Agent Wallet, a product purpose-built for autonomous AI agents.
For months, developers have been building AI agents that can interact with DeFi protocols, but they faced a fundamental problem: no wallet infrastructure designed for autonomous operation. Traditional crypto wallets require human sign-off on every transaction, making true agentic autonomy impossible. Agent Wallet solves this by separating the concepts of ownership (human) from operation (agent).
(Source: CoinDesk — MetaMask launches AI agent wallet with built-in security for crypto trades)
How Agent Wallet Works
Agent Wallet introduces a two-tier architecture that rethinks how wallets interact with autonomous software:
Player vs. Agent Keys
| Key Type |
Role |
Control |
| Player key |
Owned by the human — controls funds, sets limits, can revoke access |
Always human-controlled |
| Agent key |
Operated by the AI — executes trades within bounds |
Programmable, revocable |
This split ensures that even if an AI agent is compromised, the attacker cannot drain the wallet beyond the pre-defined limits enforced by the player key.
Guard Mode vs. Beast Mode
MetaMask Agent Wallet operates in two distinct security modes:
Guard Mode (mandatory):
- Every transaction runs through a three-step security pipeline:
-
Dry-run simulation (coming soon) — previews transaction outcome before execution
-
Threat scanning — checks the target protocol and contract for known vulnerabilities
-
MEV protection — prevents frontrunning and sandwich attacks
- Transactions that fail any security check are automatically blocked
- Users receive real-time notifications of every guard check result
Beast Mode (optional):
- The AI agent operates fully autonomously within user-defined constraints
- Constraints include: spending limits (per-tx, daily, monthly), protocol allowlists, asset type restrictions, and time-based trading windows
- Any transaction outside the defined constraints triggers Guard Mode or is blocked
(Source: CoinMarketCap Academy — MetaMask Agent Wallet Lets AI Bots Trade DeFi Autonomously)
Supported Chains and Protocols
Agent Wallet launches with support for 25+ EVM chains including Ethereum, Arbitrum, Optimism, Base, Polygon, and Avalanche — plus Hyperliquid for perpetuals trading.
Early access supports these DeFi primitives:
| Operation |
Supported Protocols |
| Spot swaps |
Uniswap v3/v4, Curve, Balancer |
| Perpetuals |
Hyperliquid, GMX, dYdX |
| Prediction markets |
Polymarket (via Agent Wallet API) |
| Staking |
Lido, Rocket Pool |
| Liquidity provision |
All major AMMs |
Polymarket integration is particularly noteworthy — AI agents can now autonomously participate in prediction markets, a use case that has been growing rapidly since mid-2025.
(Source: Cointelegraph — MetaMask Unveils Self-Custodial Wallet for AI-powered DeFi Trading)
The Market Opportunity
Consensys is targeting what some projections estimate as a 236ドル billion market for AI agent-controlled assets by 2028.
The timing is strategic:
-
7ドル.7 billion was already deployed by AI agents on-chain in Q1 2026 (source: Messari)
- The number of agent-to-agent economic interactions on-chain doubled every month since January 2026
- Traditional DeFi protocols are actively redesigning their interfaces for machine-to-machine interaction
Agent Wallet is competing in a space that includes Coinbase's Agent SDK (announced March 2026) and several specialized agent-wallet startups, but MetaMask's existing user base gives it a significant distribution advantage.
Security Implications
Agent Wallet's launch raises important security questions — and answers some of them:
What Agent Wallet Gets Right
-
Mandatory security pipeline — no mode where agents can operate without checks
-
Player/Agent key separation — even compromised agents can't drain funds
-
Protocol allowlisting — users control which contracts the agent can interact with
-
Real-time notifications — every action is visible to the human owner
What Remains to Be Seen
-
SIM swap risk — if an attacker compromises the human's authentication (email, SMS 2FA), they could modify Agent Wallet constraints
-
AI prompt injection via DeFi — a compromised DeFi frontend could inject instructions into the trading agent
-
Regulatory uncertainty — are AI-driven trades subject to different securities laws than human-driven ones?
How to Access
Agent Wallet is currently in limited early access via command-line interface. Consensys is accepting applications from verified developers and traders.
# Once approved, installation is via npm
npm install -g @metamask/agent-wallet
# Initialize with your Player key
metamask-agent-wallet init --player-key <your-key>
# Deploy an agent with constraints
metamask-agent-wallet deploy-agent \
--daily-limit 10000 \
--protocols uniswap,curve,polymarket \
--mode guard
A public release with a graphical interface is planned for later in the summer of 2026.
What This Means for the AI Agent Ecosystem
Agent Wallet is more than a product — it signals a fundamental shift in how AI agents participate in the economy:
Economic agency for AI: Agents can now hold, manage, and deploy capital autonomously. This is the infrastructure layer for the "agentic economy" that VCs have been predicting.
Programmable trust: The Player/Agent key model establishes a precedent for how humans delegate financial authority to AI — with guardrails, not blind trust.
On-chain verification: Every agent action is recorded on-chain, creating an immutable audit trail. This is critical for regulatory compliance and dispute resolution.
Cross-chain by default: Agent Wallet's multi-chain support means agents can seamlessly move across ecosystems, searching for the best yields and opportunities.
FAQ
Q: Is Agent Wallet available for non-US users?
A: Early access is open to verified developers globally, though regulatory requirements may vary by jurisdiction. The public release will likely include region-specific restrictions.
Q: Can I revoke an agent's access after deployment?
A: Yes — the Player key can revoke the Agent key at any time. All funds remain under the Player key's ultimate control.
Q: What happens if the AI agent is compromised?
A: The attacker can only operate within the bounds set by the Player key (spending limits, protocol allowlists). Any transaction outside these bounds is blocked by the security pipeline.
Q: Does Agent Wallet support non-EVM chains?
A: Currently limited to EVM chains + Hyperliquid. Solana and other non-EVM chains are reportedly on the roadmap.
Further Reading
Cet article a ete initialement publie sur The Agent Report.