Is GMX safe to connect to an AI agent?

What an AI agent can do

• Live vs paper: live; testnet contracts on Arbitrum Sepolia and Avalanche Fuji source
• Order approval: Official agent skills and a Claude Code plugin; MCP server not yet released. No exchange API keys: bots sign with a wallet, and delegated subaccount signers trade with an expiry and an action cap and can't withdraw source
• Markets: crypto perpetuals (pool-based, oracle-priced)
• Pricing: no API fee; 0.04% or 0.06% to open or close, plus price impact, borrowing and funding

Safeguards that exist

• Order approval or confirmation options: No per-order approval; a delegated signer has an expiry and a maximum action count (official docs) source
• Paper, demo or testnet mode: Contracts deployed on Arbitrum Sepolia and Avalanche Fuji (no testnet app) (official docs) source
• Withdrawal permission needed or allowed: A delegated subaccount signer can't withdraw, and order proceeds return to the main account (official docs) source
• Scoped keys, permission scopes or IP whitelisting: Delegated subaccount signers with expiry, action caps and gasless revocation (official docs) source
• Open source or audited: Open source source

Safeguards that are missing

• Can it place live orders unattended?: API orders execute with no per-order approval step source

Sources

• https://docs.gmx.io/docs/api/contracts/delegated-trading
• https://docs.gmx.io/docs/api/contracts/addresses

Full listing: GMX · How the score works: Safety score method