Free to try. You pay when you go live.
The guardrail engine, paper trading, and the audit log are free forever in the open core. The paid plan unlocks live execution on a real account. Safety is never behind the paywall.
Free
$0open core, forever
Paper trading and read-only, with the full guardrail engine. Not a trial.
- All 12 guardrails, default-on
- Paper and simulation trading
- Hash-chained audit log with CLI verify
- MCP over stdio, REST API, WebSocket events
- Kill switch, CLI-only release
- One account
- Apache-2.0 source you can read and build
Pro
most popular$49per month, or $470 per year
Everything in Free, plus live execution on a real account.
- Live-execution unlock (the arm-live provider)
- Prop firm rule packs
- Fan-out to about 5 accounts
- Audit export
- Everything in Free, unchanged
Founder price $39 per month, locked for life, first 100 accounts.
Join the waitlistDesk
Plannedfor larger setups
For 10+ accounts and small desks. Not available yet.
- Everything in Pro
- 10+ accounts
- Multiple seats
- Priority support
Tell us on the waitlist form if this is your setup.
Join the waitlist
PitBridge is in development. Prices are the launch list; joining the waitlist reserves founder pricing order, and nothing is charged today.
How the live unlock actually works.
PitBridge is open core. The daemon, the guardrails, and the audit log are Apache-2.0 and run paper and read-only on their own. Live execution is a separate provider plugin, and that plugin is what Pro buys. Without it, arm-live refuses with a clean error: there is nothing to arm.
This is not a license flag hidden in free code. The live provider, the prop firm rule packs, and multi-account fan-out are closed components that install next to the open core. A fresh install is paper only, and no agent tool can arm live in any tier. The security model explains the arm-live ritual.
$ pitbridge arm-live refused: no live provider in the open-source core. paper and sim only. # installing pitbridge-pro registers the live provider. # arming live stays a manual, operator-only command either way.
For context: CrossTrade gates its MCP server behind the $99 per month Elite plan ($949 per year), hosted in its cloud. (crosstrade.io/pricing, verified ). PitBridge speaks MCP for free, on your machine, and Pro at $49 sits under that anchor with the order path still local. See the full comparison.
Pricing questions, answered plainly.
Why is live trading paid?
Because live is where real money is at stake and where the work of keeping the bridge safe has to be funded. Everything that protects you is free: the full guardrail engine, paper trading, the audit log. The paid part is the live execution provider, the plugin that lets arm-live succeed, plus prop firm rule packs, fan-out, and audit export. You pay when you go live, not to be safe.
Is paper trading really free?
Yes, and it is not a trial. The open core is Apache-2.0: the daemon, all 12 guardrails, the hash-chained audit log, and the full MCP, REST, and WebSocket surface run in paper and read-only mode forever, at no cost, with no time limit and no feature-crippled guardrails. Safety is never behind the paywall.
What happens to founder pricing?
The first 100 Pro accounts pay $39 per month instead of the $49 list price, locked for life: as long as the subscription stays active, that price never rises, whatever the list price does later. After the first 100, new accounts pay list.
The core is open source. Can I just build the live unlock myself?
The gate is a real component, not a license flag. In the open core, arm-live refuses cleanly because no live execution provider is installed; the provider, the rule packs, and fan-out are closed plugins. You could write your own provider against the plugin seam, and the license does not stop you. Pro exists for people who would rather pay $49 than maintain that code against a live account.
PitBridge is in development. NinjaTrader 8 is first.
Tell us your platform and we email you when your setup is supported. Nothing else.