learn · agents and markets
What is agentic trading, and does it make money?
Agentic trading is when an AI agent places orders for stocks, crypto or other assets on a person’s account. It differs from agentic commerce, where an agent buys a service. In trading, the agent buys an asset that can lose value. As of 2026-10-01, several brokers and exchanges let an agent place orders, and we found no independent measurement of whether it makes money.
Part of the Learn path. Every term links to the glossary the first time it appears. Every claim about results carries one of three labels: recomputable, vendor-claimed or unverifiable. The section “Does agentic trading make money?” explains them.
What is agentic trading, and how is it different from agentic commerce?
Agentic trading is an AI agent placing orders to buy or sell assets, such as stocks or crypto, on a person’s account. Agentic commerce is an agent paying for a service. The difference is what gets bought. In trading, the thing bought can lose value, and an order that goes through is usually hard to take back. Kraken’s own tool puts it plainly: “Orders, withdrawals, and transfers are irreversible once processed.”
Take OTTO, our example agent. OTTO buys OCR, which is text pulled out of scanned pages, at $0.01 a page. That is commerce: OTTO pays a seller for a job, like hiring a contractor, and gets a receipt. OTTO is invented for teaching and describes nothing but OTTO.
Now take a second invented agent that buys 10 shares of a company’s stock. That is trading. The shares are not a finished job, like the OCR. They are something the person now holds, and what they hold can fall in value.
Who lets an agent trade today?
As of 2026-10-01, brokerages, crypto exchanges, prediction markets and on-chain venues each document a way for an agent to place orders. Each line below comes from the venue’s own pages. The groups come in that order. Venues are in alphabetical order inside each group, which is not a ranking, and we name no winner.
Many of these offer an MCP server, which is how an agent connects to a venue’s tools. Paper trading and sandbox mode are practice settings that use no real money. Where a source page has no date, we say so.
Which brokerages let an agent trade?
- Alpaca. Its Trading API MCP server places orders for stocks, options and crypto and defaults to paper trading. Its docs were updated 2026-09-09.
- Public. It added an MCP server on 2026-03-09 and a hosted MCP on 2026-06-25. Its docs say a trade through any MCP client is “a real order using real money in your Public account.”
- Robinhood, external agents. The Robinhood Trading MCP (“Agentic Trading”) launched 2026-05-27 for US customers, in beta “with support for equities only out of the gate.” Agents trade in a dedicated Robinhood MCP account.
- Robinhood, built-in agents. A press release of 2026-09-29 says “Robinhood Agents and Agent Apps are coming soon to eligible U.S. customers,” with trade approvals “turned on by default.” Support pages describe them in the present tense, and we carry the press-release wording.
- tastytrade. Its open-source MCP server runs on your own machine and requires a confirmation token on the tools that submit or change an order. The page is undated, and the code repository was created 2026-08-14.
- Webull. Its OpenAPI MCP server places orders for stocks, options, futures, crypto and event contracts in several regions, including the US and UK. It “defaults to UAT (sandbox),” and its changelog entries run from 2026-04-04 to 2026-09-22.
For E*TRADE, Fidelity, Interactive Brokers and Schwab, we found no agent program documented on pages we could reach. That is a limit of what we could fetch. It is not a statement about what they offer.
Which crypto exchanges let an agent trade?
Spot means buying the asset itself. Futures, options and perpetual swaps are derivatives, meaning contracts tied to an asset’s price.
- Binance. Its Binance Skills Hub on GitHub covers spot, futures, convert and an on-chain wallet skill across several chains, and asks the user to type CONFIRM before live transactions. It is offered “as is,” and our source page is undated.
- Bybit. It has an official MCP server and skills for spot and derivatives, and each live write operation needs the user to type CONFIRM. Its software package, version 2.1.22, was published 2026-09-22.
- Coinbase Agentic Wallet. Its Wallet MCP works on the Base network only for trading and is marked Beta. The user approves each transaction.
- Coinbase for Agents. It is a remote MCP server with sign-in, plus a command-line tool, for spot crypto, US derivatives and US stocks. Stocks were added 2026-08-21; the user chooses permissions and portfolios, and we found no enforced per-trade approval documented.
- Crypto.com. Its agent skills, command-line tool and MCP server cover buy, sell and swap, with a confirmation prompt, a trade-only API key, a weekly limit and a kill switch. Our source page is undated.
- Gemini. Its MCP server and agent skills cover orders, funds and accounts. A changelog entry of 2026-05-27 added subaccount patterns “for agentic trading.”
- Kraken. The Kraken CLI has a built-in MCP server, and its guarded mode requires
acknowledged=truefor dangerous calls. Its page says “Experimental software,” and version 0.4.1 is dated 2026-08-07. - OKX. Its Agent Trade Kit (MCP server, command-line tool and skills) covers spot, perpetual swaps, futures, options and automated trading bots, with a demo mode and a read-only mode. The page is undated, and the code repository was created 2026-03-03.
