Octagon for AI agents
Octagon gives agents access to authorized market intelligence including SEC filings, earnings transcripts, financial metrics, and prediction-market data. Analysts and researchers use it for deep financial research. Connect it once through Arc0, and your agent, or Claude, ChatGPT and Cursor, can use it through one MCP endpoint, limited to what each user approved.
What agents do in Octagon.
Research a public company
Pull SEC filings and earnings transcripts for a company to brief an analyst ahead of a call.
Run a deep research query
Ask the deep-research agent to compile financial metrics and stock data on a sector or ticker.
Check prediction market history read-only
Look up historical prediction-market data for a topic without placing or affecting any position.
4 Octagon actions, graded by risk.
Every Octagon action is tagged read, write or destructive, so one policy covers the whole app and new actions inherit the right default.
read
0Look things up. Allowed by default.
- No read actions.
write
4Create and change things. Allow, or ask the user first.
- octagon.octagon_agentOctagon-agent
- octagon.prediction_markets_historyPrediction markets history
- octagon.octagon_deep_research_agentOctagon-deep-research-agent
- octagon.octagon_prediction_markets_agentOctagon-prediction-markets-agent
destructive
0Delete, cancel or archive. Ask first, or deny outright.
- No destructive actions.
Octagon in three steps.
- 01Your users connect OctagonThey sign in to Octagon on Arc0 Connect, under your brand, and approve the access you ask for.
- 02You set the rulesReads run, and writes like “octagon-agent” can wait for the user to approve.
- 03Any agent can actYour agent calls Octagon through the Arc0 SDK or MCP, and so can Claude, ChatGPT and Cursor. Every call lands on the audit log.
await arc0.policies.set('octagon', { read: 'allow', write: 'ask', // octagon_agent destructive: 'deny', }) # Claude Code: the same connection, one URL $ claude mcp add --transport http arc0 \ https://mcp.arc0.ai/u/u_8f2
How Octagon connects.
Octagon runs its own MCP server behind OAuth. Arc0 registers the client, users approve access on Arc0 Connect, and your agent reaches Octagon through the same endpoint, policies and audit log as every other app.
The same Octagon connection serves your agent over MCP and your own backend over REST and the proxy, so a user connects once. How Arc0 handles credentials →
- AUTH
- OAuth 2.0 (MCP)
- CREDENTIALS
- Per-tenant encrypted vault
- MODEL SEES
- Results only, never credentials
- AUDIT LOG
- Every call, on every plan
Use Octagon from any agent.
Octagon and Arc0, answered.
Can I use Octagon with Claude, ChatGPT or Cursor?
Yes. Connect Octagon to Arc0 once, then add your Arc0 MCP URL to Claude, ChatGPT, Cursor, Claude Code or any other remote-MCP client. Each assistant only gets the Octagon actions you allow.
How do users connect Octagon?
Octagon runs its own MCP server behind OAuth. Arc0 registers the client, users approve access on Arc0 Connect, and your agent reaches Octagon through the same endpoint, policies and audit log as every other app.
Which Octagon actions can my agent take?
4 in total: 0 read, 4 write and 0 destructive, such as “octagon-agent”. Your policies decide which of them each agent may call.
Can I make my agent read-only in Octagon?
Yes. Allow read actions and deny writes in the Octagon policy. Your agent can still look things up, and any write it attempts is blocked and logged.
Can my own backend call Octagon too?
Yes. The same Octagon connection is available over REST and through the Arc0 proxy, so your product and your agent share one connection per user.
Plug Octagon into your agent.
Your users connect Octagon once, under your brand. Your agent gets 4 actions behind your policies, with every call on the record.
Free to build · MCP + REST · Audit log on every plan