Is Kraken safe to connect to an AI agent?

What an AI agent can do

• Live vs paper: live; built-in spot and futures paper trading in Kraken CLI (no API key needed) source
• Order approval: Official open-source Kraken CLI with a built-in MCP server (151 commands); default exposes only market, account and paper; trade/funding tools are flagged dangerous and need acknowledged=true unless --allow-dangerous; dead man's switch for live runs source
• Markets: crypto spot, crypto futures, xStocks, forex
• Pricing: CLI and MCP free; trading fees per Kraken schedule

Safeguards that exist

• Can it place live orders unattended?: Live orders possible; an approval or preview step exists but is optional source
• Order approval or confirmation options: Approval/confirmation step documented source
• Paper, demo or testnet mode: Paper, demo or testnet mode available source
• Withdrawal permission needed or allowed: Withdrawal not needed: Separate Withdraw Funds permission source
• Scoped keys, permission scopes or IP whitelisting: IP whitelisting: Optional IP whitelist and key expiry source
• Open source or audited: Open source source

Safeguards that are missing

None of the seven inputs scored zero.

Sources

• https://docs.kraken.com/home/mcp

Full listing: Kraken · How the score works: Safety score method