Which prediction markets let an agent trade?
- Kalshi. It offers an API for programmatic trading of event contracts. We found no agent-specific program there. It is a regulated exchange, not a blockchain, so its trades are not public.
- Polymarket. It offers a command-line tool, agent skills and Session Keys, and its docs say “A Session Key cannot withdraw funds.” Trades settle on-chain, so a wallet’s trades are public. US users “can close existing positions but cannot open new ones.”
Which on-chain venues let an agent trade?
On these venues, trades settle on public chains, so anyone can look them up.
- Hyperliquid. Its “API wallets” are a delegated signing key that its docs call an “agent.” It is not an AI program; anyone can query the fills for any address without signing in, up to “at most 2000 most recent fills.” The docs are undated.
- Jupiter. It is a command-line tool for Solana, a public chain, labelled “pre-v1 (early alpha).” Its swaps settle on that chain.
- Solana Agent Kit. It is third-party tooling used when building an agent. Its swaps settle on a public chain.
- Uniswap. Its
uniswap-aitooling is used when building an agent. Its swaps settle on a public chain.
Open the full ledger of venues that let agents trade, with a source for every line.
How big is it, by the numbers that exist?
Only a few numbers exist, and none counts agent-placed trades. Robinhood published one usage figure, and we count payments for tools in one of our own categories. Neither one shows how many trades agents placed or how those trades turned out.
What has Robinhood said about usage?
On 2026-09-29, Robinhood published this vendor-claimed figure in its announcement:
“Since launch, over 150,000 customers have opened agentic trading accounts and now, agents use Robinhood’s tools almost 30 million times a day.”
The figure counts accounts opened and tool uses. It does not count trades or dollars. It does not separate looking things up from placing orders. It is self-reported and unaudited. What would prove it: a count of orders placed by agents, audited or published by an outside party such as a regulator.
What do our own numbers show?
Our index sorts listings into capability categories. As of the 2026-09-20 generation, the category “trading-execution” held 1,632 listings, 1,360 of them from verified-tier sellers, and 297 sellers.
In the closed week 2026-09-07 to 2026-09-13 (computed 2026-09-20), the category received 69,902 verified payments totalling $19,358.93 across 186 sellers. Those are payments for tools, such as data feeds, analytics and execution services, made in USDC on Base. They are not trading results.
That week, trading-execution received more verified payments than any other category. The next highest was search-retrieval, at 38,930. Payments-infrastructure moved the most dollars, $174,578.81 across 7,036 payments — many more dollars over far fewer payments. A seller that sits in several categories counts in each one, so category totals add up to more than the deduplicated total.
Our weekly readout is paused, so this is the latest computed week, not the current one. Recompute it: the weekly category totals carry the window, the method version and the JSON behind the figures; the methodology defines “verified.”
What numbers could we not find?
We found no count of agent-placed trades from any venue on the pages we could reach. We also found no regulator page that covers a person’s own agent placing trades.
What do agents actually pay for when they trade?
Among the highest-earning tools in this category, most sell information, not orders. Of the 40 verified trading-execution listings ranked highest by 30-day verified revenue, 24 describe market data, 4 describe execution or swaps, and 3 describe signals or analysis. We print only those three counts. The ranking counts what sellers earned from tool sales, not anyone’s trading results.
Here, market data means price oracles, on-chain analytics and an economic calendar. Sellers write the descriptions, and our editor sorted them on 2026-10-01. We name no seller.
We place a listing in this category when its description mentions “trade,” “trading,” “swap,” “DEX,” “arbitrage,” “yield,” “portfolio” or “DeFi.” The rule matches words in a description.
Does agentic trading make money?
As of 2026-10-01, we found no independent measurement of how retail AI trading agents do with live accounts, after costs. Nobody we asked to look found one either. The only agent-level figures we found come from research tests, and each has limits. Regulators warn about false claims of results.
What did research tests find?
Three papers tested AI language models as traders. Each is a test, not a live account, and we treat them as published research we have not re-run. They are in alphabetical order.
- FINSABER (arXiv 2505.07078, version 6, 2026-06-26): “previously reported LLM advantages deteriorate significantly under broader cross-section and over a longer-term evaluation.” In plain words, earlier advantages shrank on more stocks and longer periods. (LLMs are AI language models.)
- LiveTradeBench (arXiv 2511.03628, 2025-11-05): it covers 50 trading days and does not account for fees and spreads. The authors write that “high LMArena scores do not imply superior trading outcomes.” (LMArena is a public ranking of AI models.)
- StockBench (arXiv 2510.02209, version 2, 2026-03-02): it covers 82 trading days and does not model costs. The authors write that “most models struggle to outperform the simple buy-and-hold baseline,” which means simply buying and holding.
