Canary

繁體中文：網站及入門指南 · 简体中文：网站及入门指南

A risk desk for your Interactive Brokers account. It reads your account for you and your AI agent, checks it against your limits, and, in the trading build, places the trades you authorise.

Canary runs beside your IB Gateway or TWS and nothing runs on a server of mine. It tells you what needs attention today. It runs twenty discipline checks against limits you set and names the ones your positions breach. It shows exposure by underlying. Canary Edge shows what the price did 1, 5 and 20 sessions after your past stock and ETF trades, from your broker statements, where a decision repeated often enough to count. The same readings come as text, as JSON, in a paired phone app, and as MCP tools for Claude Desktop, Claude Code, Cursor or Zed.

It comes in two builds. The standard binary reads; it has no compiled order path. The trading binary, a separate download, also executes orders, and only the ones you authorised: a transaction you confirmed, or a close or reduction the daemon runs under a bucket you listed in your written policy, a list that ships empty. Every order is pinned to one account, client ID and mode, consumes a preview token for that exact draft, is journaled with its origin before it is sent, and passes the risk policy's order limits, the mandate gate and the freeze. An agent trades only through the gated CLI. The MCP server has no order or preview tool in any build. Canary never decides a trade on its own.

Documentation · Install · First session · Agentic trading · Canary Edge · MCP tools · Safety · Privacy

Start

You need IB Gateway 10.37+ or TWS with API socket access enabled, an IBKR Pro account, and macOS or Linux on arm64 or amd64. Paper and live both work. There is no Windows build; use WSL.

Terminal, and every MCP host. One signed binary in ~/.local/bin:

curl -fsSL https://raw.githubusercontent.com/osauer/canary/main/install.sh | sh
canary status    # show which Gateway and account Canary reached
canary brief     # review what changed and what needs attention

The install guide shows how to inspect the script first and covers every other installation path.

Claude Desktop. Download the MCP Bundle, canary.mcpb, open it with Claude Desktop, then quit and relaunch Claude. The walkthrough covers the first connection.

Any other MCP host. Install the binary as above, then point the host at its absolute path; which canary prints it.

{
  "mcpServers": {
    "canary": {
      "command": "/ABSOLUTE/PATH/TO/canary",
      "args": ["mcp"]
    }
  }
}

A first question that works in any host:

What needs attention today, and which data is missing or stale?

Canary Edge in the paired app, rendered from synthetic data: what the price did after past decisions, and how much evidence supports each row.

Related MCP server: ib-async-mcp

Ways in

MCP hosts

Ask plain questions rather than naming tools. The host guide covers Claude Code, Cursor, Zed, continuously running agents, logs, and connection checks. The generated MCP reference lists every tool and its schema.

Terminal and paired app

Every data command supports --json:

canary account
canary positions --by underlying
canary edge
canary rules
canary regime --explain
canary stress --details

Run canary status first for connection problems and canary data health for missing or stale data. canary --help and the CLI reference list every command and flag.

For the paired app, run canary app on the machine that owns the Gateway or TWS session, then run canary app pair and scan the QR code. The app guide covers pairing, remote access, and push notifications.

Go wire-protocol library

pkg/ibkr is a clean-room Go library for the TWS wire protocol. It transports broker requests only. Its API reference is on pkg.go.dev, and its statement coverage is updated on each push to main as a line-by-line report.

go install github.com/osauer/canary/v2/cmd/canary@latest installs the v2 CLI, not the current v3 release; use the installer for the binary. Start with the package documentation and the wire protocol page.

Safety and privacy

The standard binary has no compiled order path, and the installer, updater and MCP Bundle never install the trading binary. The trading binary executes what you authorised and nothing else. The daemon checks every order at preview, at admission and at the final send: account, client ID and mode pins, the preview token for that draft, the journal entry written before the send, the risk policy's order limits, the mandate gate and the freeze. Gated orders has the detail.

Canary has no telemetry and does not send account IDs, balances, quantities, or P/L to the maintainer. PRIVACY.md is the data map. SECURITY.md covers the threat model and signed releases.

Documentation and legal

• Daily desk workflow

• Troubleshooting

• Configuration

• Release and update policy

• Contributing

Canary is an independent third-party client for Interactive Brokers' publicly documented TWS API. It is not built, endorsed, sponsored, or supported by Interactive Brokers Group, Inc. or its affiliates. pkg/ibkr redistributes no Interactive Brokers code, libraries, jars, or market data. Nothing here is investment advice.

Canary is a private project of Oliver Sauer.

MIT. See LICENSE.