Which venues let an AI agent trade?
Can AI trading agents be trusted with real money?
An AI trading agent can be trusted with real money only as far as two things can be verified: the controls around it and its track record. The controls come first. They decide whether a person approves each order, whether real money is used at all, how large one order can be, and whether the agent can move funds out. As of 2026-10-01 we found no independent measure of live results for retail AI trading agents, so a record has to be verified one seller at a time.
Venues set these controls differently, and some are off by default. Here is what each venue’s own pages say, as of the dates in the ledger below.
- An approval step before each order. tastytrade’s server needs a confirmation token before any tool that submits or changes an order (tastytrade’s entry). Coinbase’s Agentic Wallet returns an approval link for each transaction (Coinbase’s entry). Robinhood turns trade approvals off by default for outside agents (Robinhood’s entry).
- Practice mode first. Alpaca’s server starts in paper trading and Webull’s in a sandbox, so real orders need a setting change (Alpaca’s entry, Webull’s entry). A record made in practice mode leaves out real costs.
- A cap on order size. tastytrade has a setting that caps how much buying power one order can use. Crypto.com lists a weekly limit and a kill switch (Crypto.com’s entry).
- No way to move funds out. Polymarket says: “A Session Key cannot withdraw funds from the Deposit Wallet.” (Polymarket’s entry). Crypto.com lists a trade-only API key.
A control limits what an agent can do. It does not show whether the agent’s trades make money. For that, use the nine questions in How do you verify an AI trading agent’s track record? FINRA lists “AI agents acting autonomously without human validation and approval” among the risks it sees (what regulators have said).
Some brokerages and exchanges now let an AI agent place orders for you. This page lists which ones, what each venue’s own pages say about controls, and the date we read them. Some venues make a person approve each order (human-in-the-loop); others do not.
Statuses on this page are reported from each venue’s own pages, as of the dates shown. They are not our verification. Read what we do check.
Status key. live means the venue’s pages describe it as available with none of the conditions below. limited means beta, sandbox by default, region-restricted, or no approval step by default, with the caveat stated. announced means the venue’s own wording is “coming soon.” Entries are alphabetical within each section. The order is not a ranking, and we name no winner.
Brokerages — stocks and options
-
Alpaca
limited as of 2026-10-01An agent can place orders for stocks, options and crypto through Alpaca’s Trading API MCP server. The server starts in paper mode, and real orders need a setting change.
who Alpaca.
The docs say “The server defaults to paper trading.” Live trading requires setting
ALPACA_PAPER_TRADE=false. The docs also say “Review AI-suggested orders before confirming.” That is advice, not an enforced approval step. Docs updated 2026-09-09. A record made in paper mode leaves out real costs (see the track-record guide). -
Public
limited as of 2026-10-01An agent can place orders through Public’s hosted MCP server or through in-app Agents. Public says an order through the server is real: “Placing a trade through any MCP client is a real order using real money in your Public account.”
who Public.
Public’s own pages disagree on approvals. Its marketing page says “Nothing executes until you approve it.” Its Agentic Brokerage Agreement says “Once you have confirmed and activated your Agent, we will not alert you in advance of any pending Transaction, nor will we await confirmation from you in advance of executing that Transaction.” We carry both (marketing page; agreement). Changelog: MCP server available 2026-03-09; hosted MCP 2026-06-25 (Public API changelog).
source Public API docs — hosted MCP
-
Robinhood built-in agents
announced as of 2026-10-01Robinhood’s own “Robinhood Agents” and “Agent Apps,” run inside a dedicated Agentic account that you fund. Robinhood says they are coming to eligible U.S. customers.
who Robinhood.
The press release of 2026-09-29 says: “Robinhood Agents and Agent Apps are coming soon to eligible U.S. customers.” Trade approvals are “turned on by default.” Robinhood says it “does not control, supervise, monitor, recommend, or audit these AI agents.” Caveat: the press release says “coming soon,” while Robinhood’s support pages describe the built-in agents in the present tense. We carry the press-release wording. More on Robinhood’s agentic trading page. Robinhood’s usage figure is in the box at the top of this page.
