Is Kalshi API safe to connect to an AI agent?

What an AI agent can do

• Live vs paper: live; separate demo environment with mock funds (demo.kalshi.co) source
• Order approval: official REST and WebSocket Trade API with RSA-PSS or Ed25519 signed keys; demo credentials are separate from production; since Oct 15, registered MCP clients can be granted read access to your portfolio (balances, positions, orders, fills) through a read::mcp_portfolio OAuth grant that cannot execute orders or change funding; no official trading MCP (community MCPs exist) source
• Markets: prediction markets
• Pricing: API access free; exchange trading fees apply per contract

Safeguards that exist

• Paper, demo or testnet mode: Paper, demo or testnet mode available source
• Withdrawal permission needed or allowed: Transfers need a separate write::transfer key scope that trading keys don't need (official docs) source
• Scoped keys, permission scopes or IP whitelisting: Scoped access (scopes, read-only mode, dedicated or separate account) source

Safeguards that are missing

• Can it place live orders unattended?: Can place live orders with no documented approval step source
• Order approval or confirmation options: No approval or limit option in our listing source
• Open source or audited: No public source code in our listing source

Sources

• https://docs.kalshi.com/getting_started/demo_env
• https://docs.kalshi.com/getting_started/sub_users_vs_subaccounts

Full listing: Kalshi API · How the score works: Safety score method