Which brokers have an MCP server
An MCP server lets an AI assistant use a broker's API. This is every one we have a record for: 18 published by the broker or platform itself and 7 by the community, with what each can do and whether it can place an order.
Independent and unofficialRead
Risk warning: CFDs and spread bets are complex instruments and come with a high risk of losing money rapidly due to leverage. You can lose money on these products, and each provider publishes its own loss figure under FCA rules. You should consider whether you understand how they work and whether you can afford to take the high risk of losing your money. Automated and API trading can amplify losses through bugs, connectivity failures and runaway orders.
Rows are in name order. Nothing here ranks a server or calls one safe: the labels record what each vendor's own pages say. An AI agent with order tools can place real trades, and automation can amplify losses. Start with a server that only reads, on a demo account.
What "can it place trades" means here
- Documentation only
- The server reads documentation or schemas. It holds no account and touches no order. 2 of the servers below.
- Reads your account, no orders
- The server reaches your account but offers no tool that places an order. 2 of the servers below.
- Drafts orders, you confirm
- The agent prepares an order. A person converts or confirms it before anything is submitted. 2 of the servers below.
- Can place orders, behind a documented gate
- The agent can submit an order, but only past a documented switch, token, cap, allowlist or risk check. 9 of the servers below.
- Can place orders, no gate documented
- The agent can submit an order and no confirmation step, dry run or default off switch is documented. 9 of the servers below.
- Not recorded
- The record does not yet say which of these the server is. That is a gap in the record, not a statement that the server cannot place orders. 1 of the servers below.
These counts add up to the 25 servers in the two tables.
Published by the broker or platform
| Server | Orders | What it can do | Where keys are held | Source |
|---|---|---|---|---|
| alpaca-mcp-serverAlpaca | Can place orders, behind a documented gatePaper by default. ALPACA_PAPER_TRADE defaults to true and live requires an explicit false. There is no confirmation step. ALPACA_TOOLSETS restricts which tool groups load at all. | Stock, crypto and options bars, quotes, trades, snapshots and news. Account balance and portfolio history. Place, cancel and replace orders. Positions, options exercise, watchlists, calendar, corporate actions. | On your machineAll configuration is through environment variables set in your MCP client config. No files are written to disk. Remote hosting is optional. | alpacahq/alpaca-mcp-serverchecked |
| Bitget Agent Hub MCP serverBitgetBitget API | Can place orders, no gate documentedOrder tools are on by default. The page documents an optional read only mode that removes every write tool at startup, a paper trading mode, and an explicit confirm option required for withdrawals and cancel all. The Agentic account route cannot withdraw at all. | Spot and futures orders, account queries, transfers between accounts and live market data. A separate read only data server covers US share and ETF data and needs no account. The same page documents a command line tool and an SDK.Demo: A paper trading option routes every request to Bitget's demo environment with a Demo key. | On your machineThe page says it runs as a local process and that the API key is signed locally and never leaves the machine. An OAuth route to a separate Agentic account is also documented. | Bitget Agent Hubchecked |
| capital-mcpCapital.comCapital.com API | Can place orders, behind a documented gateTrading is switched off until several settings allow it. CAP_ALLOW_TRADING defaults to false. Two phase preview then confirm=true. CAP_DRY_RUN blocks all executions. CAP_ALLOWED_EPICS allowlist. CAP_MAX_POSITION_SIZE defaults to 1.0. CAP_MAX_ORDERS_PER_DAY defaults to 20. | 38 tools: 4 session, 6 market data, 6 account, 13 trading (preview and execute positions, working orders, close), 6 watchlists, 3 streaming. | On your machineCAP_ENV, CAP_API_KEY, CAP_IDENTIFIER and CAP_API_PASSWORD sit in a local .env. The server runs locally and the credentials do not leave the machine. | capital-com-sv/capital-mcpcapital-com-sv org listingCapital.com API docs and termschecked |
| ChelseaAIThinkMarketsThinkMarkets API | Can place orders, behind a documented gateScoped, revocable permissions with hard blocks on fund access, deposits, withdrawals, liquidating the account on a single trade, and margin violations. | Market and account information, and order execution. | Not documentedNot published. Hosted or local is unknown, and no endpoint is given. | Finance Magnates interview, via TradingViewchecked |
