OpenOMS

An open source multi-client order management system.

Install

Prerequisites: Rust (cargo), PostgreSQL. Optional: Python 3 (live universe seeders), Node (cockpit).

git clone git@github.com:maxkuttner/openoms.git && cd openoms
cp .env.example .env        # then edit passwords / bind addr

Run

With the ADMIN_* superuser + role passwords set in .env, just start the app — it self-provisions on boot (roles, schema, reference data) and, if broker creds are present, syncs that broker's instrument catalog in the background. No ordered setup commands.

cargo run                  # OMS on OMS_BIND_ADDR (default localhost:3001)

First boot on an empty database runs provision → migrate → seed before listening (a few seconds), then the server binds immediately while instruments populate in the background. Subsequent boots are near-instant no-ops. Set OMS_SYNC_ON_BOOT=never to skip auto-sync, or OMS_BOOTSTRAP=off when infrastructure is provisioned elsewhere.

The SPY fixture seeds alpaca-paper + a test user (test-trader-key : test-secret), so you can place a paper order immediately. Admin webapp: cd cockpit && npm install && npm run dev.

Auth

• Cockpit login — the console is gated by a single password: OMS_ADMIN_TOKEN (enabled via OMS_ADMIN_AUTH_ENABLED=true). Enter it on the login screen; it's sent as a bearer to /admin. Set a strong random value for any real deployment.
• Trading tokens — generate one on the cockpit's Trading tokens page (or POST /admin/trading-tokens). A token belongs to a principal (a trader / strategy / service) and is a single copy-once bearer string used by API clients as Authorization: Bearer <token>. What it can trade comes from the principal's portfolio grants (can_trade), so you can mint several tokens under one principal to rotate credentials without re-permissioning. Revoke any token anytime.
• The legacy HTTP Basic form (key_id:secret, e.g. the test-trader dev user) still works on the trading routes.

Manual setup (optional)

The bootstrap just orchestrates the same idempotent make targets, if you'd rather run them yourself (or set OMS_BOOTSTRAP=off):

make db-setup                                 # roles, schema, ref-data, SPY fixture
make sync-broker BROKER=alpaca               # instruments + broker mapping from Alpaca
make sync-broker BROKER=alpaca UNDERLYINGS=SPY,QQQ  # also seed those option chains