Is tastytrade MCP Server safe to connect to an AI agent?

You confirm each order. Safety 90% You confirm each order. Built from our sourced listing, last checked 2026-10-26. Not financial advice.

What an AI agent can do

Live vs paper: live by default (connects to production unless TASTYTRADE_ENV=sandbox); sandbox available (no market data, resets every 24 hours) source
Order approval: order submit/edit tools require a single-use confirmation token from a dry_run tool (valid 60s, bound to request hash); self-hosted (no tastytrade-hosted endpoint); TASTYTRADE_READ_ONLY=1 blocks write tools; MAX_ORDER_NOTIONAL_USD caps order value (default $50,000); other destructive tools, including order cancels, act on the first call; the API cannot access any money movement actions or endpoints, so the MCP is limited to reading and order placement if trade permissions are granted (direct email confirmation from tastytrade API support, Connor, api.support@tastytrade.com, Oct 23, 2026) source
Markets: tastytrade account (orders, quotes)
Pricing: tastytrade: $0 stock/ETF commissions, $1 per contract to open options ($10 max per leg); no subscription

Can it place live orders unattended?: Live orders need a human confirmation step source
Order approval or confirmation options: Approval/confirmation step documented source
Paper, demo or testnet mode: Paper, demo or testnet mode available source
Withdrawal permission needed or allowed: The API cannot access any money movement actions or endpoints, so the MCP is limited to reading and order placement if trade permissions are granted. Direct email confirmation from tastytrade API support (Connor, api.support@tastytrade.com), Oct 23, 2026. source
Scoped keys, permission scopes or IP whitelisting: OAuth scopes read / trade, and TASTYTRADE_READ_ONLY=1 removes every write tool (official docs) source

Safety score

Safety 90% You confirm each order. Not a ranking; affiliate links never affect it. How it's calculated

Input	From our listing	Points
Can it place live orders unattended?	Live orders need a human confirmation step	25 / 25
Order approval or confirmation options	Approval/confirmation step documented	15 / 15
Paper, demo or testnet mode	Paper, demo or testnet mode available	15 / 15
Withdrawal permission needed or allowed	The API cannot access any money movement actions or endpoints, so the MCP is limited to reading and order placement if trade permissions are granted. Direct email confirmation from tastytrade API support (Connor, api.support@tastytrade.com), Oct 23, 2026. source	15 / 15
Scoped keys, permission scopes or IP whitelisting	OAuth scopes read / trade, and TASTYTRADE_READ_ONLY=1 removes every write tool (official docs) source	10 / 10
Open source or audited	No public source code in our listing	0 / 10
Sourced and verified facts	Facts from the vendor's official docs	10 / 10
Total	90% of the points we could check	90 / 100