How Itoflow works

Itoflow has five layers. Each does one job and hands the next a record it can check: the plan, the code, the figures, the decision and the approval.

Why a chat loop is not enough

Coding agents run a task until it’s done. Investing differs in four ways, and each one shaped a layer above.

• Time matters. Every fact has a date. A backtest that reads data from after its own date gives results you can’t trust, so the engine reads data as it stood at the time, the risk model is stored as dated snapshots, and a response says when an input, such as sector labels, reflects today instead.
• A portfolio is never done. Prices move, news arrives and holdings drift. Monitors run again on a schedule, and strategies wake on a date or a market event they chose, rather than stop when one answer is written.
• A portfolio keeps no reasons. Holdings don’t say why they are there. Itoflow stores each decision with its weights, reasoning and confidence, and each chat with its code and files.
• Mistakes cost money. Exact rules sit in code the agent can’t change: the research contract, the overfitting checks, position limits, cash checks and human approval of live trades. Judgement goes to a second agent that reads the work.

Why agentic investing is hard sets out the problem in more depth.

One engine, three ways in

The app, your AI assistant and your own code all reach the same agents, engine and data, and see the same portfolios, monitors and strategies.

• Your AI assistant. Claude, ChatGPT, Codex, Gemini, GitHub Copilot and Cursor connect to the Itoflow MCP server. It has three tools: search, execute and list workspaces. Your assistant finds what it needs with search and acts by writing a short script, rather than loading every tool definition up front. It signs in with OAuth and never sees a token. Connect your assistant.
• The Itoflow app. Research, monitors and strategies in your browser at app.itoflow.ai.
• Your code. An HTTP API for portfolios, strategies, monitors, market data and factor risk. Make your first request.

Your code, your data, your models

Itoflow works with what you already have.

• Your GitHub repositories. Agents can check out your research code, run it, change it and open a draft pull request. The GitHub app asks only for code, pull requests and CI results, branch protection still applies, and text from a repository counts as untrusted input. Connect GitHub.
• Your own MCP servers. Add any remote MCP server by its URL, and agents can call its tools in research, such as a broker’s server that reads your positions. Tokens are stored encrypted, sent only to that server, and never reach the model or the sandbox. Connect an MCP server.
• Files on your machine. With the worker skill, Itoflow plans an analysis and your local Codex or Claude Code session runs each step on your machine. Itoflow sees the results, not your files or credentials. Work with your local agent.
• Your own ChatGPT subscription. Chat and monitors can run on it. A run gets only a short-lived access token. Connect your ChatGPT subscription.

How we connected customers’ MCP servers and GitHub repos to our research agent explains the design: why a URL is enough, how dozens of tools stay out of the model’s context, and why a write with an unknown outcome is never sent twice. Your code, data and research stay yours. Itoflow sells no signals and imposes no investment view.

Next