-
Robinhood external agents
limited as of 2026-10-01An outside agent connects through the Robinhood Trading MCP, called “Agentic Trading,” and places equity trades in a dedicated MCP account. Robinhood says: “Your agent can only place trades in your Robinhood Agentic account.”
who Robinhood; U.S. customers.
Launched 2026-05-27, “launching in beta with support for equities only out of the gate.” The support page (undated) says: “Trade approvals are turned on by default for Robinhood Agents (built-in agents), and are turned off by default for MCP accounts (external agents).” It adds: “if you’ve asked your agent to take action without asking your approval, it can place trades without your confirmation.”
-
tastytrade
live as of 2026-10-01An agent can place and change orders through tastytrade’s open-source MCP server, which you run yourself. Five tools need a confirmation token.
who tastytrade.
The docs say: “Five tools require a confirmation token — the five that submit or change an order.” Tokens are valid for 60 seconds. The setting
MAX_ORDER_NOTIONAL_USDis a “Ceiling on an order’s buying-power impact (default 50000).” Docs are undated; the repository was created 2026-08-14. -
Webull
limited as of 2026-10-01An agent can place orders for stocks, options, futures, crypto and event contracts through Webull’s OpenAPI MCP server. The server starts in a sandbox.
who Webull.
The server “defaults to UAT (sandbox).” Live orders require
WEBULL_ENVIRONMENT=prod. You can disable the trading tools. Regions include the US, Hong Kong, Japan, Singapore, Malaysia, the UK, Mexico, Brazil and South Africa. The changelog has entries from 2026-04-04 to 2026-09-22.source Webull developer changelog
Crypto exchanges
-
Binance
live as of 2026-10-01An agent can trade spot and futures, convert assets, and use an on-chain wallet skill across several chains, through Binance’s Skills Hub on GitHub.
who Binance.
The skills say: “Prod transactions — always ask user to type CONFIRM before executing.” The repository provides the skills “as is.”
-
Bybit
live as of 2026-10-01An agent can trade spot and derivatives through Bybit’s official MCP server and skills.
who Bybit.
“Every mainnet write operation shows a structured summary card — user must type CONFIRM.” The npm package, v2.1.22, was published 2026-09-22.
source Bybit API docs
-
Coinbase Agentic Wallet
limited as of 2026-10-01An agent can trade from a Coinbase wallet through the Wallet MCP. Trading is on the Base network only, and every trade is on-chain.
who Coinbase.
Coinbase marks it Beta. Per its docs, “every write call ... returns an approval URL” and “the user manually approves each transaction.”
-
Coinbase for Agents
live as of 2026-10-01An agent can trade spot crypto, US derivatives and US equities through a remote MCP server with OAuth, or through a command-line tool.
who Coinbase.
Equities were added 2026-08-21. The changelog says: “Trade S&P 500 US stocks through the same orders and products commands used for spot crypto.” You sign in and choose permissions and portfolios. No enforced per-trade approval is documented for the exchange product. x402 data payments are capped at 5 USDC per payment. More in the Coinbase for Agents skill file.
-
Crypto.com
live as of 2026-10-01An agent can buy, sell and swap through Crypto.com’s agent skills and its CLI and MCP tools.
who Crypto.com.
The project lists a confirmation prompt, a trade-only API key, a weekly limit and a kill switch.
-
Gemini
live as of 2026-10-01An agent can manage orders, funds and accounts through Gemini’s MCP server and agent skills.
who Gemini.
A changelog entry of 2026-05-27 added subaccount patterns “for agentic trading.”
-
Kraken
limited as of 2026-10-01An agent can place orders through Kraken CLI, which has a built-in MCP server that “exposes all CLI commands as tools for LLM agents.”
who Kraken.
Kraken lists “151 commands, paper trading, scripting, and AI agent support.” Guarded mode requires
acknowledged=truefor dangerous calls. The project calls itself “Experimental software.” xStocks are “not available in the USA.” Version 0.4.1 was released 2026-08-07 (Kraken CLI repository).source Kraken docs — SDKs and tools
-
OKX
live as of 2026-10-01An agent can trade spot, perpetual swaps, futures and options, and run automated “grid” and “DCA” bots, through OKX’s Agent Trade Kit (MCP, CLI and skills).
who OKX.
