Pitbridge MCP server

PitBridge

A local-first MCP bridge for NinjaTrader 8, with hard risk limits your AI cannot bypass.

PitBridge connects an AI agent (Claude Code, Claude Desktop, or your own script) to a NinjaTrader 8 futures account through a daemon that runs on your own machine. Every order the agent asks for passes through a deterministic guardrail engine first. The guardrails are default-on, they live in code rather than in prompts, and the agent has no tool to weaken them, unlock live trading, or release the kill switch.

We build rails, not alpha. PitBridge does not tell you what to trade.

What it is

streamable HTTP), a REST API, and a WebSocket event feed. It runs on macOS, Linux, or Windows.

• A local-first daemon (Python 3.12) that speaks MCP (stdio and

halt, position caps, trading windows, rate limits, a kill switch, and more) that every order must pass before it can reach the broker.

• A deterministic guardrail engine: pure, synchronous checks (daily-loss

orders through the official NinjaTrader.Cbi Account API. The AddOn is deliberately dumb: all safety lives in the daemon.

• A thin NinjaTrader 8 AddOn (C#) that connects out to the daemon and places

decision, and outcome, and can tell you exactly why any order was allowed or blocked.

• An append-only, hash-chained audit log that records every request,

What it is NOT

Read this section before anything else.

create to your existing NinjaTrader account. It holds no funds and executes nothing itself.

• Not a broker or an exchange. PitBridge routes orders you (or your agent)

will not tell you what, when, or how much to trade. That is your job, or your agent's.

• Not signals, strategies, or alpha. PitBridge ships no trading logic. It

match your firm's rules. PitBridge helps you encode and enforce them locally, but you remain responsible for staying within your firm's terms. We make no compliance guarantee.

• Not financial or investment advice. It is trading infrastructure.
• Not a guarantee of prop-firm compliance. You configure the limits that

servers. There is no PitBridge account in the order path.

• Not a cloud order relay. Orders, keys, and positions never touch our

command line. The agent cannot arm live trading, and it cannot lift a kill.

• Not autonomous. Enabling live execution is an operator-only ritual at the

Architecture

The entire order path is local. PitBridge's own cloud (the marketing site, the docs, software updates) is never in it.

AI agent   (Claude Code / Claude Desktop / your own script)
      │
      │   MCP (stdio or HTTP)   REST /v1/*   WS events
      ▼
   PitBridge daemon                         ← runs on YOUR machine
      │
      │   frozen pipeline (no code path skips it):
      │   schema → permission → GUARDRAILS → confirm → submit → audit
      ▼
   Guardrail engine   (deterministic, default-on, not reconfigurable by the agent)
      │
      │   WebSocket on :8873   (the AddOn dials OUT; the NT8 box never listens)
      ▼
   NT8 AddOn   (C#, .NET 4.8, next to NinjaTrader 8 on Windows)
      │
      │   NinjaTrader.Cbi Account API   (close / flatten are strictly reduce-only)
      ▼
   NinjaTrader 8   →   your broker / prop account   (CQG, Rithmic, ...)

   PitBridge's own cloud is NOT on this path.
   Orders, keys, and positions never leave your machine(s).

Two run modes:

Shortened. The full README is on GitHub.