MetaMask Launches AI Agent Wallet With User-Defined Security Controls

MetaMask has launched Agent Wallet, a self-custodial wallet designed to let AI agents autonomously trade and interact with decentralized finance protocols while operating within user-defined security controls. The product is currently available to roughly 200 users through an Early Access Program, with a wider rollout expected later this summer. MetaMask is a product of Consensys.

The launch comes as crypto developers increasingly move to develop AI agents capable of managing portfolios, executing trades, and interacting directly with decentralized applications. "It's genuinely day one for agents, but the infrastructure decision can't wait because agents are already touching real money, and most of them are doing it the wrong way," MetaMask Senior Director of Product Zhen Yu Tong told Decrypt.

According to Tong, many projects currently on the market give AI agents direct access to private keys, creating the risk that agents could execute unintended transactions or lose funds through errors rather than hacks. "If the first generation of trading agents normalizes giving away your keys, we'll be rebuilding the custodial mistakes crypto spent a decade escaping," he said.

MetaMask said Agent Wallet routes transactions through the company's existing security infrastructure, including transaction simulation, scam and malicious-contract detection, Blockaid-powered threat scanning, Clear Signing, and Servo MEV protection. Rather than assuming AI models can be fully protected from manipulation, the company said it developed the wallet around controls designed to limit the consequences when agents make mistakes. "The honest premise first: You cannot guarantee an LLM won't be tricked," Tong said. "Prompt injection is an open research problem, not a bug you patch once."

In the wallet's default Guard Mode, users define spending limits, approved protocols, and other operating parameters. Transactions that exceed those rules or are flagged as suspicious require two-factor authentication before they can proceed. A less restrictive Beast Mode allows agents to operate with broader autonomy under the same underlying security infrastructure.