Is Alpaca Trading API safe to connect to an AI agent?

What an AI agent can do

• Live vs paper: live and paper source
• Order approval: n/a source
• Markets: US stocks, ETFs, options, crypto
• Pricing: free Basic data plan (real-time IEX; SIP history older than 15 min); Algo Trader Plus $99/mo (all US exchanges + OPRA); no separate ~$9 unlimited SIP-style plan for new Trading API subscribers

Safeguards that exist

• Paper, demo or testnet mode: Paper, demo or testnet mode available source
• Withdrawal permission needed or allowed: Trading API can't withdraw: deposits and withdrawals are handled in the web dashboard, not via the API (official docs) source
• Scoped keys, permission scopes or IP whitelisting: OAuth apps request scopes (account:write, trading, data); access is read-only unless a scope grants more (official docs) source

Safeguards that are missing

• Can it place live orders unattended?: Can place live orders with no documented approval step source
• Order approval or confirmation options: No approval or limit option in our listing source
• Open source or audited: No public source code in our listing source

Sources

• https://docs.alpaca.markets/us/docs/about-market-data-api
• https://alpaca.markets/learn/fund-live-trading-account
• https://docs.alpaca.markets/docs/using-oauth2-and-trading-api

Full listing: Alpaca Trading API · How the score works: Safety score method · Alpaca API vs Interactive Brokers API