Can Claude Trade? What the Evidence Shows

Can Claude trade? Yes, in the mechanical sense: Claude can be connected to live trading rails, and since May 2026 a major US broker has let its customers do exactly that. Robinhood's Agentic Trading feature connects Claude to a brokerage account through the Model Context Protocol (MCP), and exchange APIs make the same wiring possible outside a broker. The question worth measuring starts after the connection: does the raw model show an edge, and what actually decides the outcome once real money moves? This page collects the public record, our published harness measurements, and our internal replay league, with each piece labeled by what it can establish.

Evidence boundary: This page summarizes a third-party live competition, a third-party benchmark preprint, DXRG controlled tests, and one internal replay league. Every figure is bounded to the setting that produced it, and no result here establishes profitability, universal safety, or future performance for any model.

The Short Answer

Three claims get collapsed into one whenever someone asks whether Claude can trade, and they have different answers.

The first claim is connectivity. Can Claude reach a venue and place an order? Yes. Tool-use APIs, MCP connectors, and broker features like Robinhood Agentic Trading give the model a path from text to an executed trade. If you searched for a Claude trading bot, that wiring is what most tutorials and product pages describe. MCP, the protocol behind the broker integration, is a standard way to hand a language model tools: the broker exposes account data and order placement as typed functions, and the model calls them in a loop of observe, decide, act. Nothing about that loop requires the model to be good at trading. It only requires the model to be connected.

The second claim is competence. Does the raw model, handed market data and left to decide, show a demonstrated edge? The public evidence says the opposite so far, and the measured record is below.

The third claim is control. When a trade happens, what governed the exact action that reached the market? That is the question our work answers, and the answer is the harness: the system around the model that compiles the mandate, assembles state, checks policy, executes, and records the trace. Two setups with the same model can produce opposite outcomes because their harnesses differ.

What the Public Record Shows

The cleanest public measurement so far is Alpha Arena Season 1, run by the research lab nof1.ai.¹ Six frontier language models each received $10,000 in real capital and traded crypto perpetuals on Hyperliquid from late October into November 2025, a window of roughly two weeks. Every model saw the same market data format and the same action space. The results:

Alpha Arena Season 1: six models, $10,000 real capital each, about two weeks

Claude finished in the middle of the table, down 30.8%. Four of the six models lost a third or more of their capital in two weeks, and the two positive results came from the same rails that produced those losses. One season on one venue with one prompt setup is a snapshot, and it says little about any model's permanent ranking. What it does show is that identical wiring plus different models produced an 85-percentage-point spread, and that most of the field lost money quickly.

The second public source is KTD-Fin, a memory-controlled benchmark for LLM trading agents on stock markets (arXiv:2605.28359).² Its design holds prompts, tool interfaces, and execution rules constant across models while masking future information. It then separates each model's result into market, style, and stock-selection components. The paper reports that 9 of 10 frontier LLMs showed negative stock-selection alpha, meaning their picks did worse than the style exposures they took on. We have registered KTD-Fin in our benchmark audit registry and have completed no source audit of it yet, so we report its finding as the authors' claim rather than a reviewed result.

These two sources measure different things, and they complement each other. Alpha Arena is live evidence: real capital, a real venue, a short window, and no controlled masking. KTD-Fin is a controlled benchmark: historical markets, strict information masking, and component attribution. One records what happened in a public two-week competition; the other measures whether each model's picks beat the exposures those picks took on. Both point in the same direction.

Read together, the public record answers the competence question narrowly: across the measured public settings, no frontier model, Claude included, has shown a repeatable raw-model edge. Anyone claiming otherwise about a Claude trading setup should be asked which of these measurements their claim survives.

What Changes When the Harness Changes

Our own Claude-specific numbers measure a different axis: what happens to the same model when the system around it changes. In a separate internal EVM transaction-construction evaluation, aligned successful construction was 87% for Claude 4, 96% for Claude 4.6, and 99.9% for Claude 4.6 with a Terminal Pro-style harness.³ The model generation moved the number by nine points. The harness around the stronger model moved it by another four, to within a tenth of a percent of perfect construction.

A harness is everything around the model that turns text into a governed action. In our stack that means compiling the owner's mandate into an explicit contract, assembling current market and portfolio state, and invoking the model. It then means parsing the answer into a typed action, checking that exact action against deterministic policy, submitting once, and reconciling the outcome into the next state. Each stage is recorded in one trace. When someone says Claude traded, the useful follow-up is which of those stages the output passed through before money moved.

Two controlled pre-launch tests from the DX Terminal Pro record show the mechanism at finer grain. Moving an unchanged fee sentence from paragraph eight to paragraph one raised fee citation in reasoning traces from 3% to 74% while the model, the wording, and the market data stayed fixed.³ A compound intervention that demoted prior reasoning from precedent to context reduced fabricated sell rules from 57% to 3% in the affected test population.³ Same model, same facts, different compiled context, different behavior.