| cTrader AI Agent ConnectSpotwarecTrader Open API API | Can place orders, no gate documentedNo platform gate. The page says AI-assisted workflows can trigger real trading actions when enabled, and puts the review on the trader. | Market data, account, orders and positions, plus desktop workspace control on the Local server. Two servers: Remote for cTrader Web and Local for Windows and Mac. Ships a skills library. Named clients: Claude Code, ChatGPT Codex, Cursor, Gemini CLI.Demo: Demo support is not stated on the pages we opened. | Not documentedRemote uses a configuration token. Where that token is stored is not documented. | mcp.spotware.comSpotware launch notechecked |
| Deriv hosted MCP (deriv-api-plugin)DerivDeriv API | Documentation onlyDocs only. It does not sign in. | Docs and schema only. The hosted server reads public Deriv API documentation and schemas to answer questions and validate payloads; it does not sign in, store keys, or ask you to set anything up. Market discovery, pricing, auth and account management, the trade lifecycle, chart integration and token handling are covered as knowledge, not as actions. | No credentials involvedNo credentials and no configuration are required. Endpoint https://mcp-api-v2.deriv.com/mcp | deriv-com/deriv-api-pluginchecked |
| Dukascopy MCP serverDukascopy BankDukascopy API | Can place orders, no gate documentedNo confirmation step is documented. At the time of reading only JForex demo accounts are supported, so no live order can be placed through it. The page says the AI agent's actions are outside Dukascopy's control. | Reads account, order and position information and places trading orders on a JForex account from an MCP client. No trading platform needs to be open.Demo: JForex demo accounts only at the time of reading. The page says live trading is scheduled for summer to autumn 2026, and that live, MT4, MT5 and binary accounts are not supported yet. | Hosted by the vendorA remote server at mcp.dukascopy.com. You log in through a Dukascopy window, and the page says the password is never shared with the AI. | Dukascopy, trade with AIchecked |
| eToro Public API MCPeToroeToro API | Documentation onlyDocs only. There are no account tools and no order tools. | Two tools, get-all-routes and get-route-spec, which read the live OpenAPI document so your assistant writes accurate code instead of guessing. It does not execute trades. | No credentials involvedHosted, streamable HTTP at https://mcp.public-api.etoro.com, no install and no credentials. | eToro builders, MCP page and termschecked |
| Flattrade MCP v1.0.0Flattrade | Not recordedNo gating is documented and no paper mode is mentioned. Because it is unverified whether the server can place an order at all, it gets no posture value here. | Today, Holdings and Limits or Available Funds only. Everything else is marked Coming Soon. Order placement appears only in conceptual examples, not in a confirmed live feature list.Demo: No paper mode mentioned. | Not documentedA contradiction worth flagging. The page claims credentials stay on your machine and nothing is shipped to the cloud, while offering a hosted endpoint at https://mcp.flattrade.in/mcp. Both cannot be simply true, so this is recorded as unverified. | Flattrade trading MCP pagechecked |
| IG Trading: CFD AssistantIG AustraliaIG API | Reads your account, no ordersRead only by design, on the trade press wording. IG's own developer portal makes no mention of MCP, AI agents, LLMs, llms.txt or agent tooling, so this status rests on trade press and not on a first party IG page. | Read only. Live bid and ask, open positions, working orders, market details, margin requirements, client sentiment, OHLC history, activity log, transaction history, watchlists and portfolio metrics. Cannot access payment details or identity documents. | Hosted by the vendorYour existing IG login. No separate key. | Finance Magnates on IG Australialabs.ig.com, IG's own API portal, no MCP mentionchecked |
| Interactive Brokers MCP connectorInteractive BrokersInteractive Brokers API | Drafts orders, you confirmHuman in the loop by design. In this release the client reviews each instruction and converts it to an order on an IBKR platform before it is submitted. | Portfolio analysis, research, risk monitoring and drafting trade instructions. Account read yes. Order placement no. | Hosted by the vendorIBKR secure login, with a single account authorised. Connector URL https://api.ibkr.com/v1/api/mcp-public | IBKR media release, 28 July 2026checked |
