A TWS connection popup asks whether to accept an API client. Confirm the source belongs to the app you just opened. If no connection is expected, do not accept it. A missing approval can leave an app waiting.
Educational software guidance. Trading involves risk. Read the financial and information disclaimers.
Step by step
- 1 Check the source address displayed in the popup against the machine that runs your app.
- 2 If it is your expected client, accept that connection. If it is unfamiliar, decline and investigate.
- 3 Open API → Settings and review localhost and Trusted IPs for the intended setup.
- 4 Add only an address you have verified if you want future connections from it to be accepted.
- 5 Reconnect the app and check that the account it receives is correct.
A practical example
You start your own desktop app and a TWS prompt appears at the same time. Check the source shown in the prompt against the machine you chose. If it matches, you can approve that planned link. If you did not start an app and do not know the source, stop and ask who owns it. The goal is to let your chosen app connect, not to approve every request that reaches TWS.
Screen reference

Mistake to avoid
Common questions
Will every denied address show a popup?
No. IBKR notes that untrusted IPs may be denied without a prompt.
Do I need to allow remote access for two local apps?
Usually no. Confirm both programs run on the same computer.