# Is Arcus safe to connect to an AI agent? | TradingAgentStack

> Is Arcus safe for an AI agent? Can trade unattended. Safety 68%. Safeguards and gaps, each from official sources, checked 2026-11-10.

Canonical: https://tradingagentstack.com/tool/arcus/is-it-safe/

1. [Home](https://tradingagentstack.com/)

2. [Exchanges & brokers for bots](https://tradingagentstack.com/category/bot-exchange/)

3. [Arcus](https://tradingagentstack.com/tool/arcus/)

# Is Arcus safe to connect to an AI agent?

**Can trade unattended.** [Safety 68%](https://tradingagentstack.com/safety-score/) Can trade unattended. Built from our sourced listing, last checked 2026-11-10. Not financial advice.

## What an AI agent can do

- **Live vs paper:** live; public testnet (the app credits about $1,000 of test collateral) [source](https://docs.arcus.xyz/api-reference/authentication)

- **Order approval:** Official MCP server for the docs only (it can't trade). Keys made through the public API are trade-only and expire; a withdrawal needs the wallet's own signature and only pays your own address [source](https://docs.arcus.xyz/api-reference/authentication)

- **Markets:** perpetuals on stocks, indexes, commodities and crypto, tokenized stocks (spot)

- **Pricing:** no API fee; fees are tiered by volume and set per market, with no rates in the docs (the API returns them)

## Safeguards that exist

- **Guardrails outside the agent:** No per-order approval; a scheduled cancel-all (dead-man's switch) limits what is left open if the bot stops (official docs) [source](https://docs.arcus.xyz/api-reference/rate-limits)

- **Test before real money:** Public testnet on Robinhood Chain testnet; the app credits about $1,000 of test collateral (official docs) [source](https://docs.arcus.xyz/guides/fund-testnet-account)

- **Sending funds out:** Keys made through the public API are trade-only; a withdrawal needs the wallet's own signature and only pays the owner's own address (official docs) [source](https://docs.arcus.xyz/api-reference/exchange/submit-withdrawal)

- **Who holds the keys:** Revocable keys with an expiry date, each one bound to one of ten subaccounts (official docs) [source](https://docs.arcus.xyz/concepts/subaccounts)

- **Open source or audited:** Trail of Bits and OpenZeppelin reviewed the on-chain contracts; the matching engine is run by Arcus and is not open source (official docs) [source](https://docs.arcus.xyz/concepts/exchange-architecture)

- **Incident record (last 12 months):** No incident naming this tool in our incident tracker in the last 12 months [source](https://docs.arcus.xyz/api-reference/authentication)

## Safeguards that are missing

- **Human approval:** API orders execute with no per-order approval step [source](https://docs.arcus.xyz/api-reference/authentication)

## Safety score

[Safety 68%](https://tradingagentstack.com/safety-score/) Can trade unattended. If this tool, or an AI agent using it, is wrong, hacked or prompt-injected, how much of your money is at risk? Higher is safer. Not a ranking; affiliate links never affect it. [How it's calculated](https://tradingagentstack.com/safety-score/) · [Incidents](https://tradingagentstack.com/incidents/)

| Input | From official docs or our listing | Points |
| --- | --- | --- |
| Human approval | API orders execute with no per-order approval step [source](https://docs.arcus.xyz/api-reference/authentication) | 0 / 25 |
| Guardrails outside the agent | No per-order approval; a scheduled cancel-all (dead-man's switch) limits what is left open if the bot stops (official docs) [source](https://docs.arcus.xyz/api-reference/rate-limits) | 8 / 15 |
| Test before real money | Public testnet on Robinhood Chain testnet; the app credits about $1,000 of test collateral (official docs) [source](https://docs.arcus.xyz/guides/fund-testnet-account) | 15 / 15 |
| Sending funds out | Keys made through the public API are trade-only; a withdrawal needs the wallet's own signature and only pays the owner's own address (official docs) [source](https://docs.arcus.xyz/api-reference/exchange/submit-withdrawal) | 15 / 15 |
| Who holds the keys | Revocable keys with an expiry date, each one bound to one of ten subaccounts (official docs) [source](https://docs.arcus.xyz/concepts/subaccounts) | 10 / 10 |
| Open source or audited | Trail of Bits and OpenZeppelin reviewed the on-chain contracts; the matching engine is run by Arcus and is not open source (official docs) [source](https://docs.arcus.xyz/concepts/exchange-architecture) | 10 / 10 |
| Incident record (last 12 months) | No incident naming this tool in our incident tracker in the last 12 months ([incident tracker](https://tradingagentstack.com/incidents/)) | 10 / 10 |
| Total | 68% of the points we could check | **68 / 100** |

