Which brokers let AI trade your account, and how far each one goes
In 2026, broker after broker opened a door for AI assistants. Some let the AI look, some let it trade after you say yes, and a few let it trade on its own. Pick any of them below and see where your yes is actually checked.
See how a connection worksMore than ten brokers and trading platforms opened a connection this year that lets Claude, ChatGPT or Grok reach a real trading account. What the AI is allowed to do once it's connected differs a lot more than the launch announcements would make you think.
The question that matters isn't which broker has a connection, but who or what can stop the AI when it does something you didn't intend. A confirmation in your chat app can be switched off, while a limit set at the broker can't.
From looking to trading on its own.
Scroll through the four rungs of the ladder. The diagram shows who talks to whom, and where the yes is checked at each step.
You log in at the broker, not at the AI
Almost every connection runs on the Model Context Protocol (MCP). You add the broker as a connector in your AI app, log in on the broker's own page and approve the access, so in most cases your password never passes through the AI.
From then on, the AI sees a list of tools, such as "get positions" or "place order". The broker decides which tools exist, while your AI app decides when it has to ask you before using one.
Look only
The AI can read your balances, positions and prices, but there are no order tools at all, so there's also nothing that can be switched on by accident. TradingView and FundedNext work like this.
The AI prepares, you send
The AI drafts an order, but you have to submit it yourself on the broker's own platform, so the final click happens completely outside of its reach. Interactive Brokers and Webull's hosted connection work like this.
A yes in your chat app
Most brokers sit on the third rung: the AI places the order after you say yes. When that yes lives in the chat app, Claude asks before it uses a tool, unless you've set that tool to "Always allow".
Once you do, the question disappears, and the broker has no way of knowing that nobody approved the order.
A yes the broker checks
tastytrade refuses an order unless the exact same order was run as a dry run in the 60 seconds before. The AI can request that dry run itself, so it proves a preview rather than a person, but the check happens on the broker's side, where your chat settings can't switch it off.
On its own, inside a fence
On the top rung, the AI places orders without asking each time, within rules or a budget you set up front, as with Public, Robinhood and eToro.
Two safeguards hold on every rung: limits the broker enforces, and a separate pot of money that is all the AI can ever spend.
The parties and arrows are the ones described in the article; the diagram is a simplification.
Pick a connection and see where your yes lives.
Choose any of the connections from the article. Then flip your AI app's setting to "Always allow" and watch what still stands between the AI and an order.
The AI can
The AI can't
What still stands between the AI and an order
Disclosure: Purple Technology, which publishes Hello Purple, built the technology behind Axiory.ai for the broker Axiory. It is described here in the same way as the others.
Based on the brokers' public documentation and announcements as of mid-October 2026, as described in the article. Availability depends on your country and account type, and none of this is a recommendation of any broker.
The third rung is the busiest.
Placed on the ladder, most connections let the AI place an order after a yes, which is exactly the rung where it matters most where that yes is checked.
Only a handful stop the AI before it can trade at all, and three let it trade on its own within a budget or a set of rules. Click a rung to read what the connections on it have in common.
Webull appears twice, because its hosted connection and its local server work differently. Source: the article and the documentation listed at the bottom of this page.
A yes in the chat can be switched off.
When the only confirmation lives in your AI app, it lasts exactly as long as your setting does. Set the order tool to "Always allow", and the question disappears completely.
The broker on the other end only sees an order coming in through the connector, so it has no way of knowing whether anybody approved it. Try both settings below.
The order and the symbol XYZ are made up. Nothing here connects to anything.
A dry run proves a preview, not a person.
tastytrade's five order tools only work with a single-use token from a dry run of the exact same order, valid for 60 seconds. Change the order after the dry run, or wait too long, and the broker refuses it.
Because the AI can request the dry run itself, the token shows that the order was previewed rather than that you read the preview. It is still checked on the broker's side, where your chat settings can't switch it off.
The real tokens are bound to all of the order's arguments and its target. Seven other tools that change something, such as cancelling an order, carry no token and act on the first call.
Limits hold on every rung.
Limits the broker enforces don't depend on what the AI understood, or on which setting you chose in your app. That's why they still hold when the AI misreads a request, or follows an instruction someone hid in a web page it read.
Run an example order past a set of limits. The default values come from the article: Webull's local server caps an order at $10,000 and 1,000 shares on the US version, and Axiory.ai allows at most 20 open positions and a daily loss of $2,000 by default.
The limits are combined here for illustration; no single broker applies exactly this set. Each broker documents its own limits and defaults.
Your first hour, step by step.
Pick the connection you're thinking about and the AI app you use. The checklist follows the order from the article and adds what the documentation says about that connection.
This is a checklist, not advice. Read the broker's own documentation before you connect anything to a live account.
The limits a broker enforces are what protect you when the AI gets something wrong.
So it's worth spending most of your first hour on them. This page is for information and education only and is not investment advice.
Every fact on this page, and where it came from.
The descriptions of each connection come from the article and the public documentation and announcements below, as of mid-October 2026. The conversation, the token check and the limit check are simulations, illustrative only. Purple Technology, which publishes Hello Purple, built the technology stack of Axiory.ai, one of the connections described.