For AI assistants
The Amaltash MCP connector
The connector lets an AI assistant that supports the Model Context Protocol (MCP), such as Claude, work with your Amaltash account after you sign in. By default it can read your account, build and backtest strategies, and use paper trading. With your explicit permission it can also deploy with real money and start deposits, and each live deploy waits for your approval. It can never withdraw money.
Connect it
Claude (web, desktop and mobile)
- In Claude, open Settings, then Connectors, and add a custom connector.
- Enter the URL
https://mcp.amaltash.com/mcp. - Choose Connect. Sign in to Amaltash and review the consent screen.
Claude Code
Run this in a terminal, then run /mcp in Claude Code to sign in:
claude mcp add --transport http amaltash https://mcp.amaltash.com/mcpEither way, you sign in on Amaltash with OAuth. The assistant never sees your password.
Permissions
You choose what an assistant may do when you connect it. You can change your mind by reconnecting.
| Permission | What it allows | How it is granted |
|---|---|---|
| read | See your account, balances, brokerage status and linked banks. Search the marketplace. Create, fine-tune and backtest strategies. Use a paper trading account and deploy or stop paper strategies. | By default, when you connect. |
| trade | Deploy a strategy with real money, up to your available cash. Stop a live strategy. Activate a new version of a live strategy. Start a deposit from your linked bank into your account. | Only if you tick it on the consent screen. It starts unticked. |
| kyc | Start opening a live brokerage account, and get single-use links where you upload your driving licence, review and submit your application, and link a bank. The assistant sees masked details only and cannot submit anything. | Only if you tick it on the consent screen. It starts unticked. |
| withdraw | Nothing. There is no withdraw tool, and the Amaltash API refuses withdrawals for every assistant connection. You withdraw money yourself, in the dashboard. | Never. It cannot be granted. |
Approvals
Even with trade, two actions wait for you: deploying a strategy live, and activating new code on a strategy that trades live. The assistant cannot approve them.
- We email you a link to the request.
- The request shows the strategy, the amount, that it is live, and the app that asked. An app Amaltash has not verified is labelled “Unverified app”.
- You approve or reject it in the dashboard. Each request can be approved once.
- A request you do not decide on expires after 15 minutes, and nothing happens.
Revoke access
In the dashboard, open Settings → Security. Under Claude connector, choose Revoke next to the connection. The assistant loses access within about 30 seconds. You can also remove the connector in Claude, but revoking in Amaltash is what ends the access.
Tools
Every tool the connector offers, grouped by the permission it needs. There is no withdraw tool.
Read (the default)
Available as soon as you connect. None of these moves money or changes what trades live.
- get_account_info
- Your Amaltash account profile.
- get_account_balance
- Brokerage cash and portfolio balance.
- balance_detail
- Balance and withdrawable cash, with the reasons for any difference.
- get_brokerage_status
- Brokerage connection and identity-verification status.
- connection_status
- Which accounts are connected, and how many banks are linked.
- connect_links
- Links to finish a connection step in the dashboard.
- list_banks
- Your linked banks: institution, last digits and status.
- search_marketplace
- Search published strategies in the marketplace.
- list_my_strategies
- The strategies on your account.
- create_strategy
- Create a new strategy from a plain-English description.
- backtest_strategy
- Test a strategy against historical data.
- provision_paper_account
- Open and fund a paper trading account, with simulated money.
- get_action_status
- Whether a request waiting for your approval was approved, rejected or expired.
- authenticate
- Check, or set up, the connection to your account.
- logout
- Forget the stored sign-in on this machine (local install).
Read for paper, trade for live
With read only, these work on paper strategies. On a live strategy they need trade.
- deploy_strategy
- Deploy a strategy. Paper by default; a live deploy needs trade and your approval.
- undeploy_strategy
- Stop a deployed strategy and close its positions.
- fine_tune_strategy
- Revise a strategy and backtest the new version. On a live strategy, read only saves a draft; activating it needs trade and your approval.
Trade
Only after you tick trade on the consent screen.
- deposit_funds
- Start an ACH deposit from your linked bank into your account. Wire instructions and the bank-link step need only read. You are emailed.
KYC (open a brokerage account)
Only after you tick kyc on the consent screen. These tools return links and a masked preview. They never take your SSN, ID photos or other personal details, and they cannot submit your application: you review and confirm it yourself, signed in, on Amaltash.
- start_account_setup
- Start, or resume, opening a live brokerage account.
- get_id_upload_link
- A single-use link where you upload your US driving licence.
- get_account_setup_status
- Account setup status, with a masked preview of what was read from your licence.
- get_review_link
- A single-use link where you review every detail, enter your SSN and submit the application yourself.
- get_bank_link_link
- A single-use link where you link a US bank with Plaid, once your account is approved.
Security and privacy
- Sign-in uses OAuth with PKCE. You approve the connection on Amaltash, and the assistant receives a token, not your password.
- The consent screen names the app and the address it returns to. Any app can register itself; one Amaltash has not verified shows an “Unverified app” warning. Only approve a connection you started yourself.
- What a tool returns is shown to the assistant: for example your balances, strategies, brokerage status and linked banks (institution and last digits). The assistant's provider handles it under its own terms. Ours are in the Privacy Policy.
- An assistant can misread a request. Check every approval before you accept it: the strategy, the amount, and live or paper.
- What the assistant writes is its own. It is not investment advice from Amaltash Advisors LLC, and it is not a recommendation to buy or sell any security.
Risk disclosure
Investing involves risk, including the possible loss of principal. Past performance does not guarantee future results and there can be no assurance that investment objectives will be achieved. The value of investments may fluctuate, and investors may not get back the amount originally invested. Algorithmic and rules-based trading strategies carry unique risks, including technology failures, model errors, and market volatility. Diversification does not ensure a profit or protect against loss.
Read the full Risk Disclaimer.