# Is Mangrove safe to connect to an AI agent?

> Is Mangrove safe for an AI agent? Can trade unattended. Safety 68%. Safeguards and gaps, each from official sources, checked 2026-10-31.

Canonical: https://tradingagentstack.com/tool/mangrove/is-it-safe/

1. [Home](https://tradingagentstack.com/)

2. [AI trading agents](https://tradingagentstack.com/category/ai-trading-agent/)

3. [Mangrove](https://tradingagentstack.com/tool/mangrove/)

# Is Mangrove safe to connect to an AI agent?

**Can trade unattended.** [Safety 68%](https://tradingagentstack.com/safety-score/) Can trade unattended. Built from our sourced listing, last checked 2026-10-31. Not financial advice.

## What an AI agent can do

- **Live vs paper:** paper schedules run on MangroveAI with no funds at risk; live execution on Robinhood, 1inch DEX swaps and Kraken OAuth [source](https://github.com/MangroveTechnologies/mangrove-agent)

- **Order approval:** open-source (MIT) local MCP server and Claude Code plugin for the hosted MangroveAI service (strategies, backtests, signals; risk gates and sizing run on MangroveAI); DEX swaps are signed locally by an encrypted wallet on your machine, signing is limited to 1inch router calls and the approvals before them, and live swaps need a backup-confirmed wallet; Robinhood orders use broker OAuth with a per-order cap and limit prices within 0.25% of Mangrove's evaluation price, and Robinhood's own approval setting is left as you set it; Kraken bring-your-own-key (withdrawal disabled) is dry-run validation only, while keyless Kraken OAuth means Mangrove holds the authorized grant and places real orders [source](https://github.com/MangroveTechnologies/mangrove-agent)

- **Markets:** crypto spot and whole-share US equities on Robinhood (long-only, limit orders), DEX swaps through 1inch on 10 EVM chains, Kraken (orders through Mangrove's keyless OAuth connection)

- **Pricing:** free MangroveAI API key, or pay per call in USDC with x402 (default local spend cap $25, $1 per payment); Markets read tools $0.01 each; other prices are not published

## Safeguards that exist

- **Order approval or confirmation options:** No per-order approval from Mangrove; only limits: a per-order cap and limit prices within 0.25% of Mangrove's evaluation price on Robinhood, and deterministic risk gates run on MangroveAI (official docs) [source](https://github.com/MangroveTechnologies/mangrove-agent/blob/main/docs/robinhood-execution.md)

- **Paper, demo or testnet mode:** Paper, demo or testnet mode available [source](https://github.com/MangroveTechnologies/mangrove-agent)

- **Withdrawal permission needed or allowed:** Local swap signing is limited to 1inch router calls and the approvals before them (any other transaction is refused before the key is decrypted); a Kraken bring-your-own key is created with withdrawal disabled (official docs) [source](https://github.com/MangroveTechnologies/mangrove-agent)

- **Scoped keys, permission scopes or IP whitelisting:** Kraken keys are least-privilege (query and order, withdrawal disabled); Robinhood uses broker OAuth; local access uses a separate per-install credential (official docs) [source](https://github.com/MangroveTechnologies/mangrove-agent)

- **Open source or audited:** Open source [source](https://github.com/MangroveTechnologies/mangrove-agent)

## Safeguards that are missing

- **Can it place live orders unattended?:** Live swaps and strategy activation take confirm=true from the agent, not a human; Robinhood orders run without approval unless your Robinhood approval setting requires it [source](https://github.com/MangroveTechnologies/mangrove-agent/blob/main/docs/robinhood-execution.md)

## Safety score

[Safety 68%](https://tradingagentstack.com/safety-score/) Can trade unattended. Not a ranking; affiliate links never affect it. [How it's calculated](https://tradingagentstack.com/safety-score/)

| Input | From our listing | Points |
| --- | --- | --- |
| Can it place live orders unattended? | Live swaps and strategy activation take confirm=true from the agent, not a human; Robinhood orders run without approval unless your Robinhood approval setting requires it [source](https://github.com/MangroveTechnologies/mangrove-agent/blob/main/docs/robinhood-execution.md) | 0 / 25 |
| Order approval or confirmation options | No per-order approval from Mangrove; only limits: a per-order cap and limit prices within 0.25% of Mangrove's evaluation price on Robinhood, and deterministic risk gates run on MangroveAI (official docs) [source](https://github.com/MangroveTechnologies/mangrove-agent/blob/main/docs/robinhood-execution.md) | 8 / 15 |
| Paper, demo or testnet mode | Paper, demo or testnet mode available | 15 / 15 |
| Withdrawal permission needed or allowed | Local swap signing is limited to 1inch router calls and the approvals before them (any other transaction is refused before the key is decrypted); a Kraken bring-your-own key is created with withdrawal disabled (official docs) [source](https://github.com/MangroveTechnologies/mangrove-agent) | 15 / 15 |
| Scoped keys, permission scopes or IP whitelisting | Kraken keys are least-privilege (query and order, withdrawal disabled); Robinhood uses broker OAuth; local access uses a separate per-install credential (official docs) [source](https://github.com/MangroveTechnologies/mangrove-agent) | 10 / 10 |
| Open source or audited | Open source | 10 / 10 |
| Sourced and verified facts | Facts from the vendor's official docs | 10 / 10 |
| Total | 68% of the points we could check | **68 / 100** |

## Sources

- [https://github.com/MangroveTechnologies/mangrove-agent](https://github.com/MangroveTechnologies/mangrove-agent)

- [https://github.com/MangroveTechnologies/mangrove-agent/blob/main/docs/robinhood-execution.md](https://github.com/MangroveTechnologies/mangrove-agent/blob/main/docs/robinhood-execution.md)

Full listing: [Mangrove](https://tradingagentstack.com/tool/mangrove/) · How the score works: [Safety score method](https://tradingagentstack.com/safety-score/)

## For agents

- [When to use this site, and the page index](https://tradingagentstack.com/llms.txt)
- [Sitemap](https://tradingagentstack.com/sitemap.xml)
- [Contact](https://tradingagentstack.com/contact/)
- [MCP server](https://tradingagentstack.com/mcp/)
- [MCP discovery](https://tradingagentstack.com/.well-known/mcp)