

Setting up compliant frontend automation on SizeProp takes six steps: pick an automation framework (Puppeteer, Playwright, or TamperMonkey), authenticate manually once, read the DOM rather than the API, dispatch click events instead of network payloads, respect human-scale polling (1-4 reads per second), and log every action. A $20/month VPS is typically sufficient for hosting.

If you want to run frontend automation on a SizeProp account, the setup is standard browser automation:

  1. Pick your automation layer. Puppeteer (Node.js) or Playwright (Node/Python/Java/C#) for full browser scripts. Userscripts via TamperMonkey for lighter-weight DOM-level automation.
  2. Authenticate manually once. Log into SizeProp in the automated browser. Keep the session warm.
  3. Read the DOM, not the API. Your script watches the DOM for the price, the P&L, the drawdown buffer — same elements a human reads.
  4. Click buttons, don't send payloads. Your bot dispatches click events on the buy/sell/close buttons. It doesn't intercept the network request and replay it.
  5. Respect rate limits. Don't poll 100 times per second. Human-scale polling (1–4 reads per second) is the rule of thumb.
  6. Log every action. Build a ledger your automation writes to. You'll need it for debugging and for your own risk review.

One absolute: if SizeProp support ever reaches out about your activity, respond. Frontend automation is allowed. Behavior that stresses the terminal, attempts to bypass rule enforcement, or abuses the drawdown tracker is not, and the rules are enforced by the risk team, not by the terminal alone.

Start Your Challenge — From $33 →

Competitor Rules: The Honest 2026 Map

Across the six major crypto prop firms in April 2026, algo rules split sharply: SizeProp allows frontend only, HyroTrader permits direct Bybit API, FTMO and FundedNext allow MT4/MT5 EAs with latency-arbitrage bans, CFT supports MT5 EAs plus MatchTrader, and Breakout restricts automation on its whitelabel terminal. No single firm is universally "bot-friendly" — every rulebook has conditions.

FirmAlgo allowed?MechanismCatch
SizePropFrontend onlyBrowser automation on terminalNo API access
HyroTraderYesDirect Bybit API (your Bybit account)Mandatory stop-loss on every position; 10 min trading days (as of April 2026)
FTMOYesMT4/MT5 EAsNo HFT, no arbitrage, no copy trading between FTMO accounts (as of April 2026)
FundedNextYesMT4/MT5/cTrader EAsNo latency/tick scalping EAs, no single-market-maker abuse
Crypto Fund Trader (CFT)YesMT5 EAs + MatchTraderCFT Standard Terms prohibit latency arbitrage
BreakoutLimitedWhitelabel terminal, limited scriptingClosest to "discretionary only" of the crypto-native firms

A few specifics worth calling out.

HyroTrader (Direct Bybit API)

Because HyroTrader has you link a Bybit account (for API routing, though the prop account itself is still simulated) via API, API bots running on Bybit work on a HyroTrader challenge the same way they work on a retail Bybit account. That's the flexibility. The tradeoff is the rule stack: mandatory stop-loss on every position, 10 mandatory trading days on each phase, exposure ceilings, and an equity-based trailing drawdown. An API bot that works on retail Bybit doesn't automatically pass HyroTrader's rules. It has to respect those constraints first.

FTMO and FundedNext (MT5 EAs)

Both firms allow EAs but prohibit:

  • Latency arbitrage / tick scalping exploits
  • High-frequency strategies that abuse server tick resolution
  • EAs that copy signals between their own account and other firms' accounts

FTMO specifically bans "ultra-short holding" EAs: sub-minute holding periods on large notional sizes. The rule is enforced via their risk team, not automatically.

CFT (MT5 / MatchTrader)

CFT allows MT5 EAs with similar restrictions on latency-based strategies. Their Bybit integration route doesn't give you direct Bybit API access in the same way HyroTrader does — CFT's platform routes fills through its own infrastructure.

Breakout (Whitelabel Terminal)

Breakout uses a whitelabel terminal, which limits the automation surface. It's closer to "discretionary only" than the MT5-based firms. Workable for a human with a clean process, not workable for an EA.