Demo mode and read-only mode are available. “Every tool that moves money is marked [CAUTION].” The docs are undated; the repository was created 2026-03-03. We found no OKX “agent marketplace” page.
source OKX docs — Agent Trade Kit
Prediction markets
-
Kalshi
live as of 2026-10-01Kalshi offers an API for programmatic trading of event contracts, with a demo environment.
who Kalshi.
We found no agent-specific program, MCP server or skills in Kalshi’s docs, changelog (latest entry 2026-10-01) or GitHub organization. Kalshi is a regulated exchange, not a blockchain: we have no source saying its trades are public, so a record there is not recomputable by an outsider.
source Kalshi API docs
-
Polymarket
limited as of 2026-10-01An agent can trade through Polymarket’s CLI and agent-skills, or through a Session Key. Polymarket says: “A Session Key cannot withdraw funds.”
who Polymarket.
Trades settle on-chain, so wallet activity and trades are public for each wallet — a record here is recomputable, with the limits stated below. U.S. users “can close existing positions but cannot open new ones” (geoblock docs). The CLI is “early, experimental software.”
On-chain venues and tooling — trades are public
On these venues a wallet’s trades are public, so a record can be recomputed. Label: recomputable, with two limits. An address is not a person, and dollar results need an outside price source. What would prove a claim: the wallet address, its full list of transactions, and an outside price source. See question 2 of the track-record guide.
-
Hyperliquid
live as of 2026-10-01Hyperliquid’s docs describe “API wallets,” a delegated signing key that the docs call an “agent.” This entry covers that key only.
who Hyperliquid.
Term collision: the docs’ word “agent” means a signing key, not an AI program. Fills for any address can be queried without authentication, at “at most 2000 most recent fills” (info endpoint docs). Docs are undated.
-
Uniswap, Jupiter and Solana Agent Kit (build-time tooling)
limited as of 2026-10-01Tools for people who build agents that swap on public chains: Uniswap’s
uniswap-ai, Jupiter’s Solana CLI, and the third-party Solana Agent Kit.who Uniswap; Jupiter; Solana Agent Kit is third-party (SendAI).
These are build-time tooling and command-line tools, not a trading service. Swaps settle on public chains. Jupiter’s CLI is “pre-v1 (early alpha).” Repositories: Uniswap/uniswap-ai, jup-ag/cli, sendaifun/solana-agent-kit.
Interactive Brokers, Schwab, Fidelity and E*TRADE: no agent program documented on pages we could reach as of 2026-10-01. That is what we could not find, not a statement that none exists.
What have regulators said about agents that trade?
- 2025-12-09, FINRA. Its 2026 Annual Regulatory Oversight Report, written for member firms, lists risks that include “AI agents acting autonomously without human validation and approval” and “Agents may act beyond the user’s actual or intended scope and authority.” (FINRA report, generative AI section)
- 2026-06-23, a letter from eight U.S. House members to the SEC. This is a legislators’ letter, not an SEC action, and we found no SEC reply. Titled “Request for Information Re: Agentic Trading,” it says: “Retail brokerage platforms have begun allowing users to give AI agents the ability to automate investment decisions and trade stocks on users’ behalf.” It asks whether the SEC has “required or recommended guardrails such as funding limits, position limits, order-size limits, trade approval procedures, transaction logs.” (the letter, PDF)
- 2026-07-06, FCA (UK), Mills Review. “AI will not only be a technology to assist people, but will recommend actions, initiate transactions, and execute decisions within agreed parameters.” (FCA Mills Review)
- 2026-10-01, what we did not find. We found no regulator page that addresses a retail user’s own agent placing trades. FINRA and Monetary Authority of Singapore (MAS) guidance covers firms’ own AI. The FCA’s review anticipates delegation. We found no SEC statement on agentic trading.
Entries stay on this page when a venue pauses or closes a program, with the arc stated. For whether any of this pays, read What is agentic trading, and does it make money? and How do you verify an AI trading agent’s track record? For products sold as crypto-trading agents, and how far each one’s claims can be verified, read Which AI agents trade crypto, and can their claims be verified? For viral claims about agents on these venues, see the fact-check lane. Back to The Economy.