MetaMask has launched its Agent Wallet, allowing AI agents to autonomously execute transactions with defined user parameters.
On August 6, MetaMask revealed the public launch of its Agent Wallet, a non-custodial wallet designed for AI agents to autonomously conduct on-chain transactions within user-defined parameters.
— MetaMask 🦊 (@MetaMask) August 6, 2026
This Agent Wallet utilizes a command-line interface (CLI) and is compatible with various platforms, including Claude Code and Codex. Users can set specific rules such as spending limits and approved protocols, allowing AI agents to execute transactions autonomously while adhering to these constraints.
The wallet features a default setting called Guard Mode, which includes a list of approved networks, addresses, and token recipients, along with a daily spending cap. This mechanism acts as a form of two-factor authentication (2FA) to enhance security.
If a transaction exceeds set limits or raises security alarms, its execution is halted. Users can approve or decline transactions via MetaMask Mobile or through a link sent via email, with a five-minute window for response before automatic cancellation.
In contrast, Beast Mode lifts restrictions on approval lists and spending limits. However, even in this mode, the system assesses threats, and transactions flagged as risky still require user approval.
“The agent can act, but it operates within the user’s boundaries,” emphasized MetaMask.
Secure Key Management
In server mode, private keys are kept in a secure execution environment inaccessible to the AI agent. The agent sends transaction requests that are verified and signed by a separate infrastructure, maintaining the non-custodial nature of the wallet.
Developers have access to a special mode with its own BIP-39 mnemonic phrase, but MetaMask warns against sharing it through command-line inputs to prevent exposure.
The Agent Wallet supports EVM-compatible networks, Hyperliquid, and Solana, enabling AI agents to perform a variety of functions such as trading and providing liquidity.
Transaction Protection Program
MetaMask has also launched a Transaction Protection program for qualifying transactions, offering compensation up to $10,000 per month in mUSD, a stablecoin pegged to the US dollar. This program is managed by Bridge, a Stripe-owned company.
However, this protection excludes certain losses, such as those resulting from compromised private keys or typical market fluctuations.
Potential Risks
Allowing AI to manage assets autonomously introduces risks absent in traditional wallets that require manual confirmations. One identified risk is “prompt injection,” where malicious commands could be embedded in external data, potentially leading to irreversible transactions.
MetaMask aims to mitigate this risk by separating the functions of AI suggestions and transaction approvals. Nonetheless, in Beast Mode, the absence of restrictions could allow harmful transactions to pass through if they appear legitimate.
Earlier this year, Coinbase introduced Agentic Wallets for AI agents and launched a service enabling agents to trade and make payments within user permissions. Additionally, Base introduced a system allowing AI assistants to initiate real on-chain operations.
MetaMask previously offered early access to the Agent Wallet to around 200 users in June.
