MCP Security, Privacy & Limits

Connecting an AI client to your trading account is a big step, so this page spells out exactly what that connection can and cannot do. The short version: the connector can read your TTMT data to answer your questions, and nothing more. It has no way to touch your money, your trades, or anyone else's account.

Read this before you connect. If you run into a problem while connecting, the MCP troubleshooting page walks through the common failures.

The read-only guarantee

The single most important thing to understand about the TTMT connector is that it is strictly read-only.

Read-only, always

The connector lets your AI assistant look at your trading data — trades, positions, performance, settings, channels, risk status. It can never place a trade, modify a trade, close a position, cancel an order, change a setting, or move funds. There is no "write" capability in the connector at all — not hidden, not optional, not coming later without you knowing. Even if you (or the AI) ask it to place a trade, it simply cannot.

This is not a policy you have to trust us to enforce by hand — it is how the connector is built. Every one of its tools only reads. There is no button, command, or trick that turns it into something that acts on your account. When you ask "If I got a XAUUSD BUY signal now, what would my order plan look like?", the connector calculates the answer on paper and shows it to you. No order is ever placed.

Your data stays yours. The connector only ever sees the data belonging to the account you signed in with. It cannot see another user's trades, signals, accounts, or settings — the same isolation that protects your data in the dashboard applies here.

How signing in works

You never paste a password, an API key, or any secret into your AI client to use the connector. Instead, you sign in the same way you sign in to the dashboard, and you approve exactly what the client is allowed to do.

Here is the whole flow, in plain terms:

1. You add the connector URL in your AI client.
2. Your client opens a TTMT sign-in page.
3. You sign in with your normal TTMT account.
4. You see a consent screen that names the app asking for access and the read-only permission it wants. You click Allow.
5. That's it — your client is connected.

There is no separate MCP password to remember and no key to copy around. The sign-in is handled by the same secure standard (OAuth) that trusted "Sign in with…" buttons use across the web.

Every request is re-checked

Access is verified on every single request your AI client makes — there is no long-lived session sitting open in the background. If your access is ever turned off, the very next question your client asks will stop working. Nothing keeps running on stale permission.

The exact same "read-only, you sign in, you approve" model backs the Developer API too — the connector is just the conversational, natural-language door to the same protected data.

Revoking access whenever you want

You are always in control of the connection, and you can end it at any time.

You revoke access from your AI client's connector settings — for example, in Claude under Settings → Connectors, remove or disconnect the TTMT connector. Once you do, the connection is dead: the next request is rejected, and your client can no longer read your data until you connect and approve again.

TTMT never quietly reconnects a connector you removed. Disconnecting is your decision and it sticks.

The 60 requests/minute limit

To keep the service fast and fair for everyone, each user can make up to 60 requests per minute through the connector.

A single question you type usually turns into a small handful of requests behind the scenes (the AI gathers the data it needs to answer you), so this limit is generous for normal back-and-forth conversation. The limit is counted per user, shared across all your MCP clients — if you have the connector set up in two different apps at once, they draw from the same 60-per-minute budget.

A rate-limit can look like a sign-in problem

There is a known quirk worth knowing about. If you hit the 60-per-minute limit, your AI client may report it as a sign-in or authorization failure rather than a clear "you're going too fast, slow down" message. If your connector was working fine and suddenly complains about access right after a burst of rapid questions, you have almost certainly just hit the rate limit — wait a minute and try again. See MCP troubleshooting for how to tell this apart from a genuine access problem.

Daily limits by plan

The per-minute limit above keeps bursts fair. Separately, how much you can use the connector per day depends on your plan.

• Essential plan — a daily allowance of about 25 tool calls (roughly three questions), counted per day and reset at midnight UTC. A single question usually spends a few tool calls, so this suits light, occasional use.
• Pro and higher plans — unlimited MCP usage, with no daily cap.

When you reach the Essential daily allowance, the connector doesn't fail cryptically — every tool returns a short, friendly message that explains you've hit the day's limit and offers two choices: wait for the reset, or upgrade to Pro (which also unlocks up to 5 MetaTrader accounts and advanced stats for comparing strategies). Your AI client relays that message to you in plain language.

Rolling out

Like the rest of the connector, MCP access and these plan limits are enabled per account as the feature rolls out. You can change plans any time from your billing settings.

The API-access gate

The connector shares one entitlement with the Developer API: your account needs API access enabled before either will work.

Availability

MCP access is enabled per account by the TTMT team and is rolling out gradually — it's the same gate as the Developer API. Signing in with a valid TTMT account is necessary but not sufficient: if API access isn't yet enabled for your account, the connection will fail even after a correct sign-in. If sign-in or the consent step doesn't stick and you believe your details are correct, your account may simply be waiting to be enabled — message support and we'll get you set up.

Because of the rate-limit quirk above, a failed connection has two common innocent explanations that both look similar: your account isn't API-enabled yet, or you've briefly exceeded the rate limit. Neither means anything is broken with your credentials.

Quick reference

Question	Answer
Can it place, close, or modify a trade?	No — read-only, always.
Can it move funds?	No.
Can it see other users' data?	No — only the account you signed in with.
Do I paste a password or API key?	No — you sign in and approve a consent screen (OAuth).
Is there a long-lived session?	No — access is re-checked on every request.
How do I disconnect?	From your AI client's connector settings, any time.
Rate limit?	60 requests per minute, per user, shared across all your clients.
Daily limit?	Essential plan: ~25 tool calls/day (about 3 questions), reset at midnight UTC. Pro and higher: unlimited.
What do I need to connect?	A TTMT account with API access enabled.

Related pages

• API Authentication — how the same read-only entitlement and sign-in model works for the Developer API.
• MCP Troubleshooting — fixing connection failures, including the rate-limit-looks-like-auth quirk.