NinjaTrader MCP Server: Hosted OAuth vs Local MCP

For real users, hosted wins. For experiments, local is fine.

NinjaTrader 8 is a Windows desktop application. You cannot expose it as a cloud service without something running on the same machine. Both hosted and local MCP solve that problem; they just solve it for different audiences.

• Local MCP for NT8: a developer-controlled MCP server running on the trader's PC. Useful for sandboxed experiments, internal tools, and workflows that never touch live trading permissions.
• Hosted CrossTrade MCP: a CrossTrade-managed endpoint at https://app.crosstrade.io/v1/api/mcp. OAuth 2.1, scoped permissions, the CrossTrade Add-On bridge, journal and webhook and copier history, Strategy Analyzer parity. Built for production trading.

The job description

An NT8 MCP server gives an AI client typed access to NinjaTrader-related tools. At minimum that means:

• Reading accounts, positions, orders, executions, quotes, and bars.
• Resolving NT8 symbols, methods, and overloads so the agent's generated code compiles.
• Placing, modifying, cancelling, and flattening orders (with the right permission).
• Running NinjaScript compile and Strategy Analyzer backtests.
• Deploying and monitoring strategies.

A production NT8 MCP server adds the operational layer: journal history, add-on activity, copier diagnostics, OAuth, scoped permissions, audit trail, and predictable updates.

NinjaTrader runs on your desktop. That changes the problem.

Cloud brokers like Tradovate have native HTTP APIs. NinjaTrader was built before that paradigm dominated. There is no built-in HTTP or MCP endpoint on NT8 itself. The bridge between an AI client and NT8 must run inside NT8.

CrossTrade's bridge is the CrossTrade Add-On, which has been the bridge that powers webhooks, REST, and copier features for years. MCP is the latest interface that uses it.

What a local MCP server looks like

AI client  ──(stdio or HTTP)──>  Your local MCP server (Node/Python)  ──>  NT8 (NinjaScript)
                                              │
                                              └─ tokens, config, code
                                                 you maintain it all

Strengths:

• Full control. You define every tool.
• No subscription cost beyond NT8.
• Good for research where you change the surface frequently.

Costs:

• You write and maintain the bridge.
• You handle auth, scopes, logging, error handling.
• You ship updates when NT8 changes.
• You have no journal, no webhook history, no copier integration unless you write them.

What CrossTrade ships

AI client  ──(OAuth)──>  https://app.crosstrade.io/v1/api/mcp  ──>  CrossTrade Add-On in NT8
                                       │
                                       ├─ scoped tokens (mcp:read, mcp:trade)
                                       ├─ typed tool surface (versioned)
                                       ├─ journal, webhook signals, copier activity
                                       └─ backtest engine parity with NT8 SA UI

Strengths:

• One URL, no local server to maintain.
• OAuth 2.1 with PKCE and dynamic client registration.
• CrossTrade Add-On bridge, already deployed inside NT8.
• Matched-trade journal, TradingView webhook history, add-on activity log: months of operational data the agent can analyze.
• NT8 Strategy Analyzer parity: single backtests are bit-identical to NT8's UI.
• CrossTrade ships updates when NT8 changes.

Costs:

• Elite subscription required for MCP transport.
• The tool surface is curated; not every NT8 internal is exposed.

Hosted vs local at a glance

Choose by audience

The safety case for hosted

Hosted is not just an ergonomic win; it is a safety win.

• OAuth scope is enforced at the transport. A mcp:read token cannot call write tools.
• Tokens are revocable from the CrossTrade AI Clients page.
• CrossTrade's add-on already enforces opposing position protection, auto-reconnect, and the operational constraints traders care about. The MCP server inherits those.
• Updates are coordinated. A breaking NT8 change does not silently break your agent overnight.

Frequently asked questions