These figures measure construction quality and behavioral control. They sit apart from open-market P&L, and we report them as harness evidence, the same framing we used in our FSB consultation response and in the paper companion. The mechanism they expose matters for anyone wiring Claude to a brokerage: the model proposes, and everything between that proposal and the market decides what actually happens. Our guardrails article describes that system in engineering form, and the guardrail matrix dataset (CSV) maps each control to its evidence requirement and failure signal.

What Our Own League Adds

Since June 2026 we have run an internal head-to-head league that replays captured production scenarios across model pairs. The current Claude record covers 416 captured scenarios, scored by replay regret in basis points against the best action available in the recorded state, with paired bootstrap intervals over the shared cells. This is internal replay evidence: the scenarios come from production, the decisions are re-rendered offline, and no capital moves. Replay regret measures decision quality against the recorded state, and it is replay, not P&L.

Replay works like a flight recorder for decisions. We take the exact state the production system observed, render it to the candidate model under the same prompt and tools, and score the action it chooses against what the recorded state offered. Because the scenario is frozen, any difference in the answer belongs to the model and its decoding settings rather than to the market.

On decision quality, the league shows no separation. claude-fable-5 scores 264.37 basis points of replay regret against 263.27 for the qwen3.7 pair, a gap well inside the paired bootstrap interval. Judged on the quality of the chosen action, the Claude and Qwen generations we tested are within noise of each other.

On choice stability, the league shows a sharp separation. Repeating the same cell at temperature 0.6, Claude flips its chosen action in 35% of cells. The qwen3.7 pair flips in 90 to 95% of cells.

Choice flips across repeated decisions: Claude 35% of cells, Qwen pair 90 to 95%

Consistency is the one axis in our data where the models clearly separate, and for a trading agent it is the axis with operational weight. A system that gives a different answer to the same state on each invocation defeats regression testing, complicates reconciliation, and makes a written mandate hard to honor. A stable model inside a checked harness can be regression-tested the way we regression-test compilers: freeze the scenario, replay, and compare. Decision quality between frontier models may converge; whether a model holds its decision still long enough to be governed is a property you have to measure model by model.

What to Check Before Letting Any Model Trade

Whether the model is Claude, Qwen, or anything else, the evidence above reduces to four checks before capital moves:

1. Custody. Who holds the keys, and what can the model's credential actually do? A scoped API key that can trade but can never withdraw is a different risk from an account-level session.
2. Proposal versus decision. Does generated text reach the venue directly, or does deterministic software outside the model check the exact action against policy first?
3. Evidence class. Is the claimed result simulation, replay, paper, shadow, or live, and does the claim match the class? Our evidence ladder defines the rungs.
4. Disclosure. Does the setup answer the twelve questions in our benchmark card, including costs, baselines, repeated runs, and the trace from instruction to outcome?

The broker case adds one more question: what does the integration let the model do by default, and what still asks for your confirmation? Read a trading permission screen the way you would read a margin agreement.

A Claude trading bot that clears those checks is an engineered system with a model inside it. One that clears none of them is a language model with a credit card.

The Bottom Line

Can Claude trade? Yes: the rails exist, a major US broker connects Claude through MCP, and the wiring gets easier every quarter. Does the raw model bring an edge? The measured public record says no: a middle-of-the-field loss in the one real-capital public season, and negative stock-selection alpha for nearly every frontier model in the one memory-controlled stock benchmark. What changes outcomes is the system around the model: construction success moved from 87% to 99.9% across a model generation plus a harness in our evaluation, and our replay league finds Claude's decision quality within noise of its peers while its choice stability leads the field. Evaluate the whole path, measure stability before capital, and treat any unstated evidence class as replay. This article is the first in an evidence series; the second covers ChatGPT.

Version 1.0. Published August 17, 2026. Corrections: poof@dxrg.ai. This article is research and educational material, not financial advice.

Footnotes

1. nof1.ai, Alpha Arena Season 1, six frontier models trading $10,000 each in real capital on Hyperliquid, late October into November 2025. Results as published by the organizer. (nof1.ai) ↩

2. From Knowing to Doing: A Memory-Controlled Benchmark for LLM Trading Agents on Stock Markets (KTD-Fin), arXiv:2605.28359, 2026. Registered in the DXRG benchmark audit registry; DXRG has completed no source audit of this benchmark. (arXiv abstract) ↩

3. Barton, T.J. et al., Operating-Layer Controls for Onchain Language-Model Agents Under Real Capital, arXiv:2604.26091, 28 April 2026. (arXiv abstract) ↩ ↩² ↩³