Bankrbot × Robinhood MCP
userThe autonomous trading path: Bankrbot as the agent interface, HISS as compiler and fuse verifier, Robinhood MCP as the user-authorized execution rail.
The autonomous trading path, in one sentence
HISS prepares a verified autonomous trading capsule for Bankrbot and a Robinhood-MCP-connected agent; live execution requires your own Robinhood Agentic Account, your explicit acknowledgment, a funded agentic budget, and the mandatory fuses — and even then, HISS itself sends nothing.
Who does what
- Bankrbot is the user-facing agent and payment interface: it can call the paid HISS x402 services, walk you through the agentic trading setup, and hand the compiled instruction packs to your Robinhood-MCP-connected agent. Bankrbot never gets your Robinhood credentials either — the MCP connection is OAuth through Robinhood’s own login.
- HISS is the compiler, fuse verifier, and receipt layer: it validates your Coil (allocation math, symbol spaces, the ten mandatory autonomy fuses), compiles the Bankrbot command pack and the Robinhood MCP execution capsule, and writes a deterministic receipt with
liveOrderSent: falsehard-typed. - Robinhood MCP (
https://agent.robinhood.com/mcp/trading) is the user-authorized execution rail: the only place orders can actually happen, inside your own Agentic Account, under Robinhood’s controls and your consent settings.
Your Robinhood Agentic Account — required, and yours alone
Per Robinhood’s docs (verified 2026-07-07): agentic trading is in beta with an invite-style rollout (“not available to everyone just yet”), onboarding is desktop-only, and it requires a primary individual investing account in good standing. Agents can trade only inside a dedicated Agentic account you fund with a reserved budget — every other account is read-only to the agent. Asset support today is long equities and options orders (per Robinhood’s Trading with your agent article, last verified 2026-07-07); crypto, futures, and event contracts are announced as “coming soon” and are not supported — HISS copy will not pretend otherwise.
Robinhood’s own responsibility model, stated plainly: you are ultimately responsible for the trades your AI agent places; if you have asked your agent to act without your approval, it can place trades without your confirmation; and every order appears in the Activity section of your Agentic account and in your Robinhood history. HISS does not send those orders and does not store your Robinhood credentials — it compiles the constraints your agent carries in.
Set it up in Robinhood’s own flow: robinhood.com/us/en/agentic-trading. HISS is not part of that flow and never sees your login.
The paper-first workflow
- Create or import a Coil — your strategy, your tickers, weights in bps summing to 10,000.
- HISS validates the Coil, the broker-symbol space, and the ten mandatory autonomy fuses.
- Compile in
papermode (the default, always) and review the paper runbook. - Export the Bankrbot command pack and the Robinhood MCP execution capsule.
- Run a paper preview with your agent and review the results against the receipt.
- Only then, pass the live-readiness gate: a separate, explicit
LiveAutonomyAck— never inferred from a mode string — beforelive_candidatecompiles at all. - After any agent session, run the post-run audit against the receipt.
How x402 paid calls fit in
Bankrbot — or any x402-capable agent — can pay per call for the HISS autonomy services on Bankr x402 Cloud (priced in USD, settled in USDC on Base; a failed 4xx call is not billed). The same operations are available free and rate-limited at /api/bankrbot/*.
| Service | Per call | What it returns |
|---|---|---|
| compile_coil_for_robinhood | $1.00 | Full artifact set: Bankrbot command pack, Robinhood MCP instruction pack, runbook, receipt. |
| validate_autonomy_fuses | $0.50 | The ten mandatory autonomy fuses plus the live-readiness gate, as a verdict. |
| generate_bankrbot_trading_prompt | $0.50 | Just the copy-pasteable Bankrbot command pack for a verified Coil. |
| simulate_rebalance_plan | $0.75 | Drift report against supplied weights — proposals are previews only. |
| post_run_audit | $0.50 | Check reported agent activity against a receipt's fuses after any session. |
curl -s https://www.hiss.finance/api/bankrbot/schema
# the same five operations, free and rate-limited, no payment required:
curl -s https://www.hiss.finance/api/bankrbot/compile-robinhood-path \
-H "content-type: application/json" \
-d '{"coil": { ... }, "options": {"autonomyMode": "paper"}}'Agent-discoverable schemas: /api/bankrbot/schema and each service’s bankr.x402.json. The canonical agent operating manual is served at /SKILL.md.
Risks and limitations
- Autonomous trading involves substantial risk, including loss of principal.
- Agents make mistakes: they can misread instructions, mistime rebalances, or act on stale data. Fuses bound the blast radius; they cannot make a strategy good.
- Users are responsible for monitoring agents, account activity, and positions.
- Robinhood’s rollout constraints apply: invite-style access, desktop onboarding, long equities and options orders only, and Robinhood explicitly does not supervise or audit any agent.
- HISS receipts prove what was compiled — they are never a performance claim and never a record that an order happened.
The full consent and fuse model is specified in Autonomous trading safety; what production-live means for this path in Production live autonomy; the Robinhood-side details live in Robinhood Agentic Trading.