Coinbase’s Layer 2 network Base launched Base MCP on May 26, 2026, a gateway that lets AI clients including ChatGPT, Claude, and Cursor read balances, propose token swaps, and route transactions through six decentralized finance protocols using natural language prompts. The tool connects a user’s Base Account to AI agents through the Model Context Protocol, an open standard introduced by Anthropic in 2024 that defines how language models call external tools. Base MCP holds no private keys. Every sensitive action triggers a confirmation link in the Base App, where the user reviews simulated asset changes before signing.
The Model Context Protocol, or MCP, is an open specification that lets AI models securely connect to external software, data sources, and services through a shared interface.
Key takeaways
- Base MCP went live on May 26, 2026, connecting ChatGPT, Claude, and Cursor to Base Account wallets through OAuth 2.1.
- Six DeFi protocols ship at launch: Uniswap, Aerodrome, Morpho, Moonwell, Avantis, plus Bankr and Virtuals for token launches and agent tokens.
- The MCP server never custodies keys. Every transfer or swap returns to the Base App for user approval before settlement.
- Developers can extend the gateway by writing markdown-spec plugins that hand unsigned transactions back to the user for review.
Published: May 26, 2026 09:00 UTC
What Base MCP actually does
Base MCP is a server that translates natural-language requests from an AI client into structured calls against the Base network and the Coinbase API. A user connected through ChatGPT or Claude can ask the model to check a wallet balance, swap USDC for ETH on Uniswap, supply collateral on Morpho, or open a perpetual position on Avantis. The agent constructs the call, but the gateway sends it back to the user’s Base App as a signing prompt. Nothing executes without an explicit tap.
Coinbase listed seven integrations at launch. Morpho and Moonwell handle lending markets. Uniswap and Aerodrome route swaps and liquidity. Avantis powers perpetual trading. Bankr and Virtuals support token launches and agent tokens. Authentication runs on OAuth 2.1, and the server itself cannot move funds.
Why this matters for AI and crypto
The launch puts Base in direct competition for what Coinbase frames as agent-native finance, the idea that AI software will hold budgets and execute payments without a human in every loop. Jesse Pollak, who leads Base, described the release as turning wallets into infrastructure that software can use to hold identity, budget, and execution authority.
That framing matters because Anthropic’s MCP standard has expanded fast in 2025 and 2026, with Anthropic, OpenAI, and Cursor each shipping compatible clients. By plugging Base into that network, Coinbase positions its Layer 2 as the default settlement layer for any AI agent that needs to move stablecoins, place onchain bets, or pay another agent for compute. The bet is that conversation will become the dominant interface for crypto, displacing standalone wallet apps for everyday users.
Security model and known limits
The OAuth 2.1 design keeps the MCP server stateless with respect to user funds. When an agent proposes a sensitive action such as a transfer or swap, the gateway returns a link that opens the Base App. The user sees a simulated balance change, the contract being called, and a price quote, then chooses to sign or cancel. That mirrors the human-in-the-loop pattern Anthropic and OpenAI have pushed for agentic tools that touch payments.
Risks remain. AI agents are still vulnerable to prompt injection, where malicious content in a webpage or document tries to redirect the model into draining a wallet. Base MCP mitigates this by requiring a second-screen approval, but a distracted user can still rubber-stamp a bad transaction. Developers writing custom skill plugins also inherit responsibility for sanitizing inputs and validating contract calls.
What comes next
Coinbase has signaled more protocol integrations are coming, and the MCP server is open for third-party developers to extend with markdown plugin specs. Expect competing Layer 2 networks and wallet providers to ship their own MCP gateways quickly, since the standard makes the integration largely commodity. The more important question is whether AI clients will surface Base MCP by default. ChatGPT and Claude both let users add MCP servers manually, but mainstream adoption depends on those clients pre-integrating or recommending specific gateways.
Regulators have not commented on the launch, but agent-driven payments fall into an unsettled area where know-your-customer rules collide with autonomous software. Coinbase will likely argue that since the user signs every transaction in the Base App, traditional wallet rules apply.
Frequently asked questions
Can ChatGPT move money from my wallet without my permission with Base MCP?
No. Base MCP holds no private keys and cannot execute transactions on its own. Every transfer, swap, or DeFi interaction generates a signing prompt in the Base App. The user reviews simulated balance changes and the contract call before approving or canceling. The AI agent only proposes actions.
Which protocols are supported by Base MCP at launch?
Seven protocols ship at launch on May 26, 2026. Morpho and Moonwell cover lending. Uniswap and Aerodrome handle swaps and liquidity pools. Avantis enables perpetual trading. Bankr and Virtuals support new token launches and agent tokens. Coinbase has indicated more integrations are planned.
What is the Model Context Protocol used by Base MCP?
The Model Context Protocol, or MCP, is an open standard introduced by Anthropic in 2024 that defines how AI models call external tools and data sources. Anthropic, OpenAI, and Cursor have shipped compatible clients, which is why Base MCP works across ChatGPT, Claude, and Cursor with one server.
