Standing authority on Robinhood's MCP server places orders with no per-trade confirmation

Read scope and write scope come apart here. A connected agent gets read access to account numbers, balances, positions, transaction history, watchlists and scans across the customer's Robinhood accounts ^[5]. Its trading authority stops at the separate Agentic Account ^[6]. The customer decides how much money crosses into that account ^[7]. The bound on a bad run is set by that funding decision, made at setup, before any order is placed. Robinhood built a dedicated account for agents rather than adding another market-analysis chatbot to its app ^[17], and the account structure is where the limit lives.

Trade notifications and the disconnect control are the other two levers ^[7]. Both act after an order exists. A customer who instructs the agent to act without asking permission removes the step before execution, and trades go through without transaction-by-transaction confirmation ^[9]. Robinhood's own warnings are that an agent can misunderstand instructions, work from incomplete or outdated information and behave unexpectedly ^[10], and that AI strategies can move quickly and may be difficult to stop in real time ^[13]. For an integration surface, a filled equity order is an unusually durable side effect.

runtimewire.com frames the unresolved risk as how responsibility for an erroneous trade works among Robinhood, the agent provider and the customer ^[19]. On Robinhood's side, the documents are not ambiguous. Customers assume responsibility for the resulting trades and for the data shared with the outside AI provider ^[11], and Robinhood says it does not control, supervise, monitor or audit those agents ^[12]. That answers who pays in the two-party case, but the material assigns no duty to the outside agent provider and carries no regulator's view of the gap ^[18].

The adoption figures need reading in the direction the rounding pushes. Robinhood reported in its second-quarter results that nearly 100,000 customers had opened Agentic Trading accounts holding more than $100 million in assets under custody ^[14]. runtimewire.com puts that on the rough order of $1,000 per opened account and notes that Robinhood's rounded thresholds prevent an exact calculation ^[15]. Both inequalities run the same way, so fewer than 100,000 accounts sharing more than $100 million gives an average above $1,000 ^[16]. It is a small balance either way, and an opened account marks access granted, a different thing from an agent placing orders. Assets under custody measures the capital made reachable by tool call, a separate figure from how much of it actually moved.

For anyone shipping an MCP client against this server, the consequence is narrow. The confirmation gate is a feature you own, because once a customer grants standing authority Robinhood's path does not include one ^[9]. The equities, options and crypto scope sets what that gate has to cover, with crypto subject to account and state restrictions and transfers, staking and lending off limits to agents ^[8].