Security
Your keys, your account, your call.
Kalshi MCP is non-custodial. Your credentials are encrypted at rest and used server-side only. The service never initiates a trade, and supported clients can require confirmation before an order tool runs.
Credential protection
Credentials are sealed with @hapi/iron using AES-256-CBC encryption, HMAC-SHA-256 integrity protection, and PBKDF2-based key derivation. Credentials added through the dashboard remain in Clerk server-side private metadata, are used server-side only, and are never returned to your AI client.
An advanced fallback tool can accept credentials through a chat conversation before encrypting them. Use the dashboard path when you do not want credentials to pass through AI tooling.
- Cipher
- AES-256-CBC
- Integrity
- HMAC-SHA-256
- Key derivation
- PBKDF2
- Library
- @hapi/iron
Member control
Trades run in your own Kalshi account, and Kalshi MCP never holds your funds. The service does not create orders on a schedule or initiate them by itself. An order is submitted when a connected client invokes an order tool; it may fill, rest, or be rejected. Review that client's confirmation and auto-approval settings before enabling trading.
Non-custodial
Trades run in your own account
Member-directed
The service never initiates an order
Order confirmation controls
Supported clients can require confirmation
Per-user isolation
Encrypted records are isolated by Clerk user
Dashboard-first credentials
Keys added there never reach your AI client
Report a vulnerability
Please share a clear description, affected surface, reproduction steps, and potential impact. Do not send live credentials, private keys, or other sensitive member data.
Good-faith reports are welcome, but publication of this policy does not authorize security testing. Do not access data or accounts you do not own, disrupt service, use social engineering, or test Kalshi systems.
No bug bounty. We do not offer a bug bounty or promise payment for reports.
Important context
Kalshi MCP is an independent, unofficial product. It is not affiliated with, endorsed by, or sponsored by Kalshi Inc. or KalshiEX LLC. Information and software provided through this service are not investment advice.