# TradingAgentStack > A sourced directory of tools that connect AI agents to markets: broker MCP servers, market data APIs and MCP servers, agent frameworks, backtesters and trading agents. Every listing links to the vendor's own source and shows when it was last checked. 115 tools, 14 official broker MCP servers, last checked 2026-10-19. Not financial advice. Full data for every tool (all fields, one block per tool): https://tradingagentstack.com/llms-full.txt ## Key pages - [Best broker for AI agents (2026): every official broker MCP grouped by order approval, paper trading and markets](https://tradingagentstack.com/best-broker-for-ai-agents/) - [Safety controls of every broker MCP server](https://tradingagentstack.com/broker-mcp-safety-controls/) - [Alpaca MCP V1 vs V2 upgrade guide](https://tradingagentstack.com/alpaca-mcp-v1-vs-v2/) - [Free market data APIs for algo trading](https://tradingagentstack.com/best-free-market-data-apis/) - [How we source and check facts](https://tradingagentstack.com/methodology/) - [Changelog](https://tradingagentstack.com/changelog/) ## Safety score methodology - [How the safety score works](https://tradingagentstack.com/safety-score/): 7 sourced inputs, shown as a percentage of the points we could verify; affiliate links never affect it - [Broker MCP safety controls](https://tradingagentstack.com/broker-mcp-safety-controls/) - [What's new](https://tradingagentstack.com/changes/) ## Data and tools for agents - [Open dataset, JSON and CSV, CC BY 4.0](https://tradingagentstack.com/data/): https://tradingagentstack.com/data/tools.json ยท https://tradingagentstack.com/data/tools.csv - [TradingAgentStack MCP server](https://tradingagentstack.com/mcp/): read-only, streamable HTTP at https://tradingagentstack.com/api/mcp - [TAS Guard](https://tradingagentstack.com/guard/): open-source limits, approvals and kill switch for AI agents on broker MCP servers. Connector profiles: https://tradingagentstack.com/data/profiles/index.json - [Research: broker MCP order gating](https://tradingagentstack.com/research/broker-mcp-order-gating/) ## Hubs - [Trade with a bot](https://tradingagentstack.com/trade-with-a-bot/) - [Build an AI agent](https://tradingagentstack.com/build-an-ai-agent/) - [Markets & infrastructure](https://tradingagentstack.com/markets-and-infrastructure/) - [Learn](https://tradingagentstack.com/learn-algorithmic-trading/) ## Is it safe to connect to an AI agent? - [Is Alpaca MCP Server safe?](https://tradingagentstack.com/tool/alpaca-mcp-server/is-it-safe/) - [Is Kalshi API safe?](https://tradingagentstack.com/tool/kalshi-api/is-it-safe/) - [Is Polymarket API safe?](https://tradingagentstack.com/tool/polymarket-api/is-it-safe/) - [Is Tradier MCP Server safe?](https://tradingagentstack.com/tool/tradier-mcp-server/is-it-safe/) - [Is 3Commas safe?](https://tradingagentstack.com/tool/3commas/is-it-safe/) - [Is Cryptohopper safe?](https://tradingagentstack.com/tool/cryptohopper/is-it-safe/) - [Is Bitsgap safe?](https://tradingagentstack.com/tool/bitsgap/is-it-safe/) - [Is Coinrule safe?](https://tradingagentstack.com/tool/coinrule/is-it-safe/) - [Is WunderTrading safe?](https://tradingagentstack.com/tool/wundertrading/is-it-safe/) - [Is Binance safe?](https://tradingagentstack.com/tool/binance/is-it-safe/) - [Is Bybit safe?](https://tradingagentstack.com/tool/bybit/is-it-safe/) - [Is OKX safe?](https://tradingagentstack.com/tool/okx/is-it-safe/) - [Is Kraken safe?](https://tradingagentstack.com/tool/kraken/is-it-safe/) - [Is Coinbase Advanced safe?](https://tradingagentstack.com/tool/coinbase-advanced/is-it-safe/) - [Is Hyperliquid safe?](https://tradingagentstack.com/tool/hyperliquid/is-it-safe/) - [Is Bitget safe?](https://tradingagentstack.com/tool/bitget/is-it-safe/) - [Is Gemini safe?](https://tradingagentstack.com/tool/gemini/is-it-safe/) - [Is eToro MCP Connectors safe?](https://tradingagentstack.com/tool/etoro-mcp-connectors/is-it-safe/) ## Comparisons - [Alpaca MCP vs IBKR MCP](https://tradingagentstack.com/compare/alpaca-mcp-vs-ibkr-mcp/): Alpaca's server runs locally with your API keys, defaults to paper trading and can place orders directly; you can scope it with toolsets. IBKR's integration is hosted, uses IBKR login with single-account authorization, and in the current release the AI drafts instructions that you review and convert into an order on an IBKR platform. - [tastytrade MCP vs Robinhood MCP](https://tradingagentstack.com/compare/tastytrade-mcp-vs-robinhood-mcp/): tastytrade gates order submit/edit behind a single-use confirmation token from a dry-run tool. Robinhood runs agent trading from a dedicated MCP account with a trade-approvals toggle. - [Databento vs Massive (Polygon)](https://tradingagentstack.com/compare/databento-vs-massive/): Databento is usage-based and gives new customers $125 in credits for historical data. Massive has a free end-of-day tier, a $29/mo Starter plan with 15-minute-delayed data that includes the full-market snapshot, and real-time data on the Advanced plan. - [TradeStation MCP vs NinjaTrader MCP](https://tradingagentstack.com/compare/tradestation-mcp-vs-ninjatrader-mcp/): TradeStation requires explicit confirmation before orders and access is requested in its HUB. NinjaTrader's MCP is in beta with separate Demo and Live endpoints and accounts. - [NautilusTrader vs QuantConnect LEAN](https://tradingagentstack.com/compare/nautilustrader-vs-quantconnect-lean/): Both cover backtesting and live trading. NautilusTrader is open source (LGPL-3.0); QuantConnect has a free tier plus paid plans, and its LEAN engine is open source. - [Alpaca API vs Interactive Brokers API](https://tradingagentstack.com/compare/alpaca-api-vs-ibkr-api/): Both support live and paper trading. Pricing details here come partly from third-party comparison sources and are marked as such. - [Webull MCP vs moomoo MCP](https://tradingagentstack.com/compare/webull-mcp-vs-moomoo-mcp/): Both are hosted MCP servers with OAuth sign-in and no API keys. The big difference is order handling: Webull's trading tools only create order instructions that you must confirm in the Webull app or desktop, while moomoo's trade:write scope lets the AI submit and cancel orders directly (moomoo warns these use real funds). - [3Commas vs Cryptohopper](https://tradingagentstack.com/compare/3commas-vs-cryptohopper/): Both are cloud crypto bot platforms that trade on your exchange account through API keys, so your funds stay on the exchange. 