AI Trading at Your Broker, October 2026: What IBKR, Schwab and tastytrade Announced, and What an AI Can and Cannot Do in Your Account

In one week of October 2026, three US brokers put AI trading on the record. Interactive Brokers launched IBKR Autonomous Trading on October 21, a way for eligible clients to let a connected AI place orders inside a separate, capped partition of their account. Charles Schwab's chief executive said on the October 15 earnings call that Schwab is piloting direct connections from large language models to Schwab's servers, starting with Claude, with the company controlling sign-in and never letting the AI move money. And tastytrade published an Open API MCP server so an AI assistant can work with a tastytrade account through the same standard.

This page explains what each of those is, what an AI can and cannot do inside a brokerage account, the three different ways an AI can be connected to one, why brokers are blocking the fourth way, and a short checklist to run before you connect anything. Every fact below is cited to the broker's own release, the call transcript or the published documentation, read on October 29, 2026. Nothing here is a recommendation of any broker.

What each broker announced

Interactive Brokers, October 21. The press release describes IBKR Autonomous Trading as a capability that lets eligible clients authorize connected AI platforms to monitor more than 75,000 listed stocks, options and ETFs and submit supported orders within a dedicated AI Partition. Clients fund the partition by transferring money from their main IBKR account, without opening a new account or making an outside deposit. The AI acts on client-defined instructions, subject to account restrictions and safeguards, and IBKR's AI integrations page says the client retains responsibility for all trading and can revoke access at any time through Client Portal. A trade publication reports the limits as up to 10% of account equity, a $1,000 minimum and a $25,000 maximum per client, for individual non-margin accounts; those figures come from secondary coverage, so confirm them on IBKR's page before relying on them.

Charles Schwab, October 15 and after. On the third-quarter call, management described piloting a program for traders to connect large language models directly to Schwab's servers, starting with the Claude model. Chief executive Rick Wurster's words on scope: "We are allowing LLMs to connect, but we are controlling the experience. We control the authentication experience. We control when they do and they can come in. We do not allow them to move money because we think there is too much risk there to the client and to the firm." He added that client trading through LLMs and APIs has doubled in about six months. On strategy he was explicit: "I don't see us getting into the business of trying to create trading strategies on behalf of clients. I think it's a fool's errand and could lead to a lot of trouble." On October 28 InvestmentNews reported that Schwab is blocking AI agents that try to log in to client accounts with the client's own credentials. A Jefferies note summarized on October 27 described the pilot as MCP-based with one model provider and a consumer launch supporting several providers expected in coming months; that is an analyst's summary, not a Schwab announcement.

tastytrade. The Open API MCP announcement lets an AI system connect to a tastytrade account through an MCP server built on the broker's public API. The same page carries the boundary in plain words: tastytrade does not endorse or recommend any third-party AI system connected through the MCP server and is not responsible for information, output or trading activity generated through it; the client is solely responsible for actions taken on the AI's output. The Jefferies note also said tastytrade plans fully autonomous agentic trading; tastytrade has published nothing to that effect, so treat it as unconfirmed.

What MCP is

MCP, the Model Context Protocol, is an open standard for connecting AI applications such as Claude or ChatGPT to outside systems: data sources, tools and workflows. A broker that publishes an MCP server is publishing a menu of actions an AI assistant may ask for, each with its own permission. The broker decides what is on the menu. In tastytrade's case the menu is built on its existing public API; in Schwab's pilot the menu excludes money movement by design. The important point for an account holder is that an MCP connection is a chat: you are in the conversation, the assistant proposes, and what it can do is bounded by the menu the broker wrote and the permissions you granted.

Can an AI move money out of my brokerage account?

Not through any of the connections described here. IBKR's partition is funded by an internal transfer the client makes, and the AI trades inside it. Schwab's chief executive said the firm does not allow connected models to move money. Published broker APIs for retail trading, the ones third-party software uses, cover accounts, positions, orders, history and quotes; funding, withdrawals, bank links and login changes are not in them. The risk that does exist is different: an AI with trading permission can buy and sell within the account, so the question to ask is not "can it withdraw" but "what limits bound what it can buy and sell". For JorgAI's six connections the exact permissions, broker by broker, are on what JorgAI can and cannot do in your account.

Three ways an AI can touch an account, and the fourth that brokers block

• A partition at the broker. IBKR's model: the broker carves out a capped sub-account, the AI trades only inside it, the broker enforces the cap and the eligibility rules, and revoking access is a Client Portal setting. The client's main account is untouched by construction.
• An MCP connection. Schwab's pilot and tastytrade's server: the client's own AI assistant connects through a broker-published interface with broker-controlled sign-in and a broker-defined menu of actions. The client is present in the conversation and approves or directs each step.
• An application on the broker's official API. The longest-standing route: software the client authorizes through the broker's OAuth sign-in or an API key the client creates, with permissions the broker defines. The application runs on its own, which is what lets rules execute while the client is at work or asleep. This is the route JorgAI and other automation platforms use.
• The one brokers block: an agent that signs in as you. A general-purpose browsing agent typing your username and password into the broker's website is indistinguishable from an account takeover, and Schwab says it is blocking exactly that. It also breaks most brokers' terms of use. If a tool asks for your brokerage password rather than sending you to the broker to approve it, that is the signal to stop.

