Introducing MetaMask Agent Wallet

Give AI agents room to act onchain with user-defined limits, Transaction Protection, and human approval in the loop.

The era of agentic trading is here and so are the myriad risks that come with giving AI agents access to real assets.

MetaMask Agent Wallet launches today via an Early Access Program to empower traders to fully seize the opportunity of this moment while remaining in control and confident with Transaction Protection.

What is MetaMask Agent Wallet?

MetaMask Agent Wallet is a self-custodial wallet for AI agents that leverages Metamask's trusted security stack, which has been battle-tested and hardened over the past decade. It gives an agent an agent-specific wallet, connects through a command-line interface (CLI), and lets the user set operating rules before the agent starts transacting. 

At launch, every transaction on Ethereum, Linea, Arbitrum, Avalanche, Optimism, Base, Polygon, BSC, and Sei passes through transaction simulation, Transaction Shield threat scanning powered by Blockaid, Smart Transactions MEV protection, and transactions deemed safe are backed by Transaction Protection coverage of up to $10,000 per month (find full details on Transaction Protection here).

MetaMask Agent Wallet is initially available via CLI for a limited group of traders and developers accepted into the Early Access Program. General availability is coming this summer.

The product is designed for crypto-native traders, automators, and builder-traders who already understand onchain workflows and want agents to help execute them. It is framework-agnostic, with support for OpenClaw, OpenAI Codex, Claude Code, Nous Research Hermes Agent, Cursor, and related agent environments.

Users always hold their own keys and can export their Secret Recovery Phrase at any time. MetaMask Agent Wallet uses trusted execution environment (TEE)-backed key security while preserving the user's ability to leave with their keys.

Trade with agents with confidence

A trading agent can watch markets, respond to prompts, generate routes, and attempt transactions faster than a person sitting at a keyboard. That speed is useful, but it changes the signing model. A single instruction can turn into a sequence of contract calls, token approvals, swaps, perps, prediction market trades, liquidity positions, or other onchain actions.

Autonomy becomes risky when wallet access is unconstrained. The agent may interpret a prompt too broadly. A contract may be malicious. A route may touch a protocol outside the user's intent. A transaction may exceed the amount a trader meant to let the agent spend.

MetaMask Agent Wallet is built around a simple premise: the agent can operate autonomously, but it operates inside rules the user defines.

Any transaction flagged as malicious or that falls outside the trader's policy, such as exceeding daily outflow limits or routing to a non-allowlisted protocol, requires human approval via 2FA before it can execute. The agent cannot opt out. Transactions deemed safe are covered by Transaction Protection to $10,000 USD. 

Guard Mode vs. Beast Mode

MetaMask Agent Wallet gives accepted Early Access users two operating modes:

Guard Mode is the default. The user sets daily spend limits, allowlisted protocols, and policy rules. When an attempted transaction falls outside those rules, it pauses for human approval via 2FA. The approval request can arrive through MetaMask Mobile push notification or an email approval link, with transaction details available for review.

Beast Mode is opt-in for traders and developers who want fewer interruptions. Security checks still run, and 2FA still triggers on transactions flagged as malicious, but the agent has more latitude around policy edge cases.

Both modes are designed to preserve the same core relationship: the agent can act, but the user sets the boundaries.

Early Access starts now

MetaMask Agent Wallet is available today in limited access through the Early Access Program.

Early Access participants can connect an agent framework, choose an operating mode, set policy limits, fund the agent wallet, and begin testing agent-driven onchain workflows.

At launch, MetaMask Agent Wallet supports full DeFi access in one wallet: swaps, perpetuals, prediction markets, LP, and more across all EVM chains and Hyperliquid.

That means a tester could ask an agent to monitor conditions, prepare a route, attempt a swap, interact with a perps venue, or review a prediction market workflow. The point of Early Access is not just to test whether the CLI works; it is to learn how real traders and builder-traders use agentic execution when live policy controls and transaction checks are part of the experience from the start.

Feedback from the Early Access Program will help shape the path to wider release this summer.

Join the Early Access Program

Additional resources

·       MetaMask Agent Wallet Early Access Program

·       Transaction Shield support documentation

·       Introducing MetaMask Transaction Shield

·       Security alerts by Blockaid