3Commas is cheaper to start ($15/mo on annual billing) and is pushing an agentic AI layer, QuantPilot. Cryptohopper starts at $29/mo, adds a paper trading bot, copy bots and a marketplace, and keeps its AI strategy designer on the $129 Hero plan. - [Alpaca MCP vs Tradier MCP](https://tradingagentstack.com/compare/alpaca-mcp-vs-tradier-mcp/): Both cover stocks, options. Alpaca MCP: can trade unattended; Safety 68%. Tradier MCP: can trade unattended; Safety 50%. 7 of 11 sourced facts differ; the table below shows each with its source. ## Setup guides - [How to connect Claude to Alpaca via MCP](https://tradingagentstack.com/guides/connect-claude-to-alpaca-mcp/) - [How to connect Claude (or any MCP client) to Interactive Brokers](https://tradingagentstack.com/guides/connect-claude-to-ibkr-mcp/) - [How to connect Claude to the tastytrade MCP server](https://tradingagentstack.com/guides/connect-claude-to-tastytrade-mcp/) - [How to connect Claude (and other AI agents) to the Robinhood Trading MCP](https://tradingagentstack.com/guides/connect-claude-to-robinhood-mcp/) - [How to connect Claude to TradeStation MCP](https://tradingagentstack.com/guides/connect-claude-to-tradestation-mcp/) - [How to connect Claude (and other AI apps) to the Public hosted MCP server](https://tradingagentstack.com/guides/connect-claude-to-public-mcp/) - [Connect ChatGPT, Cursor or Claude Code to Interactive Brokers (IBKR MCP)](https://tradingagentstack.com/guides/ibkr-mcp-chatgpt-cursor-claude-code/) - [Set up a 3Commas or Bitsgap bot with a safe exchange API key (no withdrawals, IP whitelist)](https://tradingagentstack.com/guides/safe-exchange-api-key-3commas-bitsgap/) - [Run Freqtrade in dry-run mode (paper trading with a simulated wallet)](https://tradingagentstack.com/guides/freqtrade-dry-run/) - [Give an AI agent IBKR paper trading access (TWS API or Web API)](https://tradingagentstack.com/guides/ibkr-paper-trading-api-for-ai-agents/) ## Broker MCP servers - [Alpaca MCP Server](https://tradingagentstack.com/tool/alpaca-mcp-server/): live and paper (ALPACA_PAPER_TRADE defaults to true/paper; paper with simulated $100K). Safety: local server; 65 tools incl. stocks/options/crypto orders; ALPACA_TOOLSETS can restrict (e.g. read-only market data); ALPACA_PAPER_TRADE defaults to paper; v2.4.0 (Oct 12) adds option stop and stop-limit orders and GTC for options, and marks locates tools as not available in paper. Source: https://docs.alpaca.markets/us/docs/trading-api-mcp (checked 2026-10-19) - [Interactive Brokers AI Integration (MCP)](https://tradingagentstack.com/tool/interactive-brokers-ai-integration-mcp/): live account. Safety: hosted at api.ibkr.com/v1/api/mcp-public; IBKR login, single-account authorization; order instructions require IBKR approval (you review and submit each order; the Connector also supports two-leg option strategies). Separately, invite-only Autonomous AI trading (launched Oct 15, 2026, limited rollout) lets eligible clients authorize an agent to trade on its own from a dedicated funded partition of their account. Source: https://www.interactivebrokers.com/en/general/about/mediaRelations/7-28-26.php (checked 2026-10-19) - [Longbridge MCP](https://tradingagentstack.com/tool/longbridge-mcp/): live trading tools (place/modify/cancel). Safety: hosted; vendor advises start read-only, enable trading after scope config; 160+ tools; two-step order flow: submit, replace and grid orders first return a short-lived code that the agent sends back to execute, and since v0.14.0 (Oct 16) that code covers every field that changes what is traded; DCA and multi-leg orders still execute on the first call. Source: https://open.longbridge.com/docs/mcp (checked 2026-10-19) - [Webull Cloud MCP Server](https://tradingagentstack.com/tool/webull-cloud-mcp-server/): live: creates order instructions (stocks, options, futures, crypto, event contracts, algo) that you confirm in the Webull app/desktop; plus account data, order history, market data. Safety: hosted at api.webull.com/mcp; OAuth login; you pick which accounts and capability groups to authorize; every order instruction requires confirmation in the Webull APP/Desktop and can be revoked. Source: https://developer.webull.com/apis/docs/AI-friendly-Resources/mcp (checked 2026-10-19) - [tastytrade MCP Server](https://tradingagentstack.com/tool/tastytrade-mcp-server/): live; sandbox available. Safety: order submit/edit tools require a single-use confirmation token from a dry_run tool (valid 60s, bound to request hash). Source: https://developer.tastytrade.com/docs/sdks-and-tools/mcp-server/ (checked 2026-10-19) - [Robinhood Trading MCP](https://tradingagentstack.com/tool/robinhood-trading-mcp/): live, from a dedicated MCP account. Safety: hosted at agent.robinhood.com/mcp/trading; trades only in a dedicated MCP account (agent gets read access to all your Robinhood accounts); trade approvals toggle (off by default for MCP accounts, still rolling out); no multi-leg options orders via agents. Source: https://robinhood.com/us/en/support/articles/onboarding-an-external-agent/ (checked 2026-10-19) - [NinjaTrader MCP (beta)](https://tradingagentstack.com/tool/ninjatrader-mcp-beta/): Demo (simulated) and Live endpoints. Safety: beta, not generally available; remote OAuth; separate Demo/Live URLs and accounts. Source: https://docs.ninjatrader.com/mcp.md (checked 2026-10-19) - [TradeStation MCP](https://tradingagentstack.com/tool/tradestation-mcp/): live. Safety: explicit confirmation required before orders; request access in HUB; Claude or ChatGPT. Source: https://www.tradestation.com/platforms-and-tools/mcp/ (checked 2026-10-19) - [moomoo MCP](https://tradingagentstack.com/tool/moomoo-mcp/): live trading capability. Safety: hosted at mcp.moomoo.com/mcp; OAuth 2.1, no API key; permission scopes on consent. Source: https://open.moomoo.com/mcp-docs/overview (checked 2026-10-19) - [Public Hosted MCP Server](https://tradingagentstack.com/tool/public-hosted-mcp-server/): live (real money). Safety: hosted at mcp.public.com/mcp; preflight details shown before confirming orders. Source: https://public.com/api/docs/templates/hosted-mcp (checked 2026-10-19) - [Tradier MCP Server](https://tradingagentstack.com/tool/tradier-mcp-server/): live and paper (PAPER_TRADING flag with your paper token). Safety: hosted at mcp.tradier.com/mcp; personal API token (header, or in the URL query for ChatGPT/Claude web); order tools incl. equity, options, multileg, OCO/OTO/OTOCO and cancel; no separate order-confirmation step documented. Source: https://docs.tradier.com/docs/tradier-mcp (checked 2026-10-19) - [Axi MCP (MT5)](https://tradingagentstack.com/tool/axi-mcp-mt5/): live and demo MT5 accounts; MT4 and Axi platform accounts view-only. Safety: alpha; hosted at mcp.axi.com/mcp; OAuth with Axi login; Claude only; each trade action needs approval in chat unless you set that action to "Always allow"; cannot transfer funds. Source: https://help.axi.com/en-US/axiv2--axicorp-prod/article/2JDefk4Y-what-can-and-cant-i-ask-claude-to-do-through-the-axi-mcp-connection (checked 2026-10-19) - [eToro MCP Connectors](https://tradingagentstack.com/tool/etoro-mcp-connectors/): live account; eToro suggests testing workflows on a demo account first. Safety: hosted at mcp.public-api.etoro.com; sign in with your eToro account (no API keys); read-only or read-and-act access where available; every action is proposed for your review and approval; funding and withdrawals stay in eToro; Claude Desktop is look-up only for now. Source: https://www.etoro.com/news-and-analysis/press-releases/your-ai-already-runs-your-day-now-it-knows-your-portfolio/ (checked 2026-10-19) - [CCXT MCP Server](https://tradingagentstack.com/tool/ccxt-mcp-server/): live and sandbox/testnet accounts (per exchange); out of the box only public market data; trading must be enabled per account in the config file, and `"trading": true` works only on sandbox/demo accounts (live needs `"trading": "live"`). Safety: official local MCP server from the ccxt project (MIT), runs over stdio and keys never appear in tool parameters; capability tiers (market, read, trading, funds for withdrawals, raw write endpoints) are off until set in the config file, which no tool can edit; writes are previewed and confirmed by default on live accounts (confirm: always | live | never), checked against a per-order USD cap you set (maxOrderValue), optional daily cap and symbol allowlist, and logged to an append-only audit journal. Source: https://github.com/ccxt/ccxt/tree/master/mcp (checked 2026-10-19) ## Market data MCP servers - [TradingView MCP Server](https://tradingagentstack.com/tool/tradingview-mcp-server/): no trading (watchlists/alerts only). Safety: OAuth 2.1; 35 tools; write tools change watchlists/alerts only; public beta. Source: https://www.tradingview.com/support/solutions/43000795699-mcp-server-connect-your-ai-assistant-to-tradingview/ (checked 2026-10-19) - [Massive (formerly Polygon) MCP](https://tradingagentstack.com/tool/massive-formerly-polygon-mcp/): data only. Safety: data only; hosted OAuth at mcp.massive.com, or self-host the open-source server with a Massive API key; 3 tools (search_endpoints, call_api, query_data); repo marked experimental. Source: https://massive.com/docs/ai-tools/quickstart (checked 2026-10-19) - [Alpha Vantage MCP](https://tradingagentstack.com/tool/alpha-vantage-mcp/): data only. Safety: data only; remote server at mcp.alphavantage.co/mcp (OAuth page to enter your API key) or run locally with an API key. Source: https://github.com/alphavantage/alpha_vantage_mcp (checked 2026-10-19) - [Databento MCP servers (dbn-go)](https://tradingagentstack.com/tool/databento-mcp-servers-dbn-go/): data only. Safety: dbn-go-mcp-meta is metadata-only ('no billing risk'). Source: https://github.com/NimbleMarkets/dbn-go/blob/main/cmd/README.md (checked 2026-10-19) - [Pyth Pro MCP Server](https://tradingagentstack.com/tool/pyth-pro-mcp-server/): data only. Safety: hosted at mcp.pyth.network/mcp; bring your own Pyth Pro API key (Bearer header); feed discovery works without a key. Source: https://docs.pyth.network/price-feeds/pro/mcp (checked 2026-10-19) - [DexPaprika MCP](https://tradingagentstack.com/tool/dexpaprika-mcp/): data only. Safety: read-only market data (tokens, pools, OHLCV, RSI/EMA/MACD indicators); no trading or wallet access; run locally with npx or use the hosted server at mcp.dexpaprika.com. Source: https://github.com/coinpaprika/dexpaprika-mcp (checked 2026-10-19) ## Broker APIs - [Alpaca Trading API](https://tradingagentstack.com/tool/alpaca-trading-api/): live and paper. Safety: n/a. Source: https://docs.alpaca.markets/us/docs/about-market-data-api (checked 2026-10-19) - [Interactive Brokers API](https://tradingagentstack.com/tool/interactive-brokers-api/): live and paper. Safety: unknown. Source: https://aifinhub.io/articles/interactive-brokers-vs-alpaca-vs-tradier-api-2026/ (checked 2026-10-19) - [Tradier