Interactive Brokers (IBKR) MCP server icon

Interactive Brokers (IBKR)

by Interactive Brokers (IBKR)

HIPAA CompliantSOC2 ReadyISO 27001 Ready
Finance10 tools

Read IBKR positions, balances, P&L, orders and market data from an AI agent, and draft trade instructions that you approve inside an IBKR platform. Anthropic lists 10 read-shaped tools; no tool submits an order to the market.

Verified connector

Listed by Anthropic as a partner connector in its Connectors Directory.

Connection checked by Agentman on .

Anthropic states this reflects the level of review a connector received, not a security audit.

Connect Interactive Brokers (IBKR) via MCP

https://api.ibkr.com/v1/api/mcp

Works in any MCP-compatible client. In Agentman Studio it is one click — no config file to edit.

Interactive Brokers (IBKR) Tools & Capabilities (10)

Tool names from Anthropic's directory listing. This server requires sign-in, so we could not read tool descriptions or parameter schemas.

Limits

  • IBKR publishes no tool list for this server. Its entire developer documentation set — Web API, TWS API, FIX, Excel, third-party integrations — contains no MCP section, and its AI Integration pages and platform user guides name no tools. The 10 names come from Anthropic's directory, so there is nothing to diff them against. This is weaker than reporting a clean listing.
  • We could not read tool schemas or safety annotations. The endpoint challenged an anonymous request, so no parameter detail is published here. On a brokerage that gap matters more than usual: a dispatcher or a consequential parameter would live exactly where we could not look.
  • get_order_instructions is unresolved. No source we found establishes whether it reads the pending instruction queue or creates an entry in it.
  • The approval gate is IBKR's design, not a guarantee we tested. We never authenticated and never called a tool. Everything on this page about instructions and approval is IBKR's own documentation, quoted and attributed, and it is consistent across four separate IBKR pages.
  • IBKR disclaims its own accuracy. Its disclosures state IBKR "does not guarantee the accuracy or completeness of the data and information provided through the AI service", that the output is "not investment advice or a recommendation from Interactive Brokers", and that instructions "may not be accurate or reflect what you wish to do".
  • The approval gate is scoped to "this release" by IBKR itself. Its July 2026 press release qualifies the review requirement with those words. Treat the guarantee as current behaviour and re-read it before relying on it long-term.
  • No paper-trading account, and one platform at a time. IBKR staff state on its Campus site that access cannot be limited to a simulated account — the picker shows only accounts you can trade on — and that authorising a second AI platform disconnects the first. There is no sandbox in which to try this safely.
  • Not available everywhere. IBKR states AI Integration "is not available in IN or JP."
  • Two endpoints, one directory entry. IBKR documents /v1/api/mcp-public for manually added clients across three of its own pages; Anthropic's directory publishes /v1/api/mcp, which no IBKR document we found mentions. Both authenticate. We could not compare their tool surfaces.
  • Community "IBKR MCP" projects are not this server. Public MCP aggregators index several unofficial packages that wrap IBKR's TWS or Web API locally, some self-described as not affiliated with Interactive Brokers. Their tool names differ from the 10 here. Installing one is not installing this connector, and a local wrapper holding your API credentials has no in-platform approval gate.
  • Market-data entitlements are not documented for this connector. IBKR sells real-time data subscriptions separately from account access, and no page we found states which entitlement get_price_snapshot or get_price_history requires, or whether unsubscribed users receive delayed quotes. Treat any price the agent reports as needing its own timestamp.
  • No rate limits are published for the MCP surface. IBKR documents pacing rules for its Web API and TWS API; neither page mentions MCP.
  • The privacy policy could not be read. The URL Anthropic's directory publishes returns a PDF, which we did not extract, so this page makes no claim about its contents.
  • IBKR's llms.txt addresses AI models directly. It contains a "Prohibited Interpretations" block instructing "the model" what it "must not" say about IBKR's account-opening requirements. That is publisher guidance for answer engines, not documentation about this connector, and we treated it as data rather than as instructions. Readers auditing agent behaviour should know the file exists.

Frequently asked questions

No tool submits an order to the market. IBKR states plainly that instructions never become orders automatically, and that every instruction must be reviewed and explicitly confirmed inside an IBKR application before any action is taken. A drafted instruction lands in an AI Instructions tab in Client Portal, IBKR Desktop, Mobile, GlobalTrader or Trader Workstation, where you press Review and Submit, or Reject.

Two application scopes, mcp.read and mcp.write, plus identity claims. IBKR's RFC 9728 resource descriptor declared both on 2026-08-22, and its authorization server advertises openid, profile, email, account-ids, mcp.read and mcp.write. Unlike most connectors in this catalogue, a read and a write permission genuinely exist as separate grants here, so the boundary is not purely cosmetic.

Nothing in the listed surface does. All 10 tool names Anthropic publishes begin with get or search, none references a transfer, withdrawal, deposit or bank instruction, and IBKR's documentation describes the integration only as portfolio analysis plus reviewable trade instructions. IBKR does run funding endpoints in its separate Web API, but that is a different surface this connector does not name.

No. IBKR's developer documentation covering Web API, TWS API, FIX and Excel contains no MCP section at all, and neither its AI Integration marketing pages nor its platform user guides name a single tool. The 10 names come from Anthropic's directory, so there is no second list to diff against and no clean-listing claim is available.

Because a write exists that the 10 listed names do not account for. Nine begin get and one begins search, yet the server declares an mcp.write scope and IBKR's own example prompts create instructions. The likeliest explanation is that the directory lists a subset and the instruction-creating tool is unlisted, so read the clean listing as incomplete rather than as proof nothing writes.

Anthropic's directory lists only the first, while IBKR's own pages tell any other MCP client to use the second. Both returned an authentication challenge on 2026-08-22 and both publish an RFC 9728 descriptor naming the same two scopes and the same authorization server. Whether their tool surfaces are identical could not be established without signing in.

IBKR says explicitly that it does not. Its disclosures state that information generated through the AI integration is not investment advice or a recommendation from Interactive Brokers, that IBKR does not guarantee its accuracy or completeness, and that you are responsible for independently verifying it. IBKR also warns that a drafted instruction may not be accurate or reflect what you wish to do.

Through Manage Third-Party Consents in Client Portal. IBKR's user guides direct you to the profile icon in the top right corner, then Settings, then Manage Third-Party Consents, then Revoke Access. The same guides note that connecting requires reading and signing a set of agreements and disclosures, and selecting which account to grant access to where you hold several.

Sources

Use in Agentman

Connect once and your agents call these tools on their own — on a schedule, in a workflow, with nobody at the keyboard.

Open in Agentman Studio

Server Info

Category
Finance
Developer
Interactive Brokers (IBKR)
Tools
10
Domain
api.ibkr.com

Using Claude Desktop or another MCP client? Setup docs — the connection URL above works anywhere.