# Is tastytrade MCP Server safe to connect to an AI agent?

> Is tastytrade MCP Server safe for an AI agent? You confirm each order. Safety 100%. Safeguards and gaps, each from official sources, checked 2026-10-27.

Canonical: https://tradingagentstack.com/tool/tastytrade-mcp-server/is-it-safe/

1. [Home](https://tradingagentstack.com/)

2. [Broker MCP servers](https://tradingagentstack.com/category/broker-mcp/)

3. [tastytrade MCP Server](https://tradingagentstack.com/tool/tastytrade-mcp-server/)

# Is tastytrade MCP Server safe to connect to an AI agent?

**You confirm each order.** [Safety 100%](https://tradingagentstack.com/safety-score/) You confirm each order. Built from our sourced listing, last checked 2026-10-27. Not financial advice.

## What an AI agent can do

- **Live vs paper:** live by default (connects to production unless TASTYTRADE_ENV=sandbox); sandbox available (no market data, resets every 24 hours) [source](https://developer.tastytrade.com/docs/sdks-and-tools/mcp-server/)

- **Order approval:** order submit/edit tools require a single-use confirmation token from a dry_run tool (valid 60s, bound to request hash); self-hosted (no tastytrade-hosted endpoint); TASTYTRADE_READ_ONLY=1 blocks write tools; MAX_ORDER_NOTIONAL_USD caps order value (default $50,000); other destructive tools, including order cancels, act on the first call; the API cannot access any money movement actions or endpoints, so the MCP is limited to reading and order placement if trade permissions are granted (direct email confirmation from tastytrade API support, Connor, api.support@tastytrade.com, Oct 23, 2026). Open source: tastytrade publishes the server source for self-hosting at https://github.com/tastytrade/tastytrade-mcp under the MIT License (LICENSE file, Copyright (c) 2026 tastytrade). Peter, lead Product Manager for tastytrade's MCP, pointed us to it by email on 2026-10-26 (api.support@tastytrade.com) [source](https://developer.tastytrade.com/docs/sdks-and-tools/mcp-server/)

- **Markets:** tastytrade account (orders, quotes)

- **Pricing:** tastytrade: $0 stock/ETF commissions, $1 per contract to open options ($10 max per leg); no subscription

## Safeguards that exist

- **Can it place live orders unattended?:** Live orders need a human confirmation step [source](https://developer.tastytrade.com/docs/sdks-and-tools/mcp-server/)

- **Order approval or confirmation options:** Approval/confirmation step documented [source](https://developer.tastytrade.com/docs/sdks-and-tools/mcp-server/)

- **Paper, demo or testnet mode:** Paper, demo or testnet mode available [source](https://developer.tastytrade.com/docs/sdks-and-tools/mcp-server/)

- **Withdrawal permission needed or allowed:** The API cannot access any money movement actions or endpoints, so the MCP is limited to reading and order placement if trade permissions are granted. Direct email confirmation from tastytrade API support (Connor, api.support@tastytrade.com), Oct 23, 2026. [source](mailto:api.support@tastytrade.com)

- **Scoped keys, permission scopes or IP whitelisting:** OAuth scopes read / trade, and TASTYTRADE_READ_ONLY=1 removes every write tool (official docs) [source](https://developer.tastytrade.com/docs/sdks-and-tools/mcp-server/)

- **Open source or audited:** Open source [source](https://developer.tastytrade.com/docs/sdks-and-tools/mcp-server/)

## Safeguards that are missing

None of the seven inputs scored zero.

## Safety score

[Safety 100%](https://tradingagentstack.com/safety-score/) You confirm each order. Not a ranking; affiliate links never affect it. [How it's calculated](https://tradingagentstack.com/safety-score/)

| Input | From our listing | Points |
| --- | --- | --- |
| Can it place live orders unattended? | Live orders need a human confirmation step | 25 / 25 |
| Order approval or confirmation options | Approval/confirmation step documented | 15 / 15 |
| Paper, demo or testnet mode | Paper, demo or testnet mode available | 15 / 15 |
| Withdrawal permission needed or allowed | The API cannot access any money movement actions or endpoints, so the MCP is limited to reading and order placement if trade permissions are granted. Direct email confirmation from tastytrade API support (Connor, api.support@tastytrade.com), Oct 23, 2026. [source](mailto:api.support@tastytrade.com) | 15 / 15 |
| Scoped keys, permission scopes or IP whitelisting | OAuth scopes read / trade, and TASTYTRADE_READ_ONLY=1 removes every write tool (official docs) [source](https://developer.tastytrade.com/docs/sdks-and-tools/mcp-server/) | 10 / 10 |
| Open source or audited | Open source | 10 / 10 |
| Sourced and verified facts | Facts from the vendor's official docs | 10 / 10 |
| Total | 100% of the points we could check | **100 / 100** |

## Sources

- [https://developer.tastytrade.com/docs/sdks-and-tools/mcp-server/](https://developer.tastytrade.com/docs/sdks-and-tools/mcp-server/)

- [mailto:api.support@tastytrade.com](mailto:api.support@tastytrade.com)

Full listing: [tastytrade MCP Server](https://tradingagentstack.com/tool/tastytrade-mcp-server/) · How the score works: [Safety score method](https://tradingagentstack.com/safety-score/) · [tastytrade MCP vs Robinhood MCP](https://tradingagentstack.com/compare/tastytrade-mcp-vs-robinhood-mcp/)

## For agents

- [When to use this site, and the page index](https://tradingagentstack.com/llms.txt)
- [Sitemap](https://tradingagentstack.com/sitemap.xml)
- [Contact](https://tradingagentstack.com/contact/)
- [MCP server](https://tradingagentstack.com/mcp/)
- [MCP discovery](https://tradingagentstack.com/.well-known/mcp)