The problem: In MCP, tools are model-controlled, so the model decides when to call an order tool. The spec says a human SHOULD be able to deny each call, which is a recommendation to the app, not a requirement (MCP tools spec).
The fix:
- Write a limits file the agent cannot edit, with a max order size, max loss per trade, LIVE_TRADING off, and a named kill switch.
- Run a checker on every order before it reaches the broker.
- Start on a paper or sim account.
Test it: paste one order and your limits file into the Agent Order Check. It flags dollar risk over your max loss, an order that turns LIVE_TRADING on, and a limits file with no kill switch named.
Source: MCP specification 2025-06-18, Tools, checked 2026-10-19.
Educational only. Not financial advice. Paper first.