Is Kalshi MCP Server (community) safe to connect to an AI agent?

Approval is optional. Safety 81% Approval is optional. Built from our sourced listing, last checked 2026-10-26. Not financial advice.

What an AI agent can do

Live vs paper: demo and live; trading off by default source
Order approval: community MIT MCP: two-step prepare/confirm order flow, safety caps that can only be tightened at runtime, demo mode, client-side rate limiting; an Oct 17 fix re-checks the daily and per-order caps and the cash reserve at confirm time (before it, several prepared orders could together exceed the daily cap), and runtime limit changes are tighten-only unless MCP_ALLOW_RUNTIME_LIMIT_LOOSENING=1 is set; the fix is on main, and the latest tagged release (v0.1.12, Jul 13) predates it source
Markets: prediction markets
Pricing: free, open source

Can it place live orders unattended?: Live orders possible; an approval or preview step exists but is optional source
Order approval or confirmation options: Approval/confirmation step documented source
Paper, demo or testnet mode: Paper, demo or testnet mode available source
Withdrawal permission needed or allowed: The 26 listed tools cover market data, portfolio reads and orders; none withdraw or transfer funds (official docs) source
Scoped keys, permission scopes or IP whitelisting: Read-only by default; order placement needs a separate trading flag, prod needs its own opt-in, with per-order and daily caps (official docs) source
Open source or audited: Open source source

None of the seven inputs scored zero.

Safety score

Safety 81% Approval is optional. Not a ranking; affiliate links never affect it. How it's calculated

Input	From our listing	Points
Can it place live orders unattended?	Live orders possible; an approval or preview step exists but is optional	10 / 25
Order approval or confirmation options	Approval/confirmation step documented	15 / 15
Paper, demo or testnet mode	Paper, demo or testnet mode available	15 / 15
Withdrawal permission needed or allowed	The 26 listed tools cover market data, portfolio reads and orders; none withdraw or transfer funds (official docs) source	15 / 15
Scoped keys, permission scopes or IP whitelisting	Read-only by default; order placement needs a separate trading flag, prod needs its own opt-in, with per-order and daily caps (official docs) source	10 / 10
Open source or audited	Open source	10 / 10
Sourced and verified facts	Community or third-party project, sourced	6 / 10
Total	81% of the points we could check	81 / 100