The Agent Gets the API Key. You Get the Guinea Pig Seat.

代理拿到了 API 密钥，而你坐上了“小白鼠”的席位。

A friend texted me this week, and within a year someone you know is going to send you the same message. He had seen that you can now connect an AI directly to a brokerage account through an API. He was sure that with the right prompts it could catch every low and sell at every high. Start it with a few hundred dollars, let it run, collect passive income. He believed in it enough to offer me a thousand dollars to set it up. I told him I would do it for free. Not because the work is worth nothing. Because the only honest version of that work is one I will not charge a friend for, and the dishonest version I will not build for any amount.

这周有位朋友给我发了条短信，不出一年，你认识的人也会给你发同样的消息。他看到现在可以通过 API 将 AI 直接连接到证券账户。他确信只要有合适的提示词（prompts），AI 就能精准捕捉每一个低点并卖在每一个高点。投入几百美元，让它自动运行，坐收被动收入。他对此深信不疑，甚至愿意出价一千美元让我帮他设置。我告诉他，我可以免费帮他做。不是因为这项工作没有价值，而是因为这项工作中唯一诚实的部分我不忍向朋友收费，而那些不诚实的部分，无论给多少钱我都不会去做。

Here is why he is not crazy for asking. Robinhood launched agentic trading accounts in May: dedicated accounts, dedicated funds, alerts, pause controls, and MCP-based agent connections. Coinbase’s developer platform now documents Coinbase for Agents through CLI/MCP tooling, and its x402 protocol is explicitly built for AI agents to make programmatic stablecoin payments for API access. This is not a rumor or a jailbreak. It is a product direction, built by serious companies. The infrastructure for handing an AI agent your money shipped in the last few weeks. The evidence that an AI agent deserves your money did not ship with it. It does not exist yet. And I can prove that gap to you with my own receipts, because I have spent months on both sides of it.

他提出这个要求并非疯狂，原因如下：Robinhood 在五月份推出了代理交易账户：提供专用账户、专用资金、警报、暂停控制以及基于 MCP（模型上下文协议）的代理连接。Coinbase 的开发者平台现在通过 CLI/MCP 工具记录了“Coinbase for Agents”，其 x402 协议明确旨在让 AI 代理能够通过程序化方式进行稳定币支付以获取 API 访问权限。这不是谣言，也不是越狱破解，而是由严肃公司制定的产品方向。将你的资金交给 AI 代理的基础设施在过去几周内已经上线。但证明 AI 代理值得你托付资金的证据并没有随之而来，它目前还不存在。我可以凭我自己的实测记录向你证明这一差距，因为我已经在这一领域的两端投入了数月时间。

The wave always looks like this. I watched this exact pattern play out in crypto, up close, with people I know. Crypto has real opportunity in it. But most people only reach for it when the chart is already vertical. They buy the top because the top is when their friends start talking. Then the correction comes, and instead of asking what they actually understood about the thing they bought, they blame the market. The market never changed its nature. They just never studied it before acting on it. Now watch the same shape arriving in AI. People meet an agent and assume it is an oracle. They hand it a task it was never built for, watch it fail, and conclude AI is a scam. Then they tell the next person, and the misconception spreads in both directions at once: the believers think agents are magic, the burned think agents are useless, and almost nobody in either crowd ran a single controlled test before forming the opinion. Acting before understanding, then outsourcing the blame. That is the whole wave, every time, in every market. The only people who consistently get hurt are the ones who arrive at the moment of maximum excitement carrying zero evidence. There is a name for the seat they are sitting in. It is the guinea pig seat, and the platforms just installed a fresh row of them.

浪潮总是这样。我曾近距离观察过加密货币领域发生的完全相同的模式。加密货币确实存在真正的机会，但大多数人只有在图表已经垂直拉升时才会入场。他们在高点买入，因为高点是朋友们开始谈论的时候。随后回调到来，他们不去反思自己对所买资产到底了解多少，反而去责怪市场。市场的本质从未改变，只是他们在行动前从未研究过它。现在，看着同样的模式在 AI 领域重演。人们遇到一个代理，就以为它是先知。他们把 AI 从未被设计去处理的任务交给它，看着它失败，然后得出结论说 AI 是个骗局。接着他们告诉下一个人，这种误解同时向两个方向蔓延：信徒认为代理是魔法，被割过的人认为代理毫无用处，而两拨人中几乎没有人能在形成观点前进行过哪怕一次对照测试。先行动后理解，然后将责任外包。这就是每一场浪潮，在每一个市场中都是如此。唯一持续受伤的人，就是那些在狂热巅峰时刻入场却毫无证据支撑的人。他们坐的位置有个名字，叫“小白鼠席位”，而各大平台刚刚又安装了一排新的座位。

The question that cuts through all of it: Sit with this one before you connect anything to your money. If an AI agent plugged into a brokerage API could reliably catch lows and sell highs, why would the brokerage hand you the API? They have more capital than you, more data than you, better engineers than you, and direct access to the exact same models. An agent that printed money would be the most valuable proprietary system in their building. It would never be a consumer feature. It would be the business. Instead, it is a consumer feature. Ask why. Platforms earn on activity, not on your outcomes. Every trade your agent executes generates revenue for the platform whether you win or lose, and an agent never sleeps, never hesitates, and never gets tired of clicking. From the platform’s side of the table, an autonomous agent is the perfect customer: a human’s bankroll with a machine’s trading frequency. The incentive behind the product is more trades, not better ones. That is not a scandal and it is not a conspiracy. It is an incentive structure sitting in plain sight, and once you see it, the launch announcements read completely differently. And before your agent’s supposed edge ever gets tested, the friction arrives. A few hundred dollars of stake bleeds through spreads, fees, and the inference costs of the model making the decisions. My friend’s plan was to start small and compound. Small accounts do not die from bad calls first. They die from costs, quietly, while the prompts keep sounding confident.