The Honest Take: Do Algo Bots Actually Work on Prop Accounts?

Retail algorithmic trading bots rarely pass prop firm challenges in 2026 — discretionary traders outperform bot-only traders by a wide margin on SizeProp's platform. Backtests typically ignore daily loss caps, trailing drawdown, and perp swap fee drag; a 50-trades-per-day strategy pays $400+ daily in fees on a $10K account. Institutional quant teams are the exception, not the rule.

Here's where I owe you the truth instead of the marketing:

Personally, I don't think bots work. I've been trading crypto derivatives since 2016 and building this firm since 2025, and I've watched hundreds of funded traders come through our platform. The ones who pass, keep accounts and withdraw consistently are almost always discretionary. The ones who show up with "I've got a bot, this is free money" lose the challenge within two weeks on average.

Why do algo strategies look great in backtests and die in live prop accounts?

1. Backtests rarely model drawdown rules. A strategy that goes 40% drawdown intraday before recovering to +5% by end of day is a winning strategy on Binance. On a SizeProp Degen with a 2% daily loss limit, it's a dead account on day one. Most bot marketing never mentions this.

2. Fee drag on high-frequency strategies. Perp swap fees get charged on both longs and shorts. A strategy that enters and exits 50 times per day pays swap fees 100 times. On a $10,000 account, a 0.04% fee per side (typical) is $4 per entry + $4 per exit. 50 trades = $400 in fees per day. The strategy has to generate 4% daily returns just to break even on fees. Very few do.

3. Prop firm rules differ from exchange rules. Your bot built on Binance historical data doesn't know about trailing-till-starting-balance drawdown, mandatory stop-loss rules (HyroTrader), no-weekend-holding rules (forex firms), or news blackouts. Every firm's constraint set is different. Testing a bot on exchange data and deploying it on a prop account is not the same experiment.

4. Survivorship bias in marketing screenshots. The bot that blew up three accounts before this one doesn't get posted. You're looking at the winner from a sample of dozens.

5. Regime change. A bot trained on 2023 mean-reverting BTC doesn't handle 2024 breakout BTC or 2025 compressed-range BTC. Discretionary traders adapt. Rule-based bots don't.

None of this means algo trading is impossible. Well-funded institutional quant teams do make money on crypto. But the retail "$500 bot I bought on Gumroad will pass my funded challenge" pitch has approximately zero evidence behind it.

The Setup Cost Math

Realistic algo trading setup costs in 2026 range from $0 (writing your own Python API bot) to $15,000 (hiring a developer to build a custom EA), with ongoing monthly costs of $20-$200 for VPS hosting and signal subscriptions. A 1% monthly underperformance on a $100K account costs $12,000 per year — often more than the upfront dev-hire path.

Since we're being honest, here's what the realistic algo trading attempt costs:

PathSetup costMonthly costTime cost
Buy a ready-made EA on MQL5 Market$50–$500$0Minimal (mostly breakage)
Hire a dev to build a custom EA$2,000–$15,000$0Weeks to spec + backtest
Write your own Python API bot$0 (time)$20–$100 (VPS)Months to build + iterate
Subscribe to a signal copier$30–$200/month$30–$200Minimal
Run a frontend Puppeteer bot on SizeProp$0 + coding time$20 VPSDays to weeks

Now layer on the expected outcome. If the bot underperforms by 1% per month relative to a discretionary baseline, a $100K account is giving up $1,000/month. Over a year, that's $12,000 — more than the "hire a dev" path up front. Bots aren't free to run, and they aren't free to under-perform.

When Algo Does Make Sense

Algorithmic automation earns its keep in three scenarios: mechanical execution for an existing discretionary edge, risk enforcement (auto-closing at 75% of the daily loss cap), and setup scanning across 20-30 pairs. These are automation-as-discipline, not automation-as-edge. A TradingView alert setup covers about 80% of this surface with far less engineering overhead.

