Is NinjaTrader MCP safe to connect to an AI agent?
AI can trade directly. Safety 58%
What an AI agent can do
- Live vs paper: Demo (simulated) and Live endpoints source
- Order approval: remote OAuth server for Tradovate and NinjaTrader users; separate Demo and Live URLs and accounts; the docs no longer carry the beta, pre-release warning (checked Oct 28, 2026); write tools (orders, risk settings) carry MCP's destructive-action hint so most clients pause for approval, but the agent may trade without asking depending on your client; orders go through the platform's normal pre-trade risk checks, estimate_order gives a dry run, and you can set per-connection exposure and volume caps and a product allowlist when you approve the connection source
- Markets: futures and event contracts in your NinjaTrader or Tradovate account (contracts, quotes, orders, risk)
- Pricing: NinjaTrader plans: Free ($0/mo), Monthly $99/mo or Lifetime $1,499, plus per-side commissions; the MCP docs list no separate fee
Safeguards that exist
- Order approval or confirmation options: No per-order approval; only limits: per-connection exposure and volume caps and an optional product allowlist set on the consent screen, account loss limits and auto-liquidation. estimate_order is a dry run the agent can call, not a human approval step (official docs) source
- Paper, demo or testnet mode: Paper, demo or testnet mode available source
- Withdrawal permission needed or allowed: Accounting tools are read-only (e.g. cash_history); write tools are only orders, risk settings and alerts (official docs) source
- Scoped keys, permission scopes or IP whitelisting: Scoped access (scopes, read-only mode, dedicated or separate account) source
Safeguards that are missing
Safety score
| Input | From our listing | Points |
|---|---|---|
| Can it place live orders unattended? | NinjaTrader: depending on how your client is configured, the agent may place trades without asking for confirmation; no server-side confirmation step source | 0 / 25 |
| Order approval or confirmation options | No per-order approval; only limits: per-connection exposure and volume caps and an optional product allowlist set on the consent screen, account loss limits and auto-liquidation. estimate_order is a dry run the agent can call, not a human approval step (official docs) source | 8 / 15 |
| Paper, demo or testnet mode | Paper, demo or testnet mode available | 15 / 15 |
| Withdrawal permission needed or allowed | Accounting tools are read-only (e.g. cash_history); write tools are only orders, risk settings and alerts (official docs) source | 15 / 15 |
| Scoped keys, permission scopes or IP whitelisting | Scoped access (scopes, read-only mode, dedicated or separate account) | 10 / 10 |
| Open source or audited | No public source code in our listing | 0 / 10 |
| Sourced and verified facts | Facts from the vendor's official docs | 10 / 10 |
| Total | 58% of the points we could check | 58 / 100 |
Sources
Full listing: NinjaTrader MCP · How the score works: Safety score method · TradeStation MCP vs NinjaTrader MCP