Scoped to trading
The token authorizes order placement and account reads in the Agentic account. It is not a general-purpose key to your Robinhood identity.
Security
The whole surface, including the uncomfortable parts
A tool that stands between an AI and your brokerage account should be specific about what it holds, what it can reach, and what it does when it breaks. Here is all of it, in order.
01 — Access model
What we hold, and why we have to
Sitting in the path is what makes Breaker unbypassable. It is also what makes it a thing you have to trust. Both are true, so we lead with the cost rather than the benefit.
What sitting in the path actually requires
To check orders before they reach the market, Breaker has to hold a scoped Robinhood access token for your account. We would rather say that plainly than bury it.
- The token is encrypted at rest and decrypted only inside the request path when an order is being evaluated or forwarded.
- Write access is confined to the ring-fenced Agentic account you fund deliberately — not your main brokerage balance.
- Breaker never takes custody of your funds. It can only relay, hold, or refuse the orders your own agent proposes.
- The kill switch revokes the token immediately, and you can revoke it from Robinhood independently at any time.
Encrypted end to end
Encrypted in transit over TLS, encrypted at rest, and decrypted only inside the request path while an order is being evaluated or forwarded.
Revocable from both sides
Kill it here, or revoke it from Robinhood without involving us at all. Neither route depends on the other staying online.
02 — Capabilities
Can and cannot, side by side
The most useful security question is not what a tool promises — it is what the tool is structurally unable to do. The right-hand column is the one that matters.
Breaker can
- Read quotes, balances, positions, and order history, and pass those reads straight through untouched.
- Forward an order to Robinhood when it is inside the limits you set.
- Hold an order, notify you, and wait — executing nothing until you approve it.
- Refuse an order outright and put the agent in timeout until you release it.
- Revoke the agent’s access to your account instantly, on one tap.
- Write every proposed order and its verdict to an append-only record.
Breaker cannot
- Move money out of your account, withdraw funds, or touch linked bank accounts.
- Trade anywhere except the ring-fenced Agentic account you funded.
- Take custody of your funds or hold your assets at any point.
- Place, size, or time an order on its own initiative — something has to propose one.
- Pick trades, recommend positions, or give you financial advice.
- Loosen, disable, or expire the rules you set. Only you change those.
03 — Failure behaviour
When the gate cannot decide, it does not forward
Every gate has to pick a default for the moment it goes wrong. Failing open would mean an outage silently turns off your limits, so Breaker fails closed instead.
Engine reachable, order inside your rules
Evaluated in under a millisecond and forwarded. The network hop costs more than the decision.
Engine reachable, order needs a human
Parked, and you are notified. If you never review it, the hold expires into a rejection rather than executing late.
Engine unreachable, order unevaluated
Not forwarded. An order that could not be checked is treated as an order that was not approved.
Failing closed has a cost, and it is yours to weigh
If Breaker is unavailable, your agent stops being able to place trades. Harmless reads such as quotes and balances may still pass through, because they cannot move money. You are never locked out of your own account: you can place trades yourself in the Robinhood app at any time, and you can revoke Breaker’s access from Robinhood whether or not our service is reachable.
04 — Blast radius
Your first and best control is the balance you fund
Robinhood runs agent trades through a dedicated Agentic account that you move money into on purpose. Every rule Breaker enforces sits inside that boundary — the boundary itself is set by you, before any software is involved.
01
You open the agent account
It is separate from your main brokerage balance by design. Nothing reaches it unless you put it there.
02
You choose the number
Whatever you fund is the absolute ceiling on what an agent — well-behaved, confused, or hijacked — can ever put at risk.
03
Rules narrow it further
Breaker then applies your per-trade caps, exposure ceilings, loss limits, and cooldowns inside that ceiling.
Breaker enforces limits that you set yourself. It is a risk-control tool: it can reduce the damage of a bad decision, but it cannot eliminate risk and cannot guarantee against losses.
