MetaMask launched Agent Wallet on Monday, a self-custodial wallet built specifically for AI agents that trade and move money across decentralized finance. The product, from Consensys-owned MetaMask, lets autonomous software execute swaps, perpetual futures trades, prediction market bets, and liquidity provisioning on Ethereum-compatible chains while the human user keeps the keys and sets the limits. Roughly 200 users have been admitted to an early-access program, with a wider rollout planned for later this summer. The pitch is not speed or yield. It is security, at a moment when AI agents are already handling real capital with little protection.
An AI agent is autonomous software that can make decisions and take actions on a user’s behalf without step-by-step instructions. In crypto, that means an agent holding a wallet and trading on its own.
Key takeaways
- MetaMask’s Agent Wallet gives AI agents self-custodial access to DeFi swaps, perps, prediction markets, and liquidity provisioning across EVM chains and Hyperliquid.
- Every agent transaction runs through simulation, Blockaid threat scanning, and Servo MEV protection; transactions flagged as malicious trigger mandatory two-factor authentication.
- Transactions deemed safe carry up to $10,000 in coverage through MetaMask’s Transaction Protection program.
- About 200 users are in the early-access program, with broader availability expected this summer.
Published: June 9, 2026, 09:00 UTC
Why MetaMask built a wallet for software, not people
The launch lands as developers race to build AI agents that manage portfolios and trade directly against on-chain protocols. The problem MetaMask is targeting is how those agents hold funds today. Many current projects hand the agent direct access to a private key, the secret string that controls a crypto wallet.
“It’s genuinely day one for agents, but the infrastructure decision can’t wait because agents are already touching real money, and most of them are doing it the wrong way,” MetaMask Senior Director of Product Zhen Yu Tong told Decrypt. He warned that normalizing key sharing now would undo years of progress: “If the first generation of trading agents normalizes giving away your keys, we’ll be rebuilding the custodial mistakes crypto spent a decade escaping.”
Agent Wallet keeps private keys inside a hardware-isolated enclave using Cubist’s trusted execution environment technology, which Tong said prevents even MetaMask and Consensys from accessing a user’s key material. The agent can sign transactions without ever holding the raw key.
Guard Mode, Beast Mode, and a non-negotiable safety net
The wallet routes every agent transaction through MetaMask’s existing security stack: transaction simulation, scam and malicious-contract detection, Blockaid-powered threat scanning, Clear Signing, and Servo MEV protection. MEV, or maximal extractable value, is profit that block producers can capture by reordering or inserting transactions, often at a trader’s expense.
Users choose between two operating modes. The default Guard Mode enforces spending limits, an allowlist of approved protocols, and approval requirements; anything outside those rules triggers two-factor authentication. An opt-in Beast Mode cuts the prompts so the agent runs hands-off, scanning addresses in real time rather than against a pre-set list.
What neither mode removes is the malicious-transaction check. “If our threat detection flags a transaction as malicious, 2FA still fires no matter what mode you’re in. That’s non-negotiable,” Tong said. MetaMask’s reasoning is that AI models cannot be fully protected from manipulation. Prompt injection, where attackers feed an AI system hidden instructions to make it act against the user, remains an unsolved research problem. Rather than promise the model is safe, MetaMask built controls to cap the damage when it is fooled.
What it means for the agent economy
Agent Wallet is the latest entry in a fast-forming category. Coinbase launched its Agentic Wallets in February, also keeping keys inside trusted execution environments. In March, MoonPay integrated Ledger hardware wallets for human-approved agent transactions, then backed the Open Wallet Standard, an open-source framework with contributors including PayPal, the Ethereum Foundation, Solana Foundation, and Ripple. The infrastructure layer for autonomous trading is being built now, before most agents are trusted with significant capital.
The wallet supports EVM-compatible chains and Hyperliquid, and plugs into agent frameworks including OpenAI Codex, Anthropic’s Claude Code, Cursor, OpenClaw, and Hermes Agent. That framework support matters: it means a developer building on those tools can attach a wallet without writing custody from scratch.
Consensys CEO and Ethereum co-founder Joe Lubin framed the launch as a bet on where the on-chain economy is heading. “The next great expansion of the onchain economy won’t be driven by humans alone,” he said in a statement. “Agents will manage real capital and make real financial decisions, and the infrastructure underneath has to be worthy of that.” The open question is whether users will trust software to trade their money, and whether the guardrails hold once agents are managing more than test-sized balances.
Frequently asked questions
What is MetaMask Agent Wallet?
It is a self-custodial crypto wallet built for AI agents to trade and interact with DeFi protocols autonomously. The user keeps the private keys and sets spending limits, while the agent executes transactions within those rules across Ethereum-compatible chains and Hyperliquid.
How does Agent Wallet protect against AI mistakes?
Every transaction runs through simulation, Blockaid threat scanning, and MEV protection. Transactions flagged as malicious require two-factor authentication in both Guard Mode and Beast Mode. Safe transactions are covered by up to $10,000 through MetaMask’s Transaction Protection program.
When can the public use it?
Agent Wallet is in an early-access program limited to roughly 200 users as of June 2026. MetaMask says a broader rollout is planned for later this summer.
