MetaMask launched a self-custodial wallet built specifically for AI agents on June 8, 2026, letting autonomous software trade across decentralized finance while the human owner keeps control of the funds. The Consensys-owned wallet, called MetaMask Agent Wallet, gives agents access to swaps, perpetual futures, prediction markets, and liquidity provisioning across Ethereum-compatible blockchains. It is one of the first major attempts by a mainstream wallet to hand AI bots real on-chain spending power without surrendering the private keys that secure a user’s assets, and it follows Base’s recent MCP gateway for ChatGPT and Claude wallets.
A self-custodial wallet is one where the user, not a company, holds the private keys that authorize transactions. MetaMask’s design extends that principle to software agents, so an AI can execute trades on its own while the owner sets the rules and retains ultimate control.
- MetaMask released the Agent Wallet on June 8, 2026, giving AI agents self-custodial access to swaps, perps, prediction markets, and liquidity pools.
- Every agent transaction runs through simulation, threat scanning, and MEV protection before execution; flagged trades require human 2FA approval.
- Safe transactions are covered by MetaMask’s Transaction Protection program for up to $10,000 in losses.
- The wallet is live for roughly 200 users in an Early Access Program, with broader rollout expected later this summer.
Published: June 8, 2026, 16:00 UTC
Why MetaMask built a wallet for machines
AI agents have started executing on-chain transactions, but until now they did it through risky workarounds, usually by being handed a user’s raw private keys. That arrangement exposes the entire wallet if the agent misbehaves or gets compromised. MetaMask’s answer is to give the agent its own constrained wallet with guardrails baked in at the protocol level.
The security model is the differentiator. Every transaction an agent initiates is automatically run through transaction simulation, threat scanning, and MEV protection before it executes. Maximal extractable value, or MEV, is profit that block producers can capture by reordering or inserting transactions, often at a trader’s expense. Any trade flagged as malicious is blocked until a human approves it through two-factor authentication.
Private keys never leave a hardware-isolated enclave. MetaMask uses Cubist’s trusted execution environment technology to keep key material sealed during signing, which the company says prevents both MetaMask and Consensys from accessing it.
How the controls work
Users pick between two operating modes. Guard Mode lets the owner pre-approve which protocols and addresses the agent can touch; anything outside that allowlist triggers 2FA. Beast Mode drops the upfront allowlist and instead scans addresses in real time, firing 2FA only when threat detection flags something suspicious.
Beast Mode is the hands-off option for users who do not want a pop-up on every transaction, but it does not disable the safety net. If the threat scanner marks a transaction as malicious, 2FA still fires regardless of mode. Transactions deemed safe fall under MetaMask’s Transaction Protection program, which covers up to $10,000 in losses.
The wallet supports Ethereum Virtual Machine-compatible chains and Hyperliquid, and it connects to agent frameworks including OpenAI Codex, Anthropic’s Claude Code, Cursor, OpenClaw, and Hermes Agent.
What it means for DeFi
Handing autonomous software the ability to move money is the part of this launch that matters beyond MetaMask. If agents can swap tokens, open perpetual positions, and provide liquidity without a person clicking through each step, a large share of DeFi activity could shift from human-driven to machine-driven over the next few years. The move follows similar agentic-wallet pushes from Coinbase and MoonPay earlier this year, and it sits alongside W3BN’s coverage of DeFi going mainstream.
That raises the stakes on exactly the controls MetaMask is selling. An agent that loops on a bad strategy or gets manipulated could drain a position fast, which is why spending limits, allowlists, and a hard 2FA backstop are central to the pitch rather than afterthoughts. The $10,000 protection cap also signals where MetaMask expects early usage to sit: experimentation with modest balances, not institutional-scale capital.
For now the rollout is deliberately small. About 200 users have access through the Early Access Program, and a wider launch is slated for later this summer. The limited release gives MetaMask room to watch how agents behave with real funds before opening the doors.
Frequently asked questions
What is the MetaMask Agent Wallet?
It is a self-custodial crypto wallet from MetaMask designed for AI agents. It lets autonomous software trade across DeFi, including swaps, perpetual futures, prediction markets, and liquidity provisioning, while the human owner sets spending rules and keeps control of the keys.
How does MetaMask keep an AI agent from losing my funds?
Every agent transaction passes through simulation, threat scanning, and MEV protection. Trades flagged as malicious require human approval via two-factor authentication, and safe transactions are covered for up to $10,000 under MetaMask’s Transaction Protection program.
Can I use the Agent Wallet right now?
Access is currently limited to roughly 200 users through an Early Access Program. MetaMask expects a wider rollout later in the summer of 2026.