I'm not saying never. Some cases where frontend automation on SizeProp (or EA automation on MT5-based firms) genuinely helps:

  • Mechanical execution for a discretionary strategy. You have edge on a VWAP-reclaim setup. Your bot just handles the order placement at your exact rule, so you don't miss entries because you were eating lunch. This is automation as discipline, not edge.
  • Risk enforcement. A bot that auto-closes all positions when you hit 75% of your daily loss. Automation as guardrail.
  • Setup scanning. A bot that monitors 30 pairs for your specific setup condition and alerts you, but doesn't place the trade. You still decide.

These are useful. They're also 80% of what a decent TradingView alert setup does, with none of the engineering overhead.

SizeProp is a crypto prop trading firm founded in October 2025 by Windra Thio, backed by Igloo Inc (parent of Pudgy Penguins), offering $33 entry challenges with same-day USDT payouts and zero denied payouts.

200+ funded traders · over $50M in funded capital granted · zero denied payouts since October 2025 launch (as of April 2026)

FAQ

Does SizeProp allow bots?

Yes, with one hard line: bots are allowed via the frontend (browser automation on the SizeProp terminal), not via API. We don't currently expose a public trading API, and reverse-engineering private endpoints to run an API bot is against the rules. Frontend automation via Puppeteer, Playwright or userscripts is permitted.

Why does SizeProp allow frontend bots but not API bots?

To prevent execution-speed arbitrage. Multiple SizeProp traders share the same orderbook data (Binance, Bybit, Hyperliquid). Direct API bots with millisecond latency advantages would systematically take fills that would otherwise belong to discretionary traders, extracting value from other users. Frontend automation runs at roughly human-scale latency, keeping the playing field reasonable.

Can I run an MT5 EA on a SizeProp account?

No — SizeProp runs on a proprietary in-house terminal, not MT4 or MT5. There is no MT5 bridge. Your MQL5 Expert Advisor won't deploy on our platform. For MT5 EA trading, FTMO, FundedNext and CFT are the relevant firms.

Which crypto prop firms allow API bots?

HyroTrader is the cleanest API-bot-friendly option because you trade via a linked Bybit account (still a simulated prop account) via API — your Bybit API bot can be pointed at the linked Bybit account (the prop account itself is still simulated) (subject to HyroTrader's mandatory stop-loss and 10-day rules). FTMO, FundedNext and CFT allow MT5-based EAs. SizeProp does not permit direct API automation.

Do algorithmic trading bots actually work on prop firm accounts?

Honestly, rarely. At least for retail-purchased or off-the-shelf bots. Most strategies that look great in backtests fail under prop firm rules (strict daily loss caps, trailing drawdown, fee drag from perp swap on high-frequency strategies). Discretionary traders outperform bot-only traders on our platform by a wide margin. Institutional quant teams are the exception.

What's the difference between a bot, an EA and a signal copier?

A bot is a generic term for any automated trading program. An EA (Expert Advisor) is specifically code that runs inside MetaTrader 4 or 5. A signal copier is a bot that receives signals from a source (Telegram, Discord, webhook) and executes them on your account. The strategy lives elsewhere; the copier just routes. Firms often treat these differently.

Can I use TradingView webhook alerts to automate trades on SizeProp?

No direct webhook-to-execution path on SizeProp, because we don't expose a public trading API. You can use TradingView alerts as a notification layer, then trigger a frontend automation (Puppeteer reading the alert email/push, then clicking buy/sell in the SizeProp UI). That's within the rules. A direct TradingView-to-SizeProp API webhook isn't available.

What happens if my bot triggers a rule breach?

Same as if a human triggered it. Every breach on SizeProp is a hard breach — no warnings, no forgiveness. If your bot oversizes and hits the daily loss cap, the account is done. Profits you've already withdrawn stay yours, but the funded account closes. This is why risk-enforcement bots (auto-close at 75% daily loss) are more useful than execution bots for most traders.

Sources & Verification

Windra Thio
Windra Thio

Building SizeProp — the crypto-native prop trading platform. 10+ years trading crypto derivatives. Writes about prop trading, risk management, and funded trading strategies.