Brokerage API](https://tradingagentstack.com/tool/tradier-brokerage-api/): live and paper (sandbox). Safety: unknown. Source: https://tradier.com/individuals/pricing (checked 2026-10-19) - [Schwab Trader API](https://tradingagentstack.com/tool/schwab-trader-api/): live. Safety: OAuth (noted as complex). Schwab's Fall Business Update (Oct 15) lists a Model Context Protocol solution for AI-powered trading; on the call Schwab said it has started a pilot, beginning with Claude, for traders to connect their own LLM to its MCP layer, that LLMs can't move money, and that it blocks unauthorized agents that log in on a client's behalf. Source: https://aifinhub.io/articles/choosing-a-broker-api-2026/ (checked 2026-10-19) ## Market data APIs - [Databento](https://tradingagentstack.com/tool/databento/): data only. Safety: n/a. Source: https://databento.com/legal/databento-user-agreement/fees (checked 2026-10-19) - [Massive (Polygon) API](https://tradingagentstack.com/tool/massive-polygon-api/): data only. Safety: n/a. Source: https://massive.com/stocks (checked 2026-10-19) - [ThetaData](https://tradingagentstack.com/tool/thetadata/): data only. Safety: n/a. Source: https://www.thetadata.net/subscribe (checked 2026-10-19) - [Alpha Vantage API](https://tradingagentstack.com/tool/alpha-vantage-api/): data only. Safety: n/a. Source: https://www.alphavantage.co/premium/ (checked 2026-10-19) - [SEC EDGAR APIs](https://tradingagentstack.com/tool/sec-edgar-apis/): data only. Safety: n/a. Source: https://www.sec.gov/search-filings/edgar-application-programming-interfaces (checked 2026-10-19) - [OpenBB](https://tradingagentstack.com/tool/openbb/): data only. Safety: n/a. Source: https://openbb.co/blog/openbb-belongs-to-everyone/ (checked 2026-10-19) - [yfinance](https://tradingagentstack.com/tool/yfinance/): data only. Safety: n/a. Source: https://github.com/ranaroussi/yfinance (checked 2026-10-19) ## Agent frameworks - [LangGraph](https://tradingagentstack.com/tool/langgraph/): n/a. Safety: human approval: yes; MCP client: yes. Source: https://dotsagent.io/frameworks (checked 2026-10-19) - [LlamaIndex](https://tradingagentstack.com/tool/llamaindex/): n/a. Safety: human approval: yes; MCP client and server: yes. Source: https://dotsagent.io/frameworks (checked 2026-10-19) - [Mastra](https://tradingagentstack.com/tool/mastra/): n/a. Safety: human approval, tracing, evals: yes; MCP server built in. Source: https://dotsagent.io/frameworks (checked 2026-10-19) - [Microsoft Agent Framework](https://tradingagentstack.com/tool/microsoft-agent-framework/): n/a. Safety: human approval: yes; MCP client: yes. Source: https://dotsagent.io/frameworks (checked 2026-10-19) - [TradingAgents](https://tradingagentstack.com/tool/tradingagents/): research and backtesting only; approved trades go to a simulated exchange (no broker execution built in). Safety: open-source (Apache-2.0) multi-agent LLM framework built on LangGraph: analyst, bull/bear researcher, trader and risk-management agents debate each trade, and a Portfolio Manager agent approves or rejects it; the maker says it is designed for research and is not trading advice. Source: https://github.com/TauricResearch/TradingAgents (checked 2026-10-19) ## Backtesting - [QuantConnect / LEAN](https://tradingagentstack.com/tool/quantconnect-lean/): backtest, paper, live. Safety: n/a. Source: https://www.quantconnect.com/ (checked 2026-10-19) - [NautilusTrader](https://tradingagentstack.com/tool/nautilustrader/): backtest and live. Safety: n/a. Source: https://github.com/nautechsystems/nautilus_trader (checked 2026-10-19) - [VectorBT](https://tradingagentstack.com/tool/vectorbt/): backtest/research only. Safety: n/a. Source: https://github.com/polakowo/vectorbt (checked 2026-10-19) - [Backtesting.py](https://tradingagentstack.com/tool/backtesting-py/): backtest only. Safety: n/a. Source: https://github.com/kernc/backtesting.py (checked 2026-10-19) ## Trading agents ## Security ## AI trading bot platforms - [3Commas](https://tradingagentstack.com/tool/3commas/): live via exchange API keys; free trial; backtesting. Safety: DCA, grid and signal bots run on your exchange account via API keys; QuantPilot is an agentic AI layer that builds, tests and optimizes strategies; TradingView Pine Script execution. Source: https://3commas.io/pricing (checked 2026-10-19) - [Cryptohopper](https://tradingagentstack.com/tool/cryptohopper/): live via exchange API or OAuth; paper trading bot included. Safety: cloud bot with strategy designer, copy bots, DCA, market making and arbitrage; AI strategies and AI designer on Hero plan; funds stay on the exchange and withdrawal rights are never requested. Source: https://www.cryptohopper.com/pricing (checked 2026-10-19) - [Pionex](https://tradingagentstack.com/tool/pionex/): live (Pionex is the exchange; bots are built in). Safety: exchange with built-in grid, DCA and other bots; you deposit funds on Pionex itself, so custody sits with the exchange; availability varies by region. Source: https://www.pionex.com/blog/is-there-any-fees-for-starting-a-bot-or-only-transaction-fees/ (checked 2026-10-19) - [Bitsgap](https://tradingagentstack.com/tool/bitsgap/): live via exchange API keys; free demo with 20 bots. Safety: grid, DCA and COMBO bots across 18 exchanges (Binance, Coinbase Advanced, Kraken, OKX, Bybit, Hyperliquid and more); AI Assistant suggests bot settings; AI Portfolio Mode on Pro. Source: https://bitsgap.com/pricing (checked 2026-10-19) - [Coinrule](https://tradingagentstack.com/tool/coinrule/): live via exchange/broker connection; backtesting; templates. Safety: no-code if-this-then-that rule builder with 350+ templates across 25+ exchanges and brokers (Binance, Coinbase, Kraken, Hyperliquid, Trading 212, Webull, Public, E*Trade, Alpaca); offers an MCP for agent