一个能穿透所有迷雾的问题：在将任何东西连接到你的资金之前，请先思考这个问题。如果一个接入证券 API 的 AI 代理能可靠地捕捉低点并卖在高点，券商为什么要给你这个 API？他们拥有比你更多的资本、更多的数据、更优秀的工程师，并且能直接访问完全相同的模型。一个能印钞的代理将是他们公司内部最有价值的专有系统，它绝不会成为一个消费级功能，它本身就是核心业务。但现在，它却成了一个消费级功能。问问自己为什么。平台靠交易活跃度赚钱，而不是靠你的盈亏。无论你是赢是输，你的代理执行的每一笔交易都会为平台产生收入，而且代理从不睡觉、从不犹豫、从不厌倦点击。从平台的角度来看，自主代理是完美的客户：拥有人类的资金池，却具备机器的交易频率。产品背后的激励机制是更多的交易，而不是更好的交易。这不是丑闻，也不是阴谋。这是一种显而易见的激励结构，一旦你看透了这一点，再看那些发布公告时，感觉就完全不同了。而且，在你的代理所谓的“优势”得到验证之前，摩擦成本就已经先到了。几百美元的本金会在点差、手续费以及模型进行决策的推理成本中被慢慢耗尽。我朋友的计划是小额起步并复利增长。小额账户首先死掉的不是因为错误的决策，而是因为成本，在提示词听起来依然自信满满的同时，账户却在悄无声息地缩水。

What my own receipts say: I run a public AI evaluation research program: a claim ledger of thirty agent-memory claims, with the recent claims frozen and publicly timestamped before results exist, failures published first. I also built my own trading signal system, and I ran it the slow way: paper only, every signal written down before the market moved, opening price captured, closing line compared, settled outcomes only. Here is the most honest number that system ever handed me. When I audited its confidence scores, the signals that won averaged 0.738 confidence. The signals that lost averaged 0.739. Read that again. Identical. At that stage, the system felt exactly as sure about its losers as its winners. That number came from an earlier version, and surfacing it is exactly what honest instrumentation is for: it told me what to improve before real money could teach me the same lesson at a markup。The system has evolved a lot since then, and it keeps evolving. But here is the part that matters for you: I only knew any of that because every signal was logged before the outcome existed. The discipline found the flaw. A prompt with no paper trail finds its flaws in your account balance. Full honesty, since this whole article is about evidence: I have not actively worked on that trading system in weeks. The research lane took over my time. But the monitoring agents never stopped. The day I prepared this article, I checked: my BTC monitor had logged same-day structured events, and has been recording market regime, bias, and confidence the entire time I was busy elsewhere. The dataset kept growing without me. The baseball side told me something even better. Its odds source went stale weeks ago, and instead of fabricating signals from dead data…

我的实测记录说明了什么：我运营着一个公开的 AI 评估研究项目：一份包含三十个代理记忆声明的记录账本，最近的声明在结果出来前就被冻结并公开加盖了时间戳，失败的案例会被优先发布。我还构建了自己的交易信号系统，并以最稳妥的方式运行：仅限纸面模拟，每一个信号都在市场波动前记录下来，捕捉开盘价，对比收盘线，只记录结算结果。这是该系统给出的最诚实的数据：当我审计其置信度评分时，获胜信号的平均置信度为 0.738，而失败信号的平均置信度为 0.739。再读一遍：完全一样。在那个阶段，系统对失败决策的确定感与对成功决策的确定感完全相同。这个数字来自早期版本，而将其呈现出来正是诚实评估的意义所在：它在真金白银给我上一课之前，就告诉了我需要改进的地方。从那时起，系统已经进化了很多，并且还在不断进化。但对你来说最重要的一点是：我之所以知道这一切，是因为每一个信号在结果产生前都被记录了下来。这种纪律性发现了缺陷。没有纸面记录的提示词，其缺陷最终会体现在你的账户余额里。完全坦诚地说，既然整篇文章都在谈论证据：我已经几周没有主动维护那个交易系统了，研究工作占据了我所有的时间。但监控代理从未停止。在我准备这篇文章的那天，我检查了一下：我的比特币监控器记录了当天的结构化事件，并在我忙于其他事情的整个过程中，持续记录着市场状态、偏差和置信度。数据集在我不在场的情况下持续增长。棒球分析方面的情况甚至更好：它的赔率来源几周前就失效了，但它没有用死数据编造信号……