Is dYdX safe to connect to an AI agent?

What an AI agent can do

• Live vs paper: live; public testnet with faucet source
• Order approval: No official MCP server. Permissioned keys limited by message type, market and sub-account can be barred from withdrawals and transfers source
• Markets: crypto perpetuals
• Pricing: no API fee; tier 1 0.01% maker / 0.05% taker (set by governance)

Safeguards that exist

• Order approval or confirmation options: No per-order approval; permissioned keys filter which actions, markets and sub-accounts a key can touch (official docs) source
• Paper, demo or testnet mode: Public testnet front end, indexer and faucet (official docs) source
• Withdrawal permission needed or allowed: A permissioned trading key can be barred from withdrawals and transfers entirely (official docs) source
• Scoped keys, permission scopes or IP whitelisting: Permissioned keys scoped by message type, market and sub-account, removable at any time (official docs) source
• Open source or audited: Open source source

Safeguards that are missing

• Can it place live orders unattended?: API orders execute with no per-order approval step source

Sources

• https://docs.dydx.xyz/concepts/trading/authenticators
• https://docs.dydx.xyz/interaction/endpoints

Full listing: dYdX · How the score works: Safety score method