Is moomoo MCP safe to connect to an AI agent?
AI can trade directly. Safety 58%
What an AI agent can do
- Live vs paper: Simulated (paper) trading is authorized separately from live trading; paper trading becomes available with market data authorization, so an agent can use paper trading without live trade access. moomoo says its docs may currently be wrong on this (moomoo OpenAPI team, email to TradingAgentStack, 2026-10-26) source
- Order approval: Leaving the trade scope off at consent keeps the agent from acting on the trading account. Simulated (paper) trading is authorized separately from live trading, and paper trading becomes available with market data authorization, so an agent can use paper trading without live trade access. Hosted at mcp.moomoo.com/mcp; OAuth 2.1, no API key. moomoo says its docs may currently be wrong on this (moomoo OpenAPI team, email to TradingAgentStack, 2026-10-26) source
- Markets: quotes, portfolio, orders; HK, US, CN, SG, JP, MY markets (OpenAPI)
- Pricing: No extra fee for trading via the moomoo API (same as the app); some market data requires buying quote cards
Safeguards that exist
- Order approval or confirmation options: Only limits or read-only modes, no per-order approval source
- Paper, demo or testnet mode: Simulated (paper) trading is authorized separately from live trading. Paper trading becomes available with market data authorization, so an agent can use paper trading without live trade access. moomoo says its docs may currently be wrong on this. moomoo OpenAPI team, email to TradingAgentStack, 2026-10-26. source
- Withdrawal permission needed or allowed: OAuth scopes are only quote:read/write and trade:read/write; no funding scope (official docs) source
- Scoped keys, permission scopes or IP whitelisting: Leaving the trade scope off at consent keeps the agent from acting on the trading account. moomoo OpenAPI team, email to TradingAgentStack, 2026-10-26. source
Safeguards that are missing
Safety score
| Input | From our listing | Points |
|---|---|---|
| Can it place live orders unattended? | Can place live orders with no documented approval step | 0 / 25 |
| Order approval or confirmation options | Only limits or read-only modes, no per-order approval | 8 / 15 |
| Paper, demo or testnet mode | Simulated (paper) trading is authorized separately from live trading. Paper trading becomes available with market data authorization, so an agent can use paper trading without live trade access. moomoo says its docs may currently be wrong on this. moomoo OpenAPI team, email to TradingAgentStack, 2026-10-26. source | 15 / 15 |
| Withdrawal permission needed or allowed | OAuth scopes are only quote:read/write and trade:read/write; no funding scope (official docs) source | 15 / 15 |
| Scoped keys, permission scopes or IP whitelisting | Leaving the trade scope off at consent keeps the agent from acting on the trading account. moomoo OpenAPI team, email to TradingAgentStack, 2026-10-26. source | 10 / 10 |
| Open source or audited | No public source code in our listing | 0 / 10 |
| Sourced and verified facts | Facts from the vendor's official docs | 10 / 10 |
| Total | 58% of the points we could check | 58 / 100 |
Sources
Full listing: moomoo MCP · How the score works: Safety score method · Webull MCP vs moomoo MCP