What would prove a live result: a dated order history from a real account, with fees counted.
What do the human base rates show?
These two findings describe people, before AI agents. They are context, not a measure of agents. We quote each as published and have not recomputed either.
- ESMA, the European Securities and Markets Authority, 2018-03-27: “74-89% of retail accounts typically lose money” trading CFDs, a type of derivative.
- Barber, Lee, Liu and Odean, Journal of Financial Markets, 2014. They studied day traders in Taiwan from 1992 to 2006 and wrote: “Less than 1% of the day trader population is able to predictably and reliably earn positive abnormal returns net of fees.” (Net of fees means after fees.)
What have regulators said?
These warnings are about marketing claims and fraud. They are in date order.
- The CFTC (US Commodity Futures Trading Commission), 2024-01-25: fraudsters “tout automated trading algorithms, trade signal strategies, and crypto-asset trading schemes that promise unreasonably high or guaranteed returns.” It adds: “AI technology can’t predict the future or sudden market changes.” It also says to “consider the impact fees, spreads, and subscription costs would have on returns.”
- The SEC, NASAA and FINRA, 2024-01-25. These are the US Securities and Exchange Commission, the North American Securities Administrators Association and the Financial Industry Regulatory Authority. Their publication “Artificial Intelligence (AI) and Investment Fraud” lists example pitches such as “Our proprietary AI trading system can’t lose!” and “Use AI to Pick Guaranteed Stock Winners!” It says: “Claims of high guaranteed investment returns with little or no risk are classic warning signs of fraud.”
- The SEC, press release 2024-36, 2024-03-18: two advisers settled over “false and misleading statements about their purported use of artificial intelligence,” with “$400,000 in total civil penalties.” Chair Gensler said: “Such AI washing hurts investors.”
- The CFTC, 2025-03-19: generative AI makes it easier to create “false images, voices, videos, live-streaming video chats, social media profiles” and “malicious websites designed to look like financial trading platforms.”
How do we label a claim about results?
Every claim about an agent’s results that we print carries one of three labels. Each label says what you can check.
- Recomputable. A public record exists, so anyone can recompute the result. It takes the record, an outside source for prices to work out the result in dollars, and proof of who controls the wallet and that it is the only one.
- Vendor-claimed. It is the seller’s own figure. It would take the seller publishing the record behind it, so someone else can recompute it.
- Unverifiable. No public record exists. It would take a public record, such as a public wallet or a read-only link. Even then, a read-only link shows only that trades came from one account, not that it is the only account.
Why do the claims you see fail?
Claims about a trading agent’s results fail in a few repeatable ways. Five are below, each with its source. A full method for checking a track record is in the guide to checking a trading agent’s track record.
- The backtest tried many versions. A backtest that “does not report the number of trials” makes it “impossible to assess the risk of overfitting.” Source: Bailey, Borwein, López de Prado and Zhu, Notices of the American Mathematical Society, May 2014.
- Only the best results are shown. Researchers and managers “tend to report only positive outcomes.” Source: Bailey and López de Prado, 2014-07-31. The professional standard, GIPS 2020 from the CFA Institute, keeps closed accounts in the history: “These requirements prevent firms from cherry-picking their best performance.”
- The model may have seen the answer. AI language models “cannot be trusted for economic forecasts during periods covered by their training data.” Source: Lopez-Lira, Tang and Zhu, arXiv 2504.14765, version 2, 2025-12-15. Another paper found that “dazzling back-tested returns evaporate once the model’s knowledge window ends” (Li and co-authors, arXiv 2510.07920, 2025-10-09).
- Practice results leave out real costs. Alpaca’s docs say paper trading “does not account for” “Market impact of your orders,” “Price slippage due to latency,” or regulatory fees. Those are costs a practice account never pays. Source: Alpaca docs, updated 2026-07-07.
- The record is a picture, or an address. FINRA says “depictions of skyrocketing account balances often are fake” (2024-09-10). A public chain shows that an address made trades, not who controls it or whether it is the only wallet (ethereum.org, updated 2026-07-25).
A fuller record also shows the worst drawdown, which is the fall from a high point to the next low point. US futures rules ask for the worst one over five years (17 CFR 4.25).
Who decides before an order goes in?
It depends on the venue and on settings that the venue or you choose. Some venues turn approval on by default, some turn it off, and some only advise you to review orders. Below, each control is listed with the venues that state it, in alphabetical order. A human in the loop means the person says yes before an order goes in.
Is approval on or off by default?
- Alpaca. Its docs say “Review AI-suggested orders before confirming.” That is advice, and the text we read enforces no approval.
- Coinbase. For the Agentic Wallet, “every write call ... returns an approval URL” and “the user manually approves each transaction.” For Coinbase for Agents, the user chooses permissions and portfolios, and we found no enforced per-trade approval documented.