| MetaCopier MCP serverMetaCopierMetaCopier API | Can place orders, behind a documented gateTrading needs its own permission: a separate trading write scope on an OAuth connection, or a read and write API key. A read only connection cannot write, and a project with more than 100 accounts is read only unless MetaCopier unlocks it. | Works on one MetaCopier project: reads accounts, diagnoses copiers, changes configuration, reviews performance and, where allowed, places and closes trades on connected accounts. The page counts 129 tools.Demo: Demo support is not stated on the pages opened. The page warns that the assistant works on live money. | Hosted by the vendorA remote server at ai.metacopier.io. Sign in by OAuth, where the page says no secret is stored in the client and each credential lasts 60 minutes, or paste an API key into the client, which lasts until revoked. | MetaCopier documentation, AI assistantMetaCopier documentation, AI security and limitschecked |
| MetaTrader 5 native MCPMetaQuotesMetaTrader 5 (Python package and MQL5) API | Can place orders, behind a documented gateThe strongest platform gate found. AI operations are governed by configurable security settings: allow, prohibit, or require manual confirmation. | Market information, chart analysis and the trading environment, and it can perform required operations through the standard MCP interface. | On your machineMQL5.community account with passkeys. Custom API keys for OpenAI, Anthropic, Gemini, DeepSeek and Ollama are held in the terminal. | MetaTrader 5 release noteschecked |
| tastytrade-mcptastytrade | Can place orders, behind a documented gateEvery order needs a dry run first. Five order submitting tools each require a single use confirmation_token minted by its own dry_run_ tool, valid 60 seconds and bound to an argument hash. TASTYTRADE_READ_ONLY=1 blocks all writes. Notional caps, pre-submit sanity checks, and credential destination guards that restrict transmission to recognised hosts. | 84 tools, 70 read only and 14 write or destructive. Quotes, positions, balances and order flow. | On your machineEnvironment variables only, no interactive login. TASTYTRADE_CLIENT_ID, TASTYTRADE_CLIENT_SECRET, TASTYTRADE_REFRESH_TOKEN. The server does not auto-load a .env file. | tastytrade/tastytrade-mcptastytrade developer docschecked |
| TraderEvolution MCPTraderEvolution, platform vendor | Can place orders, behind a documented gateThe strongest architectural pattern found, and the only server side one. Orders placed through MCP go through the same pre-trade risk checks: margin validation, position limits, instrument restrictions. AI agents cannot bypass server side controls. | 31 tools: market data (quotes, depth, historical bars, options chains), order place, modify and cancel, accounts (positions, balances, P&L, trade history), instrument discovery and contract specs.Demo: Demo support not published. | Not documentedAuth model and hosting are not published. | TraderEvolution MCP pagechecked |
| Tradier hosted MCPTradier | Can place orders, no gate documentedNo confirmation step and no dry run step is documented. The only line on the subject is marketing copy. | Real time market data, options chains with Greeks, order placement and modification for stocks, single leg options, multi leg spreads, OCO, OTO and OTOCO, account and portfolio, watchlists, paper trading. | Hosted by the vendorHosted, so the key does leave your machine. Every connection runs on a personal API token you generate, and can revoke, at any time. | Tradier MCP server pageTradier launch press releasechecked |
| Trading 212 Agent SkillTrading 212Trading 212 API | Can place orders, no gate documentedNo gating is described. Demo and live are selected by an environment variable. The repository's own warning is the safeguard. | Portfolio and account summaries, instrument search, positions and P&L, historical transactions and orders, exchange schedules, and order placement: it can buy and sell shares via market, limit, stop and stop limit orders. | On your machineT212_API_KEY and T212_API_SECRET in environment variables. Keys are generated in the Trading 212 app. | trading212-labs/agent-skillsTrading 212 community announcementchecked |
| TradingView MCPTradingView, a platform not a broker | Reads your account, no ordersRead only by design. No broker account tools are listed at all. | Read only market data. It does not list tools for accessing a connected broker account's balance or positions, or for placing broker orders. | Hosted by the vendorAccount based, no API keys, hosted. | Finance Magnates on TradingView MCPchecked |
Published by the community
These are not the broker's own product. Read the code before you give one a key.