## Sources

- [https://docs.arcus.xyz/api-reference/authentication](https://docs.arcus.xyz/api-reference/authentication)

- [https://docs.arcus.xyz/api-reference/rate-limits](https://docs.arcus.xyz/api-reference/rate-limits)

- [https://docs.arcus.xyz/guides/fund-testnet-account](https://docs.arcus.xyz/guides/fund-testnet-account)

- [https://docs.arcus.xyz/api-reference/exchange/submit-withdrawal](https://docs.arcus.xyz/api-reference/exchange/submit-withdrawal)

- [https://docs.arcus.xyz/concepts/subaccounts](https://docs.arcus.xyz/concepts/subaccounts)

- [https://docs.arcus.xyz/concepts/exchange-architecture](https://docs.arcus.xyz/concepts/exchange-architecture)

Full listing: [Arcus](https://tradingagentstack.com/tool/arcus/) · How the score works: [Safety score method](https://tradingagentstack.com/safety-score/)

## More safety checks: Exchanges & brokers for bots
[Is Aster safe?](https://tradingagentstack.com/tool/aster/is-it-safe/)[Is Binance safe?](https://tradingagentstack.com/tool/binance/is-it-safe/)[Is Bitget safe?](https://tradingagentstack.com/tool/bitget/is-it-safe/)[Is Bybit safe?](https://tradingagentstack.com/tool/bybit/is-it-safe/)[Is Coinbase Advanced safe?](https://tradingagentstack.com/tool/coinbase-advanced/is-it-safe/)[Is dYdX safe?](https://tradingagentstack.com/tool/dydx/is-it-safe/)[Is Extended safe?](https://tradingagentstack.com/tool/extended/is-it-safe/)[Is Gemini safe?](https://tradingagentstack.com/tool/gemini/is-it-safe/)[Is GMX safe?](https://tradingagentstack.com/tool/gmx/is-it-safe/)[Is Hyperliquid safe?](https://tradingagentstack.com/tool/hyperliquid/is-it-safe/)[Is Kraken safe?](https://tradingagentstack.com/tool/kraken/is-it-safe/)[Is Lighter safe?](https://tradingagentstack.com/tool/lighter/is-it-safe/)[Is OKX safe?](https://tradingagentstack.com/tool/okx/is-it-safe/)[Is Paradex safe?](https://tradingagentstack.com/tool/paradex/is-it-safe/)

Every tool's score: [Safety score for all tools](https://tradingagentstack.com/safety-score/)

Before you pick one, see [the verified AI trading leaderboard](https://tradingagentstack.com/ai-trading-leaderboard/): returns and drawdowns we compute from public venue data, not screenshots, with a 30% drawdown gate. Industry numbers are in the [AI trading bot statistics](https://tradingagentstack.com/ai-trading-bot-statistics/). Run one yourself? [Get your agent verified](https://tradingagentstack.com/get-your-ai-agent-verified/).

## For agents

- [When to use this site, and the page index](https://tradingagentstack.com/llms.txt)
- [Sitemap](https://tradingagentstack.com/sitemap.xml)
- [Contact](https://tradingagentstack.com/contact/)
- [MCP server](https://tradingagentstack.com/mcp/)
- [MCP discovery](https://tradingagentstack.com/.well-known/mcp)