MetaMask Agent Wallet Enters the AI Payments Race

MetaMask opened its Agent Wallet to the general public on Thursday, closing a two-month early-access phase and handing any trader, developer, or builder a self-custodial wallet purpose-built for AI agents that trade onchain. The product, developed by Consensys, lets an autonomous agent run swaps, perpetual futures trades, prediction-market positions, and other DeFi actions on its own, while the person who owns it keeps hard limits on how much it can spend and which protocols it can touch. It first surfaced in June as a command-line tool for roughly 200 testers, and the wider release now lifts that cap.

Your agent finally gets its own wallet.

MetaMask Agent Wallet is now live for everyone. pic.twitter.com/F81PZ7etxv

— MetaMask 🦊 (@MetaMask) August 6, 2026

The timing is not accidental. Consensys cites forecasts that the agent economy will expand from around $5.4 billion in 2024 to $236 billion by 2034, and a crowd of companies is now competing to become the layer that holds the money agents move. Coinbase shipped its own agent wallet in February. Cloudflare started rolling out wallets for agents this month. MetaMask is betting that the security stack it spent a decade hardening for human users transfers cleanly to software that never sleeps.

Guard Mode and Beast Mode decide how much freedom the agent gets

Rather than hand an AI bot a private key and hope it behaves, MetaMask makes the owner set the rules first. During setup, users lock in daily spending limits, absolute caps, and an allowlist of approved DeFi protocols. The agent inherits those constraints and cannot rewrite them. Two operating modes then govern how tightly the leash is held.

The distinction matters most for anyone planning to leave an agent running unattended. Guard Mode treats human sign-off as the norm for edge cases. Beast Mode inverts that expectation for routine activity while keeping a hard stop reserved for the transactions most likely to drain a wallet.

Three checks stand between an agent and a costly transaction

Autonomous software opens attack surfaces that human users rarely face, from prompt injections that hijack an agent’s instructions to poisoned smart contracts engineered to look legitimate. MetaMask runs every EVM transaction through a fixed pipeline before it reaches the chain, and none of the three steps can be switched off.

At launch the pipeline covers Ethereum, Linea, Arbitrum, Avalanche, Optimism, Base, Polygon, BSC, and Sei. Transactions that clear all three checks fall under Transaction Protection, which pays out up to $10,000 per month toward losses on eligible transactions that pass the checks and still get exploited.

Why the guardrails sit on the wallet instead of the agent

The design choice at the center of Agent Wallet is simple to state and hard to build. MetaMask enforces permissions at the wallet layer, so the agent asks the wallet for approval rather than the wallet trusting the agent to act responsibly. An AI model can be manipulated, confused, or fed a corrupted instruction. A spending cap coded into the wallet does not care what the model thinks it should do. That inversion is what lets MetaMask claim autonomy and control at the same time, since the human’s limits survive even when the agent’s reasoning fails.

Gas handling reinforces the point. Agents do not need to stockpile native tokens like ETH to pay network fees. MetaMask settles the gas out of whatever asset is already moving, which removes a common failure mode where an agent stalls mid-strategy because it ran out of the one token it needed to keep transacting.

Which blockchains and agent frameworks it plugs into

Cross-network execution runs natively across Hyperliquid, Solana, and EVM-compatible chains through a single wallet and CLI, with newer networks such as Monad and Robinhood Chain in the mix. The wallet outputs structured JSON that popular agent frameworks can read directly, which is what lets it slot into existing developer setups without a rebuild. Supported tooling includes Claude Code, OpenAI Codex, Cursor, OpenClaw, Hermes, and OpenCode. On custody, the owner keeps the master Secret Recovery Phrase, and developers who prefer their own key management can use a Bring Your Own Key configuration instead.

MetaMask has company in arming AI with a wallet

The race to give machines a way to pay is now crowded, and each contender is solving a slightly different slice of the problem.

Sitting above all of them is x402, the payment standard Coinbase built and then handed to the Linux Foundation, which declared the governing x402 Foundation operational on July 14 with 40 members including Visa, Mastercard, Google, Stripe, and Shopify. That coalition signals where machine commerce is headed. It also frames MetaMask’s positioning, since the wallet only matters if agents actually start paying for APIs, compute, and services on their own.

Where Agent Wallet fits MetaMask’s plan to make crypto disappear

Agent Wallet is one piece of a longer campaign to fold crypto into background infrastructure. In February, MetaMask launched a self-custodial debit card across 49 US states with Mastercard, letting a wallet balance spend instantly at roughly 150 million merchants. Behind it sits MetaMask USD, the wallet-native stablecoin it introduced in September 2025 with Bridge, a Stripe company, backed 1:1 by short-term US Treasury bills. For an agent, mUSD offers a stable, liquid asset to trade and settle in without wrestling with volatility on every move. The card gives any profit those agents generate a direct route into everyday spending.

What a working agent economy still needs

The harder questions start now that the wallet is public. Insurance capped at $10,000 a month reads as reassurance for retail users, though it says little about how the model scales if agents begin managing six-figure positions or if a single exploit hits many wallets at once. Regulators have barely addressed who bears liability when autonomous software signs a bad transaction, and compliance frameworks for machine-to-machine payments remain thin. MetaMask has shipped the custody layer first and is betting the rules catch up. The next signal to watch is adoption data: how many agents run in Beast Mode unattended, how often the 2FA pause actually fires, and whether the Transaction Protection fund ever pays a claim large enough to test its limits.