Is Hummingbot safe to connect to an AI agent?

What an AI agent can do

• Live vs paper: live (self-hosted); paper connectors source
• Order approval: open-source (Apache-2.0) Python framework for market making and agentic strategies; 50+ exchange connectors incl. Binance, OKX, Bybit, Coinbase, Kraken, Hyperliquid, dYdX, Uniswap; Condor AI harness source
• Markets: crypto spot, crypto perpetuals, DEX, Kalshi
• Pricing: free, self-hosted

Safeguards that exist

• Paper, demo or testnet mode: Paper, demo or testnet mode available source
• Withdrawal permission needed or allowed: Hummingbot has no deposit or withdrawal functionality and says withdraw/transfer permissions are not needed on exchange keys (official docs) source
• Scoped keys, permission scopes or IP whitelisting: Docs recommend exchange API keys with only read and trade permissions enabled (official docs) source
• Open source or audited: Open source source

Safeguards that are missing

• Can it place live orders unattended?: Can place live orders with no documented approval step source
• Order approval or confirmation options: No approval or limit option in our listing source

Sources

• https://hummingbot.org/
• https://hummingbot.org/client/connect/

Full listing: Hummingbot · How the score works: Safety score method