Is OctoBot safe to connect to an AI agent?

What an AI agent can do

• Live vs paper: live and paper (virtual money) source
• Order approval: open-source (GPL-3.0) bot with DCA, grid, AI/ChatGPT, TradingView and copy bots; ccxt connectors to Binance, OKX, Coinbase, Kucoin, Bybit, Hyperliquid and more; crypto only source
• Markets: crypto
• Pricing: self-hosted open source is free; OctoBot cloud has a free Investor plan (up to 10 bots, 14-day paper trading); Investor Plus $9.99/mo, Pro $29.99/mo, 7-day trial

Safeguards that exist

• Paper, demo or testnet mode: Paper, demo or testnet mode available source
• Withdrawal permission needed or allowed: OctoBot needs only read and trade permissions; without withdrawal enabled on the key, the exchange blocks withdrawals (official docs) source
• Scoped keys, permission scopes or IP whitelisting: OctoBot relies on exchange-scoped keys and advises granting no permissions beyond read and trade (official docs) source
• Open source or audited: Open source source

Safeguards that are missing

• Can it place live orders unattended?: Can place live orders with no documented approval step source
• Order approval or confirmation options: No approval or limit option in our listing source

Sources

• https://www.octobot.cloud/en/pricing
• https://www.octobot.cloud/en/investing/what-is-an-exchange-api-key

Full listing: OctoBot · How the score works: Safety score method