# Is CCXT MCP Server safe to connect to an AI agent?

> Is CCXT MCP Server safe for an AI agent? Approval is optional. Safety 85%. Safeguards and gaps, each from official sources, checked 2026-10-26.

Canonical: https://tradingagentstack.com/tool/ccxt-mcp-server/is-it-safe/

1. [Home](https://tradingagentstack.com/)

2. [Broker MCP servers](https://tradingagentstack.com/category/broker-mcp/)

3. [CCXT MCP Server](https://tradingagentstack.com/tool/ccxt-mcp-server/)

# Is CCXT MCP Server safe to connect to an AI agent?

**Approval is optional.** [Safety 85%](https://tradingagentstack.com/safety-score/) Approval is optional. Built from our sourced listing, last checked 2026-10-26. Not financial advice.

## What an AI agent can do

- **Live vs paper:** live and sandbox/testnet accounts (per exchange); out of the box only public market data; trading must be enabled per account in the config file, and `"trading": true` works only on sandbox/demo accounts (live needs `"trading": "live"`) [source](https://github.com/ccxt/ccxt/tree/master/mcp)

- **Order approval:** official local MCP server from the ccxt project (MIT), runs over stdio and keys never appear in tool parameters; capability tiers (market, read, trading, funds for withdrawals, raw write endpoints) are off until set in the config file, which no tool can edit; writes are previewed and confirmed by default on live accounts (confirm: always | live | never), checked against a per-order USD cap you set (maxOrderValue), optional daily cap and symbol allowlist, and logged to an append-only audit journal [source](https://github.com/ccxt/ccxt/tree/master/mcp)

- **Markets:** crypto spot and derivatives on 100+ exchanges via the unified ccxt API, prediction markets (e.g. Polymarket)

- **Pricing:** free, open source (MIT); exchange trading fees apply

## Safeguards that exist

- **Can it place live orders unattended?:** Live orders possible; an approval or preview step exists but is optional [source](https://github.com/ccxt/ccxt/tree/master/mcp)

- **Order approval or confirmation options:** Approval/confirmation step documented [source](https://github.com/ccxt/ccxt/tree/master/mcp)

- **Paper, demo or testnet mode:** Paper, demo or testnet mode available [source](https://github.com/ccxt/ccxt/tree/master/mcp)

- **Withdrawal permission needed or allowed:** Withdraw/transfer is a separate 'funds' tier, off by default, enabled per account only in the config file; docs advise keys with withdrawal disabled (official docs) [source](https://github.com/ccxt/ccxt/tree/master/mcp)

- **Scoped keys, permission scopes or IP whitelisting:** Per-account opt-in capability tiers (market, trading, funds, implicitWrites) that a conversation cannot change, plus symbol allowlists (official docs) [source](https://github.com/ccxt/ccxt/tree/master/mcp)

- **Open source or audited:** Open source [source](https://github.com/ccxt/ccxt/tree/master/mcp)

## Safeguards that are missing

None of the seven inputs scored zero.

## Safety score

[Safety 85%](https://tradingagentstack.com/safety-score/) Approval is optional. Not a ranking; affiliate links never affect it. [How it's calculated](https://tradingagentstack.com/safety-score/)

| Input | From our listing | Points |
| --- | --- | --- |
| Can it place live orders unattended? | Live orders possible; an approval or preview step exists but is optional | 10 / 25 |
| Order approval or confirmation options | Approval/confirmation step documented | 15 / 15 |
| Paper, demo or testnet mode | Paper, demo or testnet mode available | 15 / 15 |
| Withdrawal permission needed or allowed | Withdraw/transfer is a separate 'funds' tier, off by default, enabled per account only in the config file; docs advise keys with withdrawal disabled (official docs) [source](https://github.com/ccxt/ccxt/tree/master/mcp) | 15 / 15 |
| Scoped keys, permission scopes or IP whitelisting | Per-account opt-in capability tiers (market, trading, funds, implicitWrites) that a conversation cannot change, plus symbol allowlists (official docs) [source](https://github.com/ccxt/ccxt/tree/master/mcp) | 10 / 10 |
| Open source or audited | Open source | 10 / 10 |
| Sourced and verified facts | Facts from the vendor's official docs | 10 / 10 |
| Total | 85% of the points we could check | **85 / 100** |

## Sources

- [https://github.com/ccxt/ccxt/tree/master/mcp](https://github.com/ccxt/ccxt/tree/master/mcp)

Full listing: [CCXT MCP Server](https://tradingagentstack.com/tool/ccxt-mcp-server/) · How the score works: [Safety score method](https://tradingagentstack.com/safety-score/) · [Alpaca MCP vs CCXT MCP Server](https://tradingagentstack.com/compare/alpaca-mcp-vs-ccxt-mcp-server/)

## For agents

- [When to use this site, and the page index](https://tradingagentstack.com/llms.txt)
- [Sitemap](https://tradingagentstack.com/sitemap.xml)
- [Contact](https://tradingagentstack.com/contact/)
- [MCP server](https://tradingagentstack.com/mcp/)
- [MCP discovery](https://tradingagentstack.com/.well-known/mcp)