Home › Research
Of 13 broker MCP servers, only 3 require you to confirm each order
Who places the order when an AI agent is connected to your brokerage account, across every official broker MCP server we track. Computed from our sourced listings on each build. Last updated 2026-10-17.
AI trades directly: 6
- Alpaca MCP Server Safety 58%: Places orders directly; toolsets can limit it. Source, checked 2026-10-17
- Longbridge MCP Safety 58%: Can place orders; vendor advises starting read-only. Source, checked 2026-10-17
- NinjaTrader MCP (beta) Safety 58%: Agent may trade without asking, depending on your client; risk limits available. Source, checked 2026-10-17
- moomoo MCP Safety 58%: trade:write scope submits and cancels orders. Source, checked 2026-10-17
- Public Hosted MCP Server Safety 17% (partial): Public says trades may run without your input on each one; preflight tools exist. Source, checked 2026-10-17
- Tradier MCP Server Safety 50%: No separate order-confirmation step documented. Source, checked 2026-10-17
You confirm each order: 3
- tastytrade MCP Server Safety 88% (partial): Single-use confirmation token from a dry run. Source, checked 2026-10-17
- TradeStation MCP Safety 86% (partial): Explicit confirmation before every order. Source, checked 2026-10-17
- eToro MCP Connectors Safety 90%: hosted at mcp.public-api.etoro.com; sign in with your eToro account (no API keys); read-only or read-and-act access where available; every action is proposed for your review and approval; funding and withdrawals stay in eToro; Claude Desktop is look-up only for now. Source, checked 2026-10-17
Approval optional: 2
- Robinhood Trading MCP Safety 71% (partial): Trade-approvals toggle (off by default). Source, checked 2026-10-17
- Axi MCP (MT5) Safety 72% (partial): Approval is your AI client's prompt; 'Always allow' skips it. Source, checked 2026-10-17
You place the order: 2
- Interactive Brokers AI Integration (MCP) Safety 88% (partial): Order instructions need IBKR approval. Source, checked 2026-10-17
- Webull Cloud MCP Server Safety 88% (partial): Creates order instructions you confirm in the app. Source, checked 2026-10-17
What this means if you're connecting an agent
- Start in paper. 8 of 13 have a documented paper, demo or sandbox mode. Run there until the agent behaves.
- Grant read-only first. 11 of 13 document scopes, read-only modes or per-tool permissions. Add trading permission only when you need it.
- Use a separate account. Fund a dedicated account with only what the agent may lose; some brokers (e.g. Robinhood) require one.
- Don't rely on your AI client's prompt. 'Always allow' settings can skip it; a broker-side confirmation is stronger.
- Check withdrawals. 10 of 13 have documented that the MCP can't move money out.
Method: groups come from each broker's official MCP docs (see each listing). Scores: safety score method. Full table: broker MCP safety controls. Data: open dataset. Not financial advice.