| Server | Orders | What it can do | Where keys are held | Source |
|---|---|---|---|---|
| capitalcom-mcp-serverSimonTarara62, communityCapital.com API | Can place orders, behind a documented gateEnvironment variable naming is near identical to the official server's, including its trading switch. The direction of derivation between the two repositories is unverified. | 42 tools, a near identical feature set to the official server, plus an HTTP transport.Demo: Not documented. | Not documentedNot documented in what we opened, and it adds an HTTP transport the official server does not have. | SimonTarara62/capitalcom-mcp-serverchecked |
| ig-trading-mcpkea0811, communityIG API | Can place orders, no gate documentedAn IG_DEMO=true flag exists, but there is no dry run and no confirmation gate. | Market data, account, position create, update and close, working orders and watchlists. JavaScript. | On your machineCredentials in .env. RSA for password transmission, AES-256-GCM at rest, and a 60 request a minute throttle. | kea0811/ig-trading-mcpchecked |
| metatrader-mcp-serverariadng, communityMetaTrader 5 (Python package and MQL5) API | Can place orders, no gate documentedNo dry run and no demo enforcement. | Place, modify and close orders on live or demo MT5 accounts, market data, account balance, equity, margin and leverage, and position tracking. stdio, SSE, HTTP/REST and WebSocket. | On your machineCredentials via CLI arguments or environment variables. All credentials stay on your machine. | ariadng/metatrader-mcp-serverchecked |
| MQL5 community FastMCP serverMQL5 community article, 30 April 2026MetaTrader 5 (Python package and MQL5) API | Drafts orders, you confirmUses destructiveHint: True annotations so well behaved clients prompt for confirmation. The gate belongs to the client, not the server, so a badly behaved client removes it. | 14 tools for MetaTrader 5, with destructive tools annotated as such.Demo: Not documented in the article. | Not documentedNot documented in the article. | MQL5 article 21905, 30 April 2026checked |
| oanda-mcp-serverBJLG-92, communityOANDA API | Can place orders, no gate documentedNo dry run and no confirmation. OANDA_ENVIRONMENT selects practice or live. | Account info, position management, order placement (market and limit) and historical data. | Not documentedNot documented. It is deployed on Railway as a REST service, which does not sit easily with a key that never leaves your machine. | BJLG-92/oanda-mcp-serverdeveloper.oanda.com, no MCP mentionchecked |
| saxo-mcpSirAdlerBD, communitySaxo OpenAPI API | Can place orders, behind a documented gateRead only by default with a hard block. Trading requires SAXO_TRADING=enabled, enforced at three layers: config validation, tool registration (the trading tools are not registered at all when disabled) and HTTP client request blocking. | Read only until armed. Trading tools exist only when enabled. TypeScript, stdio plus HTTP Streamable with bearer auth. | On your machineOAuth 2.0 with PKCE. Tokens in a local JSON file at mode 0600. Refresh rotation invalidates the old token. | SirAdlerBD/saxo-mcpchecked |
| trading212-mcpt0knight, communityTrading 212 API | Can place orders, no gate documentedOne good pattern: the environment is fixed at server startup and cannot be changed by the client. But the server has no authentication and no transport encryption, runs over HTTP, and is localhost only. | Full API coverage, with market, limit, stop and stop limit orders in demo and live. | On your machineLocalhost only, but with no authentication and no transport encryption on the server itself. | t0knight/trading212-mcpchecked |
Looked for, none found
Not finding a server on the pages we opened is not proof that none exists.
- TradeLocker
- No MCP server found. public-api.tradelocker.com states verbatim: For AI agents: visit https://public-api.tradelocker.com/llms.txt for an index of all pages formatted in Markdown and endpoints in OpenAPI. Fetching that URL returned the docs index page rather than plain text, so the file content is unverified.public-api.tradelocker.comchecked
- FOREX.com and StoneX
- No MCP or agent tooling found in searches, and no first party StoneX API page was opened. Recorded as no route found, not as confirmed absence.Not verifiedno first party page was opened, searched
- MetaTrader 4
- No agent tooling found, and no first party MetaQuotes MT4 page was opened. Recorded as no route found, not as confirmed absence.Not verifiedno first party page was opened, searched
Before you connect an assistant to an account
- Start with a server that only reads. You can learn most of what you need without any order tool.
- Use a demo account, and keep it there until the assistant has behaved for weeks.
- Find out where your key lives. A server on your own machine keeps it with you. A hosted one holds it for you.
- Never let an assistant be the last check before a live order. If a confirmation step exists, keep it on.
- An assistant can misread a price, a size or a currency. Cap what any key is able to do at the broker.
How to keep an API key out of your code. Getting started with API trading.
Common questions
What is an MCP server?
MCP, the Model Context Protocol, is a standard way for an AI assistant to use outside tools. A broker MCP server gives an assistant tools such as reading prices, reading your positions or, in some cases, placing an order.
Can an AI agent place trades through a broker MCP server?
It depends on the server. Some only read documentation, some read your account but have no order tools, some draft an order for you to confirm, and some can submit orders. The table on this page records which, as each vendor's own pages describe it.
Is it safe to connect an AI assistant to a trading account?
Treat it like giving a program your API key. Start with a server that only reads, use a demo account, check where your credentials are stored, and never rely on the assistant as the last check before a real order.