control. Not available in the EU/EEA under MiCA. Source: https://coinrule.com/ (checked 2026-10-19) - [WunderTrading](https://tradingagentstack.com/tool/wundertrading/): live via exchange API keys; demo account. Safety: signal bots (TradingView/webhook automation), DCA, grid, multi-pair grid and market-neutral bots on 18+ exchanges; API and MCP connectivity; requires API keys with withdrawals disabled. Source: https://wundertrading.com/en/pricing (checked 2026-10-19) - [Trade Ideas (Holly AI)](https://tradingagentstack.com/tool/trade-ideas-holly-ai/): live via connected brokers; real-time paper trading. Safety: Holly AI signals and auto-trading through partner broker integrations; scans and backtesting; signals are model output, not advice. Source: https://www.trade-ideas.com/pricing/ (checked 2026-10-19) - [TrendSpider](https://tradingagentstack.com/tool/trendspider/): live via SignalStack to 30+ brokers and exchanges (5 free automated orders/mo); backtesting and forward testing. Safety: trading bots fire orders from chart/indicator conditions; Quant Model Lab (KNN models, LLM feature engineering) and AI Sidekick assistant. Source: https://trendspider.com/pricing/ (checked 2026-10-19) - [Tickeron](https://tradingagentstack.com/tool/tickeron/): virtual and brokerage AI robots. Safety: AI robots built on Tickeron's FLM models on 5m/15m/60m timeframes; marketing cites high model returns, treat as hypothetical. Source: https://tickeron.com/ (checked 2026-10-19) - [Composer](https://tradingagentstack.com/tool/composer/): live in a Composer brokerage account; unlimited backtests. Safety: no-code strategy builder and 'Trade with AI' that drafts strategies you backtest and automate; brokerage by Composer Securities LLC (SEC-registered broker-dealer, FINRA/SIPC), clearing via Alpaca and Apex. Source: https://www.composer.trade/pricing (checked 2026-10-19) - [Capitalise.ai](https://tradingagentstack.com/tool/capitalise-ai/): live via partner brokers; backtesting and simulation. Safety: write if-then strategies in plain English; executes at partner brokers such as FOREX.com, AvaTrade, Tickmill, FXCM; acquired by Kraken and Interactive Brokers support ended Mar 31 2026. Source: https://capitalise.ai/getstarted/ (checked 2026-10-19) - [Option Alpha](https://tradingagentstack.com/tool/option-alpha/): live and paper via connected brokers. Safety: no-code options autotrading bots with per-bot capital limits ($100k) and backtesting. Source: https://optionalpha.com/pricing (checked 2026-10-19) - [TradersPost](https://tradingagentstack.com/tool/traderspost/): paper auto-submit free; live auto-submit on paid plans. Safety: routes TradingView/TrendSpider/webhook signals to brokers: Tradovate, TradeStation, Alpaca, IBKR, NinjaTrader, Robinhood, Webull, tastytrade, E*TRADE, Tradier, Coinbase, Kraken, Bybit, Binance; manual-submit mode lets you approve each signal. Source: https://traderspost.io/pricing (checked 2026-10-19) - [Surmount](https://tradingagentstack.com/tool/surmount/): paper trading on Core; live via connected brokers or Quantbase account. Safety: automated strategy marketplace and builder; Surmount AI Inc. is not a registered adviser; advisory accounts run by Quantbase LLC (SEC-registered adviser) with custody at Alpaca Securities. Source: https://surmount.ai/pricing (checked 2026-10-19) ## Open-source trading bots - [Freqtrade](https://tradingagentstack.com/tool/freqtrade/): dry-run (paper) and live, self-hosted. Safety: open-source (GPL-3.0) Python bot; runs on your machine with your exchange keys; control via Telegram, freqUI or REST API; FreqAI adds ML/reinforcement-learning strategies; exchanges incl. Binance, Bybit, OKX, Kraken, Gate, Bitget, Hyperliquid. Source: https://www.freqtrade.io/en/stable/ (checked 2026-10-19) - [Hummingbot](https://tradingagentstack.com/tool/hummingbot/): live (self-hosted); paper connectors. Safety: open-source (Apache-2.0) Python framework for market making and agentic strategies; 50+ exchange connectors incl. Binance, OKX, Bybit, Coinbase, Kraken, Hyperliquid, dYdX, Uniswap; Condor AI harness. Source: https://hummingbot.org/ (checked 2026-10-19) - [OctoBot](https://tradingagentstack.com/tool/octobot/): live and paper (virtual money). Safety: open-source (GPL-3.0) bot with DCA, grid, AI/ChatGPT, TradingView and copy bots; ccxt connectors to Binance, OKX, Coinbase, Kucoin, Bybit, Hyperliquid and more; crypto only. Source: https://www.octobot.cloud/en/pricing (checked 2026-10-19) - [Jesse](https://tradingagentstack.com/tool/jesse/): backtesting and live (self-hosted). Safety: open-source (MIT) Python framework; self-hosted so keys and strategies stay local; built-in MCP server lets Claude/Cursor agents research and backtest strategies. Source: https://jesse.trade/ (checked 2026-10-19) - [Superalgos](https://tradingagentstack.com/tool/superalgos/): backtest, paper and live (self-hosted). Safety: open-source (Apache-2.0) visual platform to design, test and deploy crypto bots, plus a token-incentivized signals/copy network. Source: https://superalgos.org/ (checked 2026-10-19) ## Exchanges & brokers for bots - [Binance](https://tradingagentstack.com/tool/binance/): live; Spot Testnet (testnet.binance.vision) for paper testing. Safety: Official MCP server (Agent OS, https://agent.binance.com/mcp/agentic, launched Aug 2026): OAuth scopes for market data, read-only account, trade and in-sub-account transfer; the agent works in a dedicated Agentic sub-account and there is no withdrawal scope; writes are confirm-first by default. Source: https://developers.binance.com/en/docs/agent-native/mcp-server (checked 2026-10-19) - [Bybit](https://tradingagentstack.com/tool/bybit/): live; Demo Trading (api-demo.bybit.com, live prices) and a separate Testnet. Safety: Official MCP server (bybit-official-trading-server on npm, github.com/bybit-exchange/trading-mcp) with 390+ V5 tools; market data works without a key; BYBIT_TESTNET flag; AI sub-account OAuth flow for agents. Source: https://github.com/bybit-exchange/trading-mcp (checked 2026-10-19) - [OKX](https://tradingagentstack.com/tool/okx/): live; demo trading profile (simulated) supported by the MCP. Safety: Official open-source Agent Trade Kit (MIT): okx-trade-mcp MCP server + okx-trade-cli, 100+ tools for spot, swap, options, algo orders (OCO, trailing stop) and grid bots; --read-only flag, per-module filtering, built-in rate limiter; keys stay local. Source: https://www.okx.com/docs-v5/agent_en/ (checked 2026-10-19) - [Kraken](https://tradingagentstack.com/tool/kraken/): live; built-in spot and futures paper trading in Kraken CLI (no API key needed). Safety: Official open-source Kraken CLI with a built-in MCP server (151 commands); default exposes only market, account and paper; trade/funding tools are flagged dangerous and need acknowledged=true unless --allow-dangerous; dead man's switch for live runs. Source: https://docs.kraken.com/home/mcp (checked 2026-10-19) - [Coinbase Advanced](https://tradingagentstack.com/tool/coinbase-advanced/): live; static Advanced Trade sandbox (mocked Accounts and Orders responses). Safety: Official Coinbase MCP server (https://agents.coinbase.com/mcp, OAuth 2.1) plus a local MCP in the Coinbase CLI with orders_preview dry-run (fill, fees, slippage) before orders_create; revoke in Account > Security > Connections. Source: https://docs.cdp.coinbase.com/coinbase-for-agents/overview (checked 2026-10-19) - [Hyperliquid](https://tradingagentstack.com/tool/hyperliquid/): live; public testnet (api.hyperliquid-testnet.xyz). Safety: On-chain order-book exchange (self-custodial wallet, no KYC account); API wallets/agent keys can trade but not withdraw; no first-party MCP found, community MCPs exist; verify any third-party server before giving it a key. Source: https://hyperliquid.gitbook.io/hyperliquid-docs/for-developers/api/rate-limits-and-user-limits (checked 2026-10-19) - [Bitget](https://tradingagentstack.com/tool/bitget/): live; demo trading in app. Safety: Official Agent Hub: MCP (npx @bitget-ai/bitget-agent-mcp, OAuth authorization) plus CLI and Skills; market-only HTTP MCP at https://agent.bitget.com/mcp with no account needed. Source: https://www.bitget.com/docs/uta/agent-hub (checked 2026-10-19) - [Gemini](https://tradingagentstack.com/tool/gemini/): live; full-function sandbox with test funds (exchange.sandbox.gemini.com). Safety: Open-source Gemini MCP server (github.com/gemini/developer-platform) with 40+ exchange tools; point it at the sandbox URL to test. Source: https://developer.gemini.com/rate-limit (checked 2026-10-19) ## AI signals & research copilots - [Danelfin](https://tradingagentstack.com/tool/danelfin/): research only (no execution); broker sync on paid plans. Safety: AI Score 1-10 rates each stock's probability of beating the market over 3 months, with the features behind the score; scores are probabilities, not guarantees. Source: https://danelfin.com/pricing/annual (checked 2026-10-19) - [Kavout](https://tradingagentstack.com/tool/kavout/): research only. Safety: InvestGPT research agent plus Kai Score (1-9 AI ranking from fundamental, technical and alternative data); credit-based. Source: https://www.kavout.com/pricing-plans (checked 2026-10-19) - [LevelFields](https://tradingagentstack.com/tool/levelfields/): alerts only. Safety: event-driven AI alerts: monitors ~6,300 companies and matches events (buybacks, leadership changes, lawsuits) to historical price reactions. Source: https://www.levelfields.ai/trade-the-signal-annual (checked 2026-10-19) - [Prospero.ai](https://tradingagentstack.com/tool/prospero-ai/): research only. Safety: free app with 10 stock signals ranked 1-100 (options sentiment, profitability, breakout scores) built from institutional-flow data. Source: https://learn.prospero.ai/ (checked 2026-10-19) - [Santiment](https://tradingagentstack.com/tool/santiment/): research only. Safety: on-chain, social and development metrics for crypto; official MCP connector for AI agents; Sanbase Pro insights. Source: https://app.santiment.net/pricing (checked 2026-10-19) - [LunarCrush](https://tradingagentstack.com/tool/lunarcrush/): research only. Safety: social sentiment and engagement metrics (Galaxy Score, AltRank); MCP server at lunarcrush.ai/mcp on paid plans. Source: https://lunarcrush.com/pricing/ (checked 2026-10-19) - [Kaito](https://tradingagentstack.com/tool/kaito/): research only. Safety: AI search and sentiment over crypto social, news and research (Kaito Pro, API); the Yaps leaderboard was sunset in Jan 2026, the research product continues. Source: https://pro.kaito.ai/pricing (checked 2026-10-19) - [Intellectia](https://tradingagentstack.com/tool/intellectia/): research only. Safety: AI Stock Picker: a weekly list of 10 long-only stocks (Mondays 8am ET) plus AI screeners, technical signals and an AI agent; the site says picks are not buy recommendations. Source: https://intellectia.ai/pricing (checked 2026-10-19) - [Nansen](https://tradingagentstack.com/tool/nansen/): research only. Safety: on-chain wallet labels and smart-money flows; official Nansen MCP server for AI agents, billed per API credit. Source: https://docs.nansen.ai/getting-started/credits (checked 2026-10-19) ## Prediction market APIs & agents - [Kalshi API](https://tradingagentstack.com/tool/kalshi-api/): live; separate demo environment with mock funds (demo.kalshi.co). Safety: official REST and WebSocket Trade API with RSA-PSS or Ed25519 signed keys; demo credentials are separate from production; since Oct 15, registered MCP clients can be granted read access to your portfolio (balances, positions, orders, fills) through