Funded with FlowAn institutional-grade MCP server that lets autonomous trading agents, quant tooling and AI copilots read your accounts, positions and live risk — and, when you choose, execute — through secure, permissioned tokens.
Read-only by default · Trading stays gated until you opt in · Revoke anytime
Why it's safe
Connect agents to a live funded account without handing over the keys to the kingdom. Every permission is explicit, every call is gated and audited.
Every key carries an explicit scope set. Grant read-only analytics, research, or — when you opt in — execution. Nothing is implicit.
New keys can see accounts, positions, orders and risk. They cannot place a single order until you deliberately enable trading.
Execution requires the global switch, your per-account opt-in, a trading-enabled key, and the trade scope — any one off means no orders.
Tokens are shown once, stored only as HMAC-SHA256 hashes, expire automatically, and can be rotated or revoked instantly.
Tools call the exact same risk, accounts and order engine that powers the platform — your agent sees the truth, not a stale copy.
Per-token rate limits and a full audit trail of every tool call. Built for autonomous agents you can actually trust on a live account.
How it works
In your dashboard under MCP Access, mint a key with a permission preset — read-only, research, or execution.
Drop the server URL and your bearer token into your agent or MCP-compatible client config.
It reads accounts, positions and live risk in real time — and, if you enabled it, prepares and places guarded orders.
{
"mcpServers": {
"fundedwithflow": {
"url": "https://mcp.fundedwithflow.com/mcp",
"headers": { "Authorization": "Bearer fwf_mcp_•••your_key•••" }
}
}
}Tool catalog
Read-only tools available on every key. Execution tools unlock only when you enable trading.
Security model
Every tool call passes an authorization gate that AI text can never influence: global switch → maintenance → your account opt-in → token rate limit → scopes → trading gates → account / asset / symbol restrictions. Keys are user-scoped — never admin, never cross-account.
Mint a scoped key in seconds. Read-only to start — flip on trading only when you're ready.