# Is NinjaTrader MCP safe to connect to an AI agent?

> Is NinjaTrader MCP safe for an AI agent? AI can trade directly. Safety 58%. Safeguards and gaps, each from official sources, checked 2026-10-30.

Canonical: https://tradingagentstack.com/tool/ninjatrader-mcp/is-it-safe/

1. [Home](https://tradingagentstack.com/)

2. [Broker MCP servers](https://tradingagentstack.com/category/broker-mcp/)

3. [NinjaTrader MCP](https://tradingagentstack.com/tool/ninjatrader-mcp/)

# Is NinjaTrader MCP safe to connect to an AI agent?

**AI can trade directly.** [Safety 58%](https://tradingagentstack.com/safety-score/) Can trade unattended. Built from our sourced listing, last checked 2026-10-30. Not financial advice.

## What an AI agent can do

- **Live vs paper:** Demo (simulated) and Live endpoints [source](https://docs.ninjatrader.com/mcp.md)

- **Order approval:** remote OAuth server for Tradovate and NinjaTrader users; separate Demo and Live URLs and accounts; the docs no longer carry the beta, pre-release warning (checked Oct 28, 2026); write tools (orders, risk settings) carry MCP's destructive-action hint so most clients pause for approval, but the agent may trade without asking depending on your client; orders go through the platform's normal pre-trade risk checks, estimate_order gives a dry run, and you can set per-connection exposure and volume caps and a product allowlist when you approve the connection [source](https://docs.ninjatrader.com/mcp.md)

- **Markets:** futures and event contracts in your NinjaTrader or Tradovate account (contracts, quotes, orders, risk)

- **Pricing:** NinjaTrader plans: Free ($0/mo), Monthly $99/mo or Lifetime $1,499, plus per-side commissions; the MCP docs list no separate fee

## Safeguards that exist

- **Order approval or confirmation options:** No per-order approval; only limits: per-connection exposure and volume caps and an optional product allowlist set on the consent screen, account loss limits and auto-liquidation. estimate_order is a dry run the agent can call, not a human approval step (official docs) [source](https://docs.ninjatrader.com/mcp/pre-trade-risk.md)

- **Paper, demo or testnet mode:** Paper, demo or testnet mode available [source](https://docs.ninjatrader.com/mcp.md)

- **Withdrawal permission needed or allowed:** Accounting tools are read-only (e.g. cash_history); write tools are only orders, risk settings and alerts (official docs) [source](https://docs.ninjatrader.com/mcp.md)

- **Scoped keys, permission scopes or IP whitelisting:** Scoped access (scopes, read-only mode, dedicated or separate account) [source](https://docs.ninjatrader.com/mcp.md)

## Safeguards that are missing

- **Can it place live orders unattended?:** NinjaTrader: depending on how your client is configured, the agent may place trades without asking for confirmation; no server-side confirmation step [source](https://docs.ninjatrader.com/mcp.md)

- **Open source or audited:** No public source code in our listing [source](https://docs.ninjatrader.com/mcp.md)

## Safety score

[Safety 58%](https://tradingagentstack.com/safety-score/) Can trade unattended. Not a ranking; affiliate links never affect it. [How it's calculated](https://tradingagentstack.com/safety-score/)

| Input | From our listing | Points |
| --- | --- | --- |
| Can it place live orders unattended? | NinjaTrader: depending on how your client is configured, the agent may place trades without asking for confirmation; no server-side confirmation step [source](https://docs.ninjatrader.com/mcp.md) | 0 / 25 |
| Order approval or confirmation options | No per-order approval; only limits: per-connection exposure and volume caps and an optional product allowlist set on the consent screen, account loss limits and auto-liquidation. estimate_order is a dry run the agent can call, not a human approval step (official docs) [source](https://docs.ninjatrader.com/mcp/pre-trade-risk.md) | 8 / 15 |
| Paper, demo or testnet mode | Paper, demo or testnet mode available | 15 / 15 |
| Withdrawal permission needed or allowed | Accounting tools are read-only (e.g. cash_history); write tools are only orders, risk settings and alerts (official docs) [source](https://docs.ninjatrader.com/mcp.md) | 15 / 15 |
| Scoped keys, permission scopes or IP whitelisting | Scoped access (scopes, read-only mode, dedicated or separate account) | 10 / 10 |
| Open source or audited | No public source code in our listing | 0 / 10 |
| Sourced and verified facts | Facts from the vendor's official docs | 10 / 10 |
| Total | 58% of the points we could check | **58 / 100** |

## Sources

- [https://docs.ninjatrader.com/mcp.md](https://docs.ninjatrader.com/mcp.md)

- [https://docs.ninjatrader.com/mcp/pre-trade-risk.md](https://docs.ninjatrader.com/mcp/pre-trade-risk.md)

Full listing: [NinjaTrader MCP](https://tradingagentstack.com/tool/ninjatrader-mcp/) · How the score works: [Safety score method](https://tradingagentstack.com/safety-score/) · [TradeStation MCP vs NinjaTrader MCP](https://tradingagentstack.com/compare/tradestation-mcp-vs-ninjatrader-mcp/)

## For agents

- [When to use this site, and the page index](https://tradingagentstack.com/llms.txt)
- [Sitemap](https://tradingagentstack.com/sitemap.xml)
- [Contact](https://tradingagentstack.com/contact/)
- [MCP server](https://tradingagentstack.com/mcp/)
- [MCP discovery](https://tradingagentstack.com/.well-known/mcp)