a read::mcp_portfolio OAuth grant that cannot execute orders or change funding; no official trading MCP (community MCPs exist). Source: https://docs.kalshi.com/getting_started/demo_env (checked 2026-10-19) - [Polymarket API](https://tradingagentstack.com/tool/polymarket-api/): live only (no testnet); CLOB V2 since Apr 28 2026. Safety: wallet-signed orders on the international CLOB (V2 SDKs: py-clob-client-v2, clob-client-v2); separate Polymarket US API with Ed25519 keys and an order preview endpoint. Source: https://docs.polymarket.com/v2-migration (checked 2026-10-19) - [Polymarket Agents](https://tradingagentstack.com/tool/polymarket-agents/): live (trades via the Polymarket API). Safety: official open-source framework (MIT) with LangChain/Chroma RAG, news sourcing and a CLI that can execute trades; repository archived (read-only, last commit Nov 2024), predates CLOB V2. Source: https://github.com/Polymarket/agents (checked 2026-10-19) - [Polymarket US API](https://tradingagentstack.com/tool/polymarket-us-api/): live. Safety: official Python and TypeScript SDKs; orders support preview, cancel and cancel-all; keys need an ID-verified Polymarket US account. Source: https://docs.polymarket.us/api-reference/sdks/introduction (checked 2026-10-19) - [Limitless Exchange](https://tradingagentstack.com/tool/limitless-exchange/): live only; no sandbox or testnet (docs say rehearse with minimum-size live orders). Safety: official trading MCP at api.limitless.exchange/mcp with a human approving each order in chat; open-source agents-starter repo runs dry-run by default. Source: https://docs.limitless.exchange/developers/introduction (checked 2026-10-19) - [Manifold Markets API](https://tradingagentstack.com/tool/manifold-markets-api/): play money (mana); no real-money risk. Safety: bots and automated trading explicitly permitted; API keys per user; good for testing agent logic without real money. Source: https://docs.manifold.markets/api (checked 2026-10-19) - [Kalshi MCP Server (community)](https://tradingagentstack.com/tool/kalshi-mcp-server-community/): demo and live; trading off by default. Safety: community MIT MCP: two-step prepare/confirm order flow, safety caps that can only be tightened at runtime, demo mode, client-side rate limiting; an Oct 17 fix re-checks the daily and per-order caps and the cash reserve at confirm time (before it, several prepared orders could together exceed the daily cap), and runtime limit changes are tighten-only unless MCP_ALLOW_RUNTIME_LIMIT_LOOSENING=1 is set; the fix is on main, and the latest tagged release (v0.1.12, Jul 13) predates it. Source: https://github.com/cejor6/kalshi-mcp-server (checked 2026-10-19) - [Prediction.Markets API](https://tradingagentstack.com/tool/prediction-markets-api/): data only (no execution). Safety: read-only unified API and MCP across venues with a consensus probability; MIT-licensed MCP. Source: https://prediction.markets/developers (checked 2026-10-19) ## Risk, safety & paper trading - [Canopii Trust Index](https://tradingagentstack.com/tool/canopii-trust-index/): n/a. Safety: scans MCP servers for tool poisoning, prompt injection, supply-chain, credential risk. Source: https://index.canopii.dev/ (checked 2026-10-19) - [Agent Market Arena (AMA)](https://tradingagentstack.com/tool/agent-market-arena-ama/): live benchmark. Safety: research code. Source: https://arxiv.org/abs/2510.11695 (checked 2026-10-19) - [NeMo Guardrails](https://tradingagentstack.com/tool/nemo-guardrails/): n/a. Safety: open-source (Apache-2.0) programmable rails for LLM apps: input/output checks, topical limits and tool-call control. Source: https://github.com/NVIDIA-NeMo/Guardrails (checked 2026-10-19) - [Guardrails AI](https://tradingagentstack.com/tool/guardrails-ai/): n/a. Safety: open-source (Apache-2.0) validators for LLM output, e.g. schema checks before an order payload is sent. Source: https://github.com/guardrails-ai/guardrails (checked 2026-10-19) - [Invariant Guardrails](https://tradingagentstack.com/tool/invariant-guardrails/): n/a. Safety: open-source (Apache-2.0) runtime policy rules for agent and MCP tool calls, e.g. block an order tool unless conditions are met. Source: https://github.com/invariantlabs-ai/invariant (checked 2026-10-19) - [PolicyGate Capital](https://tradingagentstack.com/tool/policygate-capital/): n/a. Safety: open-source pre-trade policy layer: each proposed order returns ALLOW, DENY or MODIFY; daily-loss limits, drawdown kill switch, exposure caps, order-rate limits. Source: https://github.com/policygate/policygate-capital (checked 2026-10-19) - [Alpaca Paper Trading](https://tradingagentstack.com/tool/alpaca-paper-trading/): paper (simulated) with the same API as live. Safety: separate paper endpoint and keys, so an agent can't touch real money by mistake. Source: https://docs.alpaca.markets/us/docs/paper-trading (checked 2026-10-19) - [IBKR Paper Trading Account](https://tradingagentstack.com/tool/ibkr-paper-trading-account/): paper with $1M simulated buying power. Safety: separate paper login usable with TWS API and IBKR's MCP; best way to dry-run an agent on IBKR. Source: https://www.interactivebrokers.com/campus/trading-lessons/how-to-open-an-ibkr-paper-trading-account/ (checked 2026-10-19) - [TradingView Paper Trading](https://tradingagentstack.com/tool/tradingview-paper-trading/): paper. Safety: manual and alert-driven simulated trading; useful to sanity-check a strategy before wiring a bot. Source: https://www.tradingview.com/support/solutions/43000516466-paper-trading-main-functionality/ (checked 2026-10-19) ## On-chain & DeFi trading agents - [Banana Gun](https://tradingagentstack.com/tool/banana-gun/): live only (real funds). Safety: Telegram bot plus Banana Pro web terminal: sniping, copy trading, limit