05 — Stopping it
One tap ends it, and the agent cannot undo that
Instant revocation was the safeguard traders asked for most in OKX’s survey of 1,400 US crypto traders published July 21, 2026 — real-time notifications plus the ability to revoke a permission immediately, by more than two to one over anything else, and the only question in that survey with no generational split.
Kill switch
Kill switch
One tap cuts the agent off from your account entirely. The scoped token is revoked and in-flight proposals stop at the gate.
Block
Timeout the agent cannot lift
A blocked order puts the agent in timeout. Releasing it is an action only you can take — asking nicely, retrying, or rephrasing changes nothing.
Hold
Notify, then wait
Held orders reach you in real time and execute only on your approval. Silence is a rejection, not a delayed yes.
06 — Trust model
We do not have to trust your agent, because we do not listen to it
Prompt injection is not a hypothetical for an agent that reads the open internet. The defence is structural: Breaker never reads the agent’s reasoning, so there is nothing in the reasoning to manipulate.
What the gate reads
- The structured order itself:
symbol,side,quantity,price. - Account state fetched independently from Robinhood — not the agent’s description of your account.
- Your rules, evaluated as arithmetic: identical inputs produce an identical verdict, every time.
What the gate ignores
- The agent’s chain of thought, justification, or confidence.
- Any claim the agent makes about your balance, exposure, or intent.
- Instructions embedded in a webpage, a document, or a tool result that the agent happened to read.
- Urgency. A verdict cannot be talked out of, hurried, or appealed to.
A hijacked agent is still an agent with no second route
If something convinces your agent to liquidate everything into one ticker at 3am, it can propose exactly that. The proposal arrives at Breaker like any other, gets measured against your concentration cap, your exposure ceiling, your allowlist, and your no-trade window, and gets held or refused on arithmetic. There is no path to Robinhood that skips the check, because the check is the road.
07 — Data handling
What gets written down
The append-only record is a security feature and a privacy commitment at the same time: it exists so verdicts cannot be rewritten later, which means it should contain decisions, not your life.
Logged
- The structured order your agent proposed: symbol, side, quantity, order type, and price.
- The verdict, the specific rule that produced it, and the timestamp — written before the outcome is known.
- The account snapshot used for that evaluation, so the decision can be reconstructed exactly.
- Actions you take: approvals, rejections, rule changes, timeouts released, kill switch pulls.
Not logged
- Your Robinhood password or login credentials. Breaker never sees them.
- Your agent’s chat transcript, prompts, or reasoning. The gate does not read them and does not need them.
- Anything from accounts other than the one you connected.
Records are encrypted in transit and at rest. We do not sell personal data. You can request deletion of your account data at hello@breaker.trade.
08 — Responsible disclosure
Found something? Tell us before you tell the internet
Good-faith security research is welcome. Send details — what you found, how to reproduce it, and what you think the impact is — and we will acknowledge you and keep you updated while we fix it.
security@breaker.trade- Please test only against accounts you own. Never touch someone else’s funds or data.
- Please avoid automated scanning that degrades the service for other people.
- Give us a reasonable window to ship a fix before publishing.
What we are not claiming
Breaker holds no security certifications and has not completed a third-party audit, because it has not launched. We intend to commission an independent security review before general availability, and we will say who did it and what they found rather than posting a badge.
Breaker is pre-launch software. Features described on this site are planned and may change before release.
Read the rest before you decide
The FAQ covers the failure modes, the limits of what a gate can do, and the questions that do not flatter us. When the gate opens, this site will say so.
Robinhood is a trademark of Robinhood Markets, Inc.. Breaker is an independent third-party tool and is not affiliated with, endorsed by, sponsored by, or supervised by Robinhood Markets, Inc. or any of its subsidiaries.
You are responsible for every trade placed in your account, including trades placed by an AI agent you have authorized. Robinhood does not supervise third-party agents.