Why brokers draw the line where they do

Two risks drive every one of these designs. The first is money movement: a compromised AI or a bad instruction could otherwise drain an account, so every broker keeps funding and withdrawals off the AI's menu. The second is responsibility: IBKR's release says the AI operates on client-defined instructions, tastytrade's says the client is solely responsible for actions taken on the AI's output, and Schwab's chief executive said the firm will support traders but will not create trading strategies on their behalf. In every case the broker is placing the strategy, and the accountability for it, with the client. That is also why none of the three is offering to write strategies for clients.

A pre-flight checklist before you connect any AI to a brokerage account

• Where does it sign in? On the broker's own site with an approval screen, or with an API key you created, yes. A tool asking for your password, no.
• What is the permission list? Read it. Trading and account data are expected; withdrawals, transfers and bank links should be absent or switched off. On exchanges that let you set permissions per key, as Kraken does, turn on only what the tool documents.
• What bounds a trade? Per-trade size, trades per day, open-position limit, a daily loss limit, and a stop on every position. If the tool cannot show you these limits before the first order, it is not ready for your account.
• What happens when the connection drops? Find out whether your protective orders live at the broker or only in the software. The stop-loss-on-disconnect comparison walks through six brokers.
• Where is the revoke switch, and what does it do? Find it before you need it. IBKR's page says access is revoked through Client Portal and that login credentials are never passed to the AI platform; other brokers list connected applications in account or security settings. Check separately whether revoking access also cancels orders that are still working, because the two are not always the same action.
• Is there a log you can read? A decision log in plain language, including the trades the system chose not to make, is how you audit an AI you have let into your account. JorgAI members get that log from day one; a free account shows it on a simulated account before any broker is connected.

Where JorgAI fits

JorgAI is the third kind of connection: an application on the broker's official API, authorized by the member at Schwab, tastytrade or Alpaca through the broker's sign-in, or with a trade-only key at Alpaca, Tradier, Kraken and the Crypto.com Exchange. The member sets the rules once (caps, stops, a daily loss limit, a confidence threshold) and the software runs them unattended, logging every trade and every setup it skipped in plain English. The numbers behind that log, from the 30 days to October 28, 2026: the auto-trader analyzed 2,210 setups for 15 members, 472 came back as buy signals, and 165 orders were placed, which is one trade for every thirteen setups looked at. The rest were held back by the members' own rules: hold signals, per-symbol cooldowns, daily scan budgets, position and spend caps. The Schwab setup guide shows the authorization flow step by step, and anyone can start from the funnel page and connect a broker in a few minutes. JorgAI is software that executes a member's own rules in the member's own account; it is not a broker and does not give investment advice.

Quick answers

What is IBKR Autonomous Trading? A capability launched October 21, 2026 that lets eligible Interactive Brokers clients authorize a connected AI platform to place supported orders inside a separate, funded AI Partition of their account, on instructions the client defines, with revocation through Client Portal.

Is Schwab launching AI trading? Schwab is piloting direct connections from large language models to its servers, starting with Claude, with Schwab controlling sign-in and not allowing the AI to move money. Its chief executive said Schwab does not intend to create trading strategies for clients. A wider launch was described in an October 27 analyst note as expected in coming months; Schwab has not given a date.

What does tastytrade's MCP server do? It lets an AI system connect to a tastytrade account through the Model Context Protocol, on top of tastytrade's public API. tastytrade does not endorse any connected AI and holds the client responsible for actions taken on its output.

Can a trading bot withdraw money from my account? Not through a broker's retail trading API or an MCP connection as published; those cover accounts, positions, orders and quotes. Check the permission list of any key you create and keep withdrawals off.

Why does my broker block AI agents? Because an agent signing in with your password looks like an account takeover and sits outside the broker's terms. Brokers offer approved routes instead: a partition, an MCP server, or an authorized application on the official API.

Data: Interactive Brokers press release and AI integrations page; Charles Schwab third-quarter 2026 earnings call transcript (October 15) and InvestmentNews (October 28); the Jefferies note as summarized by Investing.com (October 27); tastytrade newsroom; the Model Context Protocol introduction; all read October 29, 2026. JorgAI counts are aggregates from its own auto-trade records for the 30 days to October 28, 2026. Nothing here is investment advice or a recommendation of any broker.