- Public. Two of its statements differ, and we print both. Its marketing says “Nothing executes until you approve it.” Its Agentic Brokerage Agreement says: “Once you have confirmed and activated your Agent, we will not alert you in advance of any pending Transaction, nor will we await confirmation from you in advance of executing that Transaction.”
- Robinhood. Its support page, which is undated, says: “Trade approvals are turned on by default for Robinhood Agents (built-in agents), and are turned off by default for MCP accounts (external agents).” It adds: “if you’ve asked your agent to take action without asking your approval, it can place trades without your confirmation.” Its product page says Robinhood “does not control, supervise, monitor, recommend, or audit these AI agents.”
Does the agent trade from a separate account?
- Gemini. A changelog entry of 2026-05-27 added subaccount patterns “for agentic trading.”
- Robinhood. “Your agent can only place trades in your Robinhood Agentic account.” For built-in agents, it describes a dedicated Agentic account that the user funds.
Is there a typed or timed confirmation?
- Binance. “Prod transactions — always ask user to type CONFIRM before executing.” (Prod means live.)
- Bybit. “Every mainnet write operation shows a structured summary card — user must type CONFIRM.” (Mainnet means the live network.)
- Crypto.com. It lists a confirmation prompt.
- Kraken. Its guarded mode requires
acknowledged=truefor dangerous calls. - tastytrade. “Five tools require a confirmation token — the five that submit or change an order.” Tokens are valid for 60 seconds.
Does it start as practice?
- Alpaca. “The server defaults to paper trading.” Live trading requires setting
ALPACA_PAPER_TRADE=false. - Kraken. Its page lists paper trading.
- OKX. It has a demo mode and a read-only mode.
- Webull. It “defaults to UAT (sandbox).” Live trading requires
WEBULL_ENVIRONMENT=prod.
Practice results leave out real costs, as the section above explains.
What limits can the person set?
- Coinbase. x402 data payments are capped at 5 USDC per payment. That caps payments for data, not orders.
- Crypto.com. It lists a trade-only API key, a weekly limit and a kill switch.
- Polymarket. “A Session Key cannot withdraw funds.”
- tastytrade. The setting
MAX_ORDER_NOTIONAL_USDis a “Ceiling on an order’s buying-power impact (default 50000).” - Webull. Trading tools can be disabled.
What do regulators and legislators say?
FINRA’s 2026 Annual Regulatory Oversight Report, published 2025-12-09 for member firms, lists risks including “AI agents acting autonomously without human validation and approval.” It also lists: “Agents may act beyond the user’s actual or intended scope and authority.”
The UK’s Financial Conduct Authority (FCA), in its Mills Review of 2026-07-06, wrote: “AI will not only be a technology to assist people, but will recommend actions, initiate transactions, and execute decisions within agreed parameters.”
On 2026-06-23, eight US House members wrote to the SEC in a “Request for Information Re: Agentic Trading.” They wrote that “Retail brokerage platforms have begun allowing users to give AI agents the ability to automate investment decisions and trade stocks on users’ behalf.” They asked whether the SEC has “required or recommended guardrails such as funding limits, position limits, order-size limits, trade approval procedures, transaction logs.” That is a legislators’ question, not an SEC action, and we found no SEC reply.
What can’t this page tell you?
It cannot tell you which agent to use, whether any one works, or what will happen next. It cannot tell you how many trades agents place. Our numbers measure tool payments only. Each limit is below.
Which agent should you use?
We do not recommend an agent, a venue or an asset. The venue list above describes, in alphabetical order, and names no winner.
Does any one agent make money?
We cannot say. As of 2026-10-01, we found no independent measurement. The research tests above are tests, not live accounts.
What will happen next?
We forecast nothing. The CFTC wrote on 2024-01-25: “AI technology can’t predict the future or sudden market changes.”
Do our numbers measure trading?
No. Our category numbers count payments for tools, made in USDC on Base. They are not trading results. A listing lands in the category because of words in its description.
What did we look for and not find?
- An independent, dated measurement of live, net-of-cost results for retail AI trading agents.
- A count of agent-placed trades from any venue, on the pages we could reach.
- A regulator page on a person’s own agent placing trades. FINRA’s and the Monetary Authority of Singapore’s guidance covers firms’ own AI, and the FCA review anticipates delegation.
- An SEC statement on agentic trading, or an SEC reply to the House letter.
- An agent program documented on pages we could reach for E*TRADE, Fidelity, Interactive Brokers and Schwab.
One more point is unsettled. Robinhood’s press release says its built-in agents are “coming soon,” while its support pages describe them in the present tense.
Keep going
This page covered what agentic trading is, who allows it, and what evidence exists on results. The pages below go further.