# Can your agent place an order you didn't approve?

The problem: In MCP, tools are model-controlled, so the model decides when to call an order tool. The spec says a human SHOULD be able to deny each call, which is a recommendation to the app, not a requirement ([MCP tools spec](https://modelcontextprotocol.io/specification/2025-06-18/server/tools)).

The fix:
1. Write a limits file the agent cannot edit, with a max order size, max loss per trade, LIVE_TRADING off, and a named kill switch.
2. Run a checker on every order before it reaches the broker.
3. Start on a paper or sim account.

Test it: paste one order and your limits file into the [Agent Order Check](/check). It flags dollar risk over your max loss, an order that turns LIVE_TRADING on, and a limits file with no kill switch named.

Source: [MCP specification 2025-06-18, Tools](https://modelcontextprotocol.io/specification/2025-06-18/server/tools), checked 2026-10-19.

Educational only. Not financial advice. Paper first.

Free check: https://theagentictrader.com/check?utm_source=md&utm_medium=agent&utm_campaign=tips-2026-10-18-unapproved-agent-orders
Weekly note on broker and agent changes: https://theagentictrader.com/subscribe?utm_source=md&utm_medium=agent&utm_campaign=tips-2026-10-18-unapproved-agent-orders
Desk Kit, $79 one-time. Full refund within 7 days: https://theagentictrader.com/desk-kit?utm_source=md&utm_medium=agent&utm_campaign=tips-2026-10-18-unapproved-agent-orders