Letting ChatGPT trade
ChatGPT connects to a trading account by being pointed at a URL. It cannot start a program on your computer, which is how a large part of this category ships, so several of the best trading servers available to Claude cannot be used from ChatGPT at all. This page separates the ones you can actually connect from the ones you cannot. Checked 23 September 2026.
Ribhav Modi, Growth at Fensory. Checked each product against its own documentation and, where the project is open source, against the GitHub API.
Published 2026-09-23, last edited 2026-09-23. Every competitor claim was read against its own source on 2026-09-23, and Ribhav Modi re-checks them quarterly. Fensory appears in this comparison and sells a trading account.
The comparison
| Server | Who holds the funds | Credential on your machine | Places the order | What stops a bad order | Where you can open it | Maintained |
|---|---|---|---|---|---|---|
| Coinbase for Agents | Coinbase, in an isolated portfolio | None on the hosted endpoint. OAuth. A CDP key for the CLI path | Executes | Portfolio scoping, separate Trade and Transfer permissions where Transfer cannot reach an external address, and revoking the connection. Maximum trade sizes and daily limits are named on one Coinbase page but not documented anywhere we could find | Not documented for the agent product | Active, hosted. Expanded 10 September 2026 |
| TradeStation MCP | TradeStation Securities | None. OAuth, hosted by TradeStation | Executes, after an explicit confirmation | Per-tool consent and order confirmations. A $10,000 minimum balance instead of a cap | Not documented | Active, hosted. ChatGPT support documented July 2026 |
| Gate MCP | Gate, in your exchange account. The DEX surface is a separate wallet | None in a file. OAuth2, with scopes | Executes spot, futures, options and delivery orders, including price-triggered and trailing orders | The scopes are the control, and they are the only ones here shaped like ours. Five of them: market for public data, profile for read-only account access, trade before any order can be placed, account for the unified and sub-accounts, and wallet, which covers transfers, deposits and withdrawals. No cap on the size of a single order | Not documented on the repository | Active. Last push 10 September 2026, 39 stars, MIT |
| Walnut | Your existing broker. Walnut holds nothing | None. OAuth | Drafts. You confirm each order in Walnut | The human confirmation step. No cap or allow-list documented | US brokerage accounts | Live, hosted, closed source |
| FensoryOurs | You. Tokens settle to a wallet you control, perp margin sits at the venue | None. OAuth through a Fensory account | Executes | Kill-switch, market allow-list and a per-order cap, all enforced on the account. An order above the cap is rejected rather than trimmed | Not available to US persons | Active, hosted |
Half the field is unreachable, and it is nothing to do with quality
An MCP server runs in one of two places. A hosted one lives at an address and any client can be pointed at it, which is what ChatGPT needs. A local one is a process started on your own machine, usually through npx or Docker, and it is reached over standard input and output. ChatGPT runs in a browser and cannot start that process, so a local server is not a worse option for a ChatGPT user; it is not an option.
This is not a quality ranking. OKX runs locally and has the widest tool surface in the category. Bybit runs locally and exposes 384 tools. tastytrade runs locally and is the only product we found that makes a confirmation step its own software enforces, which our Claude page calls the strongest safety model in the field. All three are excellent and none of them can be connected to ChatGPT.
What remains is a smaller field where the choice turns on the usual questions: who holds the funds, what stops a bad order, and whether you can open an account where you live. Those answers are in the table, and they are the same facts our other comparisons carry, pulled from the same place rather than restated.
The ones ChatGPT can reach
Coinbase for Agents
Built by the venueA hosted endpoint from the largest US exchange, so ChatGPT can be pointed at it directly. Withdrawals are blocked at the agent layer.
- What it reaches
- Spot crypto, US futures, S&P 500 equities
- Cost
- No product fee. Standard Advanced maker and taker tiers
Choose this if: You want the largest US venue behind the account and you are comfortable with it holding the funds. The hosted endpoint is the path that works here; the CLI path is not.
Worth knowing: Custodial, and its own setup guide suggests funding a separate portfolio to limit the blast radius rather than documenting a cap you can set. That is a workaround, not a control.
TradeStation MCP
Built by the venueHosted by TradeStation, authorised over OAuth, so no credential sits on your machine and ChatGPT can reach it.
- What it reaches
- Stocks, ETFs, options, futures and futures options
- Cost
- No MCP fee. Commissions, a paid AI subscription, possible market data costs
Choose this if: You are a US trader who wants stocks, options and futures in one ChatGPT session and the account minimum is not a barrier.
Worth knowing: A $10,000 minimum and a paid assistant plan. US only.
Gate MCP
Built by the venueHosted endpoints split by purpose, with public market data needing no authentication at all and trading behind an OAuth scope.
- What it reaches
- Crypto spot, futures, options, delivery, margin, earn, plus DEX swaps across 20+ chains
- Cost
- Free server, Gate trading fees apply
Choose this if: You want crypto trading from ChatGPT without a key in a file. Gate is the only exchange here that authorises over OAuth with a separate read-only scope, so you can give ChatGPT market data and withhold the ability to trade.
Worth knowing: The exchange holds the funds, and no cap on a single order is documented once the trade scope is granted.
Walnut
Built by the venueRead-only by default across linked US brokerage accounts, authorised over OAuth, with execution as a deliberate second step.
- What it reaches
- US equities and ETFs through linked brokerage accounts
- Cost
- Free, with no paid tier
Choose this if: You want ChatGPT reading your existing brokerage accounts before deciding whether it should ever place an order.
Worth knowing: US brokers only, and it does less than the rest of this table until you turn execution on.
Fensory
OursBuilt by the venueOur own. One hosted URL, OAuth, and the cap and allow-list enforced on the account rather than asked of the model.
- What it reaches
- Tokenized US equities and treasuries, gold, crypto spot, perpetual futures
- Cost
- Free to connect. 0.01% to 0.05% on perpetual futures and Hyperliquid spot, nothing on tokenized equities, yields or bridging
Choose this if: You are outside the US, you want the limits enforced where ChatGPT cannot argue with them, and you want tokenized equities, treasuries, crypto and perps on one account rather than four.
Worth knowing: Not available to US persons, which rules it out for a large share of this page. Our cap is per order and is not a limit on total losses, and a ChatGPT user who wants a US brokerage account should use one of the entries above.
Local servers, which ChatGPT cannot reach
None of these can be used from ChatGPT to place an order, in most cases because the server runs as a process on your own machine rather than at an address. They are listed so the omission is explained rather than looking like an oversight, and every one is covered on our Claude page.
- OKX Agent Trade KitLocal. Its README states it runs as "a local stdio process, no server or database required", with keys held on your machine. 438 stars and the widest tool surface in the category.
- Bybit MCP ServerLocal. Run with npx on your own machine, credentials from environment variables. 384 tools.
- tastytrade MCPLocal. A stdio server started with docker run -i. The only product we found that enforces a confirmation step in its own software, and a ChatGPT user cannot have it.
- Alpaca MCP ServerLocal and self-hosted, with the API key and secret in your client config.
- WebullA different shape of the same problem, and the one most likely to catch you out. Webull does have a hosted server ChatGPT can reach, and it is read-only: its own documentation says the hosted cloud server cannot place an order. Order placement and the size and value caps live on the self-hosted stdio server, which ChatGPT cannot start. So the thing worth having here is on the side you cannot reach.
- Open-source Hyperliquid serversAll seven are local, and all seven expect a raw private key in a file.
How we checked
The split between hosted and local was read on each vendor’s own README or documentation, never inferred from how the credential is described. That distinction matters because an inference from prose got it wrong twice while this page was being written: a server asking for "an API key in your client config" is local, not hosted, and the two read almost identically.
Every other cell is pulled from our MCP server comparison by reference rather than retyped, so a custody, limit or geography fact cannot differ between the two pages. Only the description and the reasons to choose or avoid are written for this page.
Products are excluded here for one reason only, which is that ChatGPT cannot reach them. Where that is the case they are named below the table with what they are, because a comparison that silently drops the best product in the category is not telling you the truth about the category.
Fensory publishes this page and appears in it. We are not the answer for a US reader, and our own row says so.
Questions people ask
- Can ChatGPT actually place a trade?
- Yes, through a hosted MCP server connected to a trading account. You point ChatGPT at the server address and authorise it once. ChatGPT does not hold the account or the funds; it calls a tool that places the order inside whatever limits that product enforces.
- Why can ChatGPT not use some MCP servers?
- Because they run on your computer rather than at an address. A local server is started as a process and communicates over standard input and output, which a browser-based assistant cannot do. It is a difference in where the software runs, not in how good it is.
- Is this different from what Claude can do?
- Yes, and it is the main reason this page is separate. Claude Desktop can start a local server, so it reaches both kinds. Several of the strongest products in this category are local-only and are therefore available to Claude and not to ChatGPT.
- What stops ChatGPT making an expensive mistake?
- It depends on the product and most document nothing. Of the servers ChatGPT can reach, Fensory caps the size of a single order and Gate lets you withhold the trading scope entirely. The rest rely on the balance in the account. Webull documents a cap and it is on the server ChatGPT cannot reach, which is the trap this page exists to point out.