# Is Lighter safe to connect to an AI agent?

> Is Lighter safe for an AI agent? Can trade unattended. Safety 68%. Safeguards and gaps, each from official sources, checked 2026-10-30.

Canonical: https://tradingagentstack.com/tool/lighter/is-it-safe/

1. [Home](https://tradingagentstack.com/)

2. [Exchanges & brokers for bots](https://tradingagentstack.com/category/bot-exchange/)

3. [Lighter](https://tradingagentstack.com/tool/lighter/)

# Is Lighter safe to connect to an AI agent?

**Can trade unattended.** [Safety 68%](https://tradingagentstack.com/safety-score/) Can trade unattended. Built from our sourced listing, last checked 2026-10-30. Not financial advice.

## What an AI agent can do

- **Live vs paper:** live; public testnet (testnet.app.lighter.xyz, settles to Sepolia) [source](https://docs.lighter.xyz/developers/integration-guides/api-keys)

- **Order approval:** No official MCP server; experimental agent kit in its GitHub org. API keys trade and can withdraw only to the account owner's own Ethereum address; read-only tokens and maker-only keys available [source](https://docs.lighter.xyz/developers/integration-guides/api-keys)

- **Markets:** crypto perpetuals, crypto spot

- **Pricing:** no API fee; Standard accounts 0% maker / 0% taker with a 300 ms speed bump, Premium 0.004% / 0.028%

## Safeguards that exist

- **Order approval or confirmation options:** No per-order approval; maker-only keys (post-only orders and cancels) and read-only tokens limit what a credential can do (official docs) [source](https://docs.lighter.xyz/developers/integration-guides/api-keys)

- **Paper, demo or testnet mode:** Public testnet app and API settling to Sepolia (official docs) [source](https://docs.lighter.xyz/developers/getting-started/environments)

- **Withdrawal permission needed or allowed:** A key can make a 'secure withdrawal' only back to the account owner's own Ethereum address; sending to anyone else needs the wallet's signature (official docs) [source](https://docs.lighter.xyz/developers/integration-guides/api-keys)

- **Scoped keys, permission scopes or IP whitelisting:** Separate key per account and sub-account, maker-only keys and read-only tokens (5 minutes to 10 years) (official docs) [source](https://docs.lighter.xyz/developers/integration-guides/api-keys)

- **Open source or audited:** Circuits and contracts are public on GitHub (contracts under a source-available licence) and the docs link 9 audit reports (official docs) [source](https://docs.lighter.xyz/security/security-audits)

## Safeguards that are missing

- **Can it place live orders unattended?:** API orders execute with no per-order approval step [source](https://docs.lighter.xyz/developers/integration-guides/api-keys)

## Safety score

[Safety 68%](https://tradingagentstack.com/safety-score/) Can trade unattended. Not a ranking; affiliate links never affect it. [How it's calculated](https://tradingagentstack.com/safety-score/)

| Input | From our listing | Points |
| --- | --- | --- |
| Can it place live orders unattended? | API orders execute with no per-order approval step [source](https://docs.lighter.xyz/developers/integration-guides/api-keys) | 0 / 25 |
| Order approval or confirmation options | No per-order approval; maker-only keys (post-only orders and cancels) and read-only tokens limit what a credential can do (official docs) [source](https://docs.lighter.xyz/developers/integration-guides/api-keys) | 8 / 15 |
| Paper, demo or testnet mode | Public testnet app and API settling to Sepolia (official docs) [source](https://docs.lighter.xyz/developers/getting-started/environments) | 15 / 15 |
| Withdrawal permission needed or allowed | A key can make a 'secure withdrawal' only back to the account owner's own Ethereum address; sending to anyone else needs the wallet's signature (official docs) [source](https://docs.lighter.xyz/developers/integration-guides/api-keys) | 15 / 15 |
| Scoped keys, permission scopes or IP whitelisting | Separate key per account and sub-account, maker-only keys and read-only tokens (5 minutes to 10 years) (official docs) [source](https://docs.lighter.xyz/developers/integration-guides/api-keys) | 10 / 10 |
| Open source or audited | Circuits and contracts are public on GitHub (contracts under a source-available licence) and the docs link 9 audit reports (official docs) [source](https://docs.lighter.xyz/security/security-audits) | 10 / 10 |
| Sourced and verified facts | Facts from the vendor's official docs | 10 / 10 |
| Total | 68% of the points we could check | **68 / 100** |

## Sources

- [https://docs.lighter.xyz/developers/integration-guides/api-keys](https://docs.lighter.xyz/developers/integration-guides/api-keys)

- [https://docs.lighter.xyz/developers/getting-started/environments](https://docs.lighter.xyz/developers/getting-started/environments)

- [https://docs.lighter.xyz/security/security-audits](https://docs.lighter.xyz/security/security-audits)

Full listing: [Lighter](https://tradingagentstack.com/tool/lighter/) · How the score works: [Safety score method](https://tradingagentstack.com/safety-score/)

## For agents

- [When to use this site, and the page index](https://tradingagentstack.com/llms.txt)
- [Sitemap](https://tradingagentstack.com/sitemap.xml)
- [Contact](https://tradingagentstack.com/contact/)
- [MCP server](https://tradingagentstack.com/mcp/)
- [MCP discovery](https://tradingagentstack.com/.well-known/mcp)