orders, honeypot/rug checks; custodial bot wallets, so only fund what you can lose. Source: https://docs.bananagun.io/banana-token/banana-bonus (checked 2026-10-19) - [Maestro](https://tradingagentstack.com/tool/maestro/): live only. Safety: Telegram bot: snipe, copy trade, limit orders; bot-managed wallets. Source: https://docs.maestrobots.com/sniper/faq/fees (checked 2026-10-19) - [BONKbot](https://tradingagentstack.com/tool/bonkbot/): live only. Safety: Solana Telegram swap bot with limit orders; wallet export available. Source: https://docs.bonkbot.io/fee-structure (checked 2026-10-19) - [Trojan](https://tradingagentstack.com/tool/trojan/): live only. Safety: Solana Telegram bot and web app: copy trading, sniping, DCA, limit orders, Jito MEV protection; private-key export. Source: https://docs.trojanonsolana.com/about-trojan-on-solana/using-trojan-on-solana (checked 2026-10-19) - [1inch Swap API](https://tradingagentstack.com/tool/1inch-swap-api/): live (on-chain swaps). Safety: DEX aggregator API: quotes and swap calldata your own wallet or agent signs; you keep custody. Source: https://business.1inch.com/pricing (checked 2026-10-19) - [0x Swap API](https://tradingagentstack.com/tool/0x-swap-api/): live (on-chain swaps). Safety: aggregator API for swaps, gasless and cross-chain trades; you sign transactions with your own wallet. Source: https://0x.org/pricing (checked 2026-10-19) - [Jupiter API](https://tradingagentstack.com/tool/jupiter-api/): live (on-chain swaps). Safety: Solana swap aggregator API; keyless access at 0.5 req/s for testing; execute calls cost 0 credits. Source: https://developers.jup.ag/docs/portal/plans (checked 2026-10-19) - [Coinbase AgentKit](https://tradingagentstack.com/tool/coinbase-agentkit/): live and testnet. Safety: open-source toolkit giving an AI agent its own wallet (CDP, Privy or keypair providers) with transfer, swap and custom actions; use testnets and spending limits first. Source: https://github.com/coinbase/agentkit (checked 2026-10-19) - [Solana Agent Kit](https://tradingagentstack.com/tool/solana-agent-kit/): live and devnet. Safety: open-source (SendAI) plugin toolkit for Solana agents: token, DeFi, NFT and Blinks actions with embedded-wallet support. Source: https://github.com/sendaifun/solana-agent-kit (checked 2026-10-19) ## Copy trading & strategy marketplaces - [eToro CopyTrader](https://tradingagentstack.com/tool/etoro-copytrader/): live; free $100k virtual portfolio for demo. Safety: copy up to 100 investors; set a loss threshold that stops copying and closes copied positions; stop or adjust any time. Source: https://www.etoro.com/en-us/copytrader/ (checked 2026-10-19) - [ZuluTrade](https://tradingagentstack.com/tool/zulutrade/): live and demo. Safety: copy signal providers through a linked partner broker; set per-provider loss limits. Source: https://www.zulutrade.com/pricing (checked 2026-10-19) - [Collective2](https://tradingagentstack.com/tool/collective2/): live AutoTrade at supported brokers; strategies tracked publicly. Safety: marketplace of strategies with public track records; AutoTrade mirrors trades at your broker; you can scale or stop at any time. Source: https://support.collective2.com/hc/en-us/articles/202933794-What-are-the-fees-involved-with-AutoTrading (checked 2026-10-19) - [Darwinex Zero](https://tradingagentstack.com/tool/darwinex-zero/): virtual capital; track record can attract real allocation. Safety: strategy-builder side: trade a virtual account and earn performance fees if Darwinex allocates; strict risk metrics. Source: https://www.darwinexzero.com/pricing (checked 2026-10-19) - [MQL5 Signals](https://tradingagentstack.com/tool/mql5-signals/): live and demo signals. Safety: copy MetaTrader signal providers inside MT4/MT5; subscriber sets max deposit share and stop-loss on copying. Source: https://www.mql5.com/en/signals/rules (checked 2026-10-19) - [Bybit Copy Trading](https://tradingagentstack.com/tool/bybit-copy-trading/): live. Safety: copy master traders on Bybit; set per-copy stop-loss and amount. Source: https://www.bybit.com/en/help-center/article/Copy-Trading-Profit-Sharing-Explained (checked 2026-10-19) - [Bitget Copy Trading](https://tradingagentstack.com/tool/bitget-copy-trading/): live. Safety: copy elite traders; high-water-mark profit share so profits are never shared twice. Source: https://www.bitget.com/support/articles/12560603889437 (checked 2026-10-19) ## VPS & hosting for bots - [QuantVPS](https://tradingagentstack.com/tool/quantvps/): n/a. Safety: Windows/Linux VPS near CME (Chicago) for NinjaTrader, TradeStation, MT4/5 and Python bots. Source: https://www.quantvps.com/pricing (checked 2026-10-19) - [ForexVPS.net](https://tradingagentstack.com/tool/forexvps-net/): n/a. Safety: Windows VPS in forex broker data centers (NY4, LD4 and others). Source: https://www.forexvps.net/ (checked 2026-10-19) - [Chocoping](https://tradingagentstack.com/tool/chocoping/): n/a. Safety: low-cost Windows forex VPS near major broker servers. Source: https://chocoping.com/ (checked 2026-10-19) - [DigitalOcean Droplets](https://tradingagentstack.com/tool/digitalocean-droplets/): n/a. Safety: general Linux cloud VMs; good for self-hosted crypto bots; snapshots and firewalls. Source: https://www.digitalocean.com/pricing/droplets (checked 2026-10-19) - [Hetzner Cloud](https://tradingagentstack.com/tool/hetzner-cloud/): n/a. Safety: low-cost EU/US cloud VMs; prices adjusted 15 Jun 2026. Source: https://docs.hetzner.com/general/infrastructure-and-availability/price-adjustment/ (checked 2026-10-19) - [AWS Lightsail](https://tradingagentstack.com/tool/aws-lightsail/): n/a. Safety: simple AWS VPS; Tokyo/Singapore/Frankfurt regions are close to many crypto exchange servers. Source: https://aws.amazon.com/lightsail/pricing/ (checked 2026-10-19)