Agentic Trading, Explained: The AI Can Press Buy. You Still Own the Loss.

Sunday Classroom · October 2026

There is a new button in retail brokerage, and it is not a stock tip. It is permission. You tell an AI what you want in plain English. The AI watches prices, reads your account, and can place the order. That is agentic trading.

In 2026 that idea left the lab and landed inside apps people already use. Public opened AI Agents on March 31. Robinhood opened Agentic Trading on May 27. Webull followed with its own connection on June 11.

That is a real product. It is not a paycheck. And it is not a shortcut around the one rule this classroom repeats: you are responsible for every dollar that leaves the account.

What is agentic trading?

The word that matters is agent. A chatbot talks. An agent acts. Three tools keep getting mixed up:

• Chatbot: answers questions. It cannot see your positions, and it cannot send an order.
• Classic trading bot: follows a fixed rule, like “sell if the stock drops 8%.” It does not think, and it does not notice when the market leaves its rule behind.
• Agent: you describe the job in English. The model reads live data and your portfolio, then takes a step: research, draft an order, or send the order. Then it looks again.

That loop — see, decide, act, look again — is what “agentic” means. An agent fails when it does what you said, not what you meant. “Buy the dip in tech” is not an order. It is a vibe.

How the plumbing works

Two designs showed up in 2026. Either way, the loop is the same.

Bring your own agent

Robinhood, Webull, and Public all offer a connection built on the Model Context Protocol (MCP), an open plug that lets Claude, ChatGPT, and similar tools talk to a broker. You authenticate. The agent gets tools: quotes, positions, an order preview, and sometimes a button that actually sends it.

Build the agent in the app

Public’s main Agents product never sends your account to an outside model. You type the strategy, Public’s AI asks what you left out, and you review and activate the workflow. It runs on Public’s systems until you pause it or kill it.

The loop

1. You write the mandate: universe, size, trigger, time of day, and what “stop” means.
2. You fund only the slice of money the agent is allowed to touch.
3. The agent checks conditions against live data.
4. It drafts or sends an order, depending on the approval switch.
5. You get an activity feed. You can disconnect.

None of the three brokers charge a separate fee just to connect an agent. You still pay the same commissions and fees, and pattern-day-trader rules, options approval levels, and buying power still apply. The AI does not get a hall pass from FINRA.

Robinhood vs. Webull vs. Public at a glance

	Robinhood	Webull	Public
Opened	May 27	June 11	March 31
Agent options	External MCP agent in a separate agentic account, plus built-in Robinhood Agents	ChatGPT, Claude, or any MCP-compatible agent	In-app AI Agents, plus Public MCP
Approvals	Built-in: on by default. External MCP: off by default	Read-only mode, size caps, symbol limits, order preview	Approve the workflow once, then it runs
Assets	Long equity, options, crypto	Equities, options, futures, event contracts, crypto	Examples include covered calls, bitcoin buys, and cash sweeps into bonds

How agentic trading works on Robinhood

Robinhood now has two doors into the same idea.

• External agent: paste Robinhood’s trading MCP address into Claude, ChatGPT, Cursor, Codex, Grok, or another compatible tool, then open and fund a dedicated agentic account. It is a self-directed individual account, not an IRA. Crypto needs a linked Robinhood Crypto account, and the agent cannot transfer, stake, or lend it.
• Robinhood Agents: built into the app at the end of September 2026. You pick a model, write instructions and limits, and chat about research and strategy.

Read the approval default twice, because the two doors are opposite. On built-in Robinhood Agents, approvals start on. On external MCP accounts, approvals start off, so the agent can send eligible orders without you tapping confirm.

Robinhood’s own line is the one to tape above the screen: “You are ultimately responsible for the trades your AI agent places in your Agentic account.”

How it works on Webull

Webull’s pitch is the widest toolbelt. The agent can pull live prices, charts, analyst ratings, balances, and positions, then draft a buy, a sell, a modify, or a cancel.

The safety set is the part worth using on day one:

• Start in read-only mode, so the agent can look and cannot trade.
• Cap order size and order value.
• Restrict the agent to a short list of symbols.
• Unlink is one click.

Webull’s disclosure matches the others: the agent can misread you or act on stale data, and losses from AI-driven decisions are yours.

How it works on Public

Public runs two products, and mixing them up is how people get surprised.

AI Agents is rules you write in English. The system asks what you skipped, you see the full workflow, and nothing runs until you approve it. After that, it does not text you for a fresh yes on every fire. You can pause, edit, or shut it down, and every action lands in the activity feed.

Public MCP lets Claude, ChatGPT, and Perplexity connect. Public’s disclosure is blunt: the agent may place trades without your input on each transaction, and once account data reaches that provider it has left Public’s security environment.

How you can actually benefit

The honest use is not “make me rich while I sleep.” It is removing the part of a written plan that humans skip.

• Rebalancing: flag when a holding drifts more than 5 points from its target weight, and draft a rebalance only inside a pre-set dollar cap.
• Dividend watchman: list every holding whose yield jumped because the price fell more than 15% in a month, and do not place an order.
• Options practice: one tiny defined-risk debit spread, under a set dollar cap, only during regular hours. Max loss is still the debit.
• Time zones: a rule you would have followed at 10:15 a.m. still fires at 10:15 a.m. if you are in a meeting.

That is the benefit. Consistency on a rule you already understand. Not a new edge the model invented at 2 a.m.

What to know before you fund it

• The loss is yours. Every broker in this article says so.
• Outside agents export your data. Positions, balances, and instructions can sit with the AI company under its terms.
• Agents hallucinate. They mix up share counts with dollar amounts and treat yesterday’s headline as today’s price, and they sound sure doing it.
• Speed cuts both ways. Wash-sale lots, day-trade counts, and options assignment do not care that “the AI did it.”
• It is not a retirement plan. A 12% covered-call headline is not a 5% withdrawal. Automation makes a bad income story faster, not truer.
• Features are moving. Check the broker’s current page before you connect anything.

Pros and cons of agentic trading

Five pros

1. You can write the rule in English. No API key, no cron job.
2. The rule can run when you cannot watch.
3. The better brokers fence the money, so a bad prompt cannot reach the whole brokerage.
4. Research and execution sit in one thread.
5. The activity feed shows where your instruction was vague, even if you never let it trade.

Five cons

1. You own every fill. “I didn’t mean that” is not a cancel.
2. Plain English is fuzzy, and models fill gaps with confidence.
3. External agents move account data off the broker.
4. Autonomy can hide a bad strategy. Thirty small trades can add up to a loss you would have stopped after trade three.
5. It tempts overtrading.

The classroom way to try it

• Start read-only for a week. Make the agent explain every check in one paragraph at the close.
• Fund only an amount you can lose without touching the 401(k) match, the Roth, or the bills.
• Cap the order size and the symbol list. Leave approvals on. Regular hours only.
• For income, the Rule of 5% is still the withdrawal math. An agent only changes who clicks sell.
• If you cannot find the off switch in under a minute, you are not set up yet.

Bottom line

Agentic trading is a permission layer on top of a brokerage account. The benefit is execution of a rule you already understand. The cost is that the rule runs even when the rule was wrong.

Treat the first month as a lab. Small account. Approvals on. No retirement money. The agent can press buy. You still own the loss.

Education only. Not a recommendation to buy, sell, or connect an agent. Broker features, fees, and state rules change. Options can expire worthless. You can lose the money you put in an agentic account. Check each broker’s current disclosures before you fund one.