State of Agentic Trading, Q3 2026

The headline figures

Counted on 2026-09-22. Each is computed from the product table rather than written down, so this page and the comparisons it came from cannot disagree.

What stops a bad order

The question every product in this category answers differently, and the one most of them do not answer at all. A limit written into a prompt is a request the model can be argued out of. A limit enforced on the account is a rule. These are the shapes that exist, counted from what each vendor documents rather than from what it claims.

• 15

  Nothing documented. The limit is how much money is in the account

  Alpaca MCP Server, Binance Agent OS, Coinbase for Agents, Composer MCP, Interactive Brokers AI Integration, Kraken CLI, MetaMask Agent Wallet, Open-source Hyperliquid servers, Phantom MCP, Robinhood Agentic Trading, Scalable Capital Agentic Investing, TradeStation MCP, Trading 212, cTrader AI Agent Connect, eToro Agent Portfolios

• 5

  A flag, scope or key that decides whether trading is reachable at all

  Bitpanda Fusion MCP, Bybit MCP Server, Gate MCP, OKX Agent Trade Kit, Walnut

• 2

  A ceiling on the size of any single order

  Fensory, Webull

• 1

  A halt once losses reach a threshold, rather than a limit per order

  Senpi

• 1

  The software refuses to submit without its own confirmation token

  tastytrade MCP

A capability gate is not a cap. It decides whether trading is reachable at all and says nothing about how much can go through once it is. Counting the two together would make this field look far safer than it is.

The category, quarter by quarter

Every dated launch

Oldest first. A date marked “repository created” is when the public repository first existed, which is the earliest defensible public date and usually sits a little before the announcement.

Who can actually use these

Availability as each product’s own page states it, which is not the same as where its parent company operates. 2 of the 24 are documented as reaching users outside the United States, and the gap between the two numbers is the least reported thing in this category.

What this dataset does not have

Named rather than omitted. A dataset that hides its gaps is not a dataset, and two of these are the questions a reader most wants answered.

• Fensory ledger statistics: tool calls, agents connected, asset mix, client mix, repeat rate

  Not yet confirmed internally. A company publishing research about its own category does not get to quote unverified figures about itself.

• Total on-chain value of tokenized equities

  No source we control, and repeating another aggregate without reading its methodology is how a figure like this goes wrong.

• Adoption: how many people actually use any of this

  Nobody publishes it, ourselves included. Counting products is not counting users, and this page does not pretend otherwise.

Questions people ask

What counts as an agentic trading product here?

One where an AI assistant can cause a real order to be placed on a real venue. A product that only reads prices or drafts an order for a human to submit is not counted, and where a product does both we count the execution path. Market-data servers are excluded entirely.

Where do these figures come from?

Each product was read on its own documentation, its own repository, or its own terms, never on a directory listing or another comparison. Repository figures come from the GitHub API. Every product links to the source its claims were read on.

Is this complete?

No, and the page says which parts are missing rather than implying coverage. A re-sweep in September added four official exchange servers an earlier pass had missed, several more are named as reported but unverified, and nothing here counts users rather than products.

Fensory publishes this and sells a trading account. Why trust it?

Because the figures are checkable and the page does not flatter us. Fensory is one of two products documenting a cap on a single order, which is a narrower protection than a loss limit, and our confirmation step is not enforced by our software the way one competitor’